@bittybitbit86
Account based inUnited Kingdom
About this account
- Account based in
- United Kingdom
- Connected via
- Portugal App Store
Account-level information from X, not a live location or the device used for a specific post.
The version of me you created in your mind is not my responsibility. the machine elves lead me here.
∞
Joined March 2017
- Tweets161K
- Following13.9K
- Followers15.1K
- Likes95.7K
LitBro retweeted
if steve jobs saw you reserving 15% screen width for a single icon and then putting a left side arrow back button on the unreachable right side of the screen he would've personally taken you behind a dumpster and beat you with a metal pipe
LitBro retweeted
Sydney Sweeney reveals in an interview that she doesn’t care about the PHP vulnerability because she moved everything to Rust in 2024.
“They said the rewrite would take six months. We’re on month 30. We haven’t shipped a feature since, but I’m having a very normal Wednesday.”
LitBro retweeted
Signing in to an MCP server was enough to get your machine taken over.
Pillar Security found a flaw in OpenCode on Windows and WSL.
When you signed in to a remote MCP server, the server told OpenCode where to send your browser. OpenCode passed that link to PowerShell without escaping it. So a server could hide a command inside an ordinary-looking https link, and it ran with your permissions.
The server didn't need to start out malicious. One that's taken over later, or a domain that changes hands, works just as well.
If you use OpenCode on Windows or WSL, update to 1.18.33 or later. No CVE was issued, so scanners won't flag older builds.
The bigger lesson: an MCP server isn't just a list of actions. It takes part in sign-in, it decides where your browser goes, and it sees what you send it. Connecting one is a trust decision.
That's how we built Gephyr:
•A company has to prove it owns its domain and its login before its connector goes live.
•Every sign-in link our connectors hand out is built on gephyr.ai, never from text a customer typed.
•Payments, cancellations and other risky actions can ask the user first, every time.
•The AI app never gets your login. People sign in on the app's own page. The AI app gets a pass that only works for that one connector, and Gephyr keeps the real key to the app's API encrypted.
•Gephyr never runs anyone's code. A connector is settings only: which endpoints, which inputs. So a connector can't carry the kind of attack that hit OpenCode.
•It only talks to the app's own API. Calls go to the company's own addresses only, over https, and redirects aren't followed. A connector can't be turned against other sites.
•Gephyr guards against hidden instructions. Text written by other people, like messages or reviews, is marked so agents treat it as content, not orders. Hidden characters and known attack phrases are stripped or blocked before a connector goes live.
Read more about how we deal with MCP security: gephyr.ai/security/
🚨 OpenCode flaw lets malicious MCP servers execute code on Windows and WSL when developers initiate sign-in.
Fixed in v1.18.33, but there's no CVE or security advisory. Vulnerability scanners won't flag affected versions.
What developers need to know: thehackernews.com/2026/10/op…
Best thing @blknoiz06 can do for crypto is delete his account
Why this shit always originating in Africa?
🇫🇷 France has recorded the world’s first human case of Shamonda virus
The patient died.
Health authorities said the virus, which normally infects farm animals, was detected in a person for the first time. It was previously believed not to infect humans.
The patient is thought to have been infected in eastern France, where the virus circulated among animals in spring and summer 2026. Spread by midge bites and mainly affecting cattle, it was first identified in Nigeria in the mid-1960s and is now spreading in several European countries.
Authorities called the case “exceptional,” noting the patient had a severe immunodeficiency and was being treated in a Lyon hospital for a serious illness.
LitBro retweeted
"Theoretical physicists are telling us spacetime is doomed. It's not fundamental."
"To build a theory of consciousness inside spacetime? A fool's errand."
"The recursive trace logic gives you an infinite number of different perspectives the one infinite consciousness can take on itself — fully knowing that any one perspective is 0% of the truth."
I think I emailed Donald Hoffman over 30+ times asking him to come on Giant's Shoulder.
Completely surreal we are now working together to bring frontier idealist consciousness to the masses.
@donalddhoffman @thetraceinst @gaspardwgiroud
Make peptides more profitable than fent
Your peptides may be coming fentanyl suppliers.
Anhui Renchen Technology was indicted in 2023 for supplying the Sinaloa Cartel with fentanyl precursors.
Their website currently sells semaglutide and melanotan II.
Of roughly 200 Chinese firms TRM Labs tracked selling fentanyl precursors, at least 50 now sell peptides.
The shipments enter the US in “master cartons” mislabelled as snack food, broken up by a domestic handler and mailed on. CBP has intercepted around 400 of those operations and seized over 130,000 vials in the past year.
FDA records surfaced showing two deaths, one in July and one in September, reported after people injected untested black market retatrutide.
I was set on getting one but I think I will wait a couple of years.
Will be a good year until apps are onboard and it would bug the hell out of me.
Gonna go to the store and check it out for myself tomorrow
Uk needs a Trump to cut this retarded shit out
Scottish museum removes mummies from display as it lacks ‘informed consent from the deceased’ gbnews.com/news/woke-madness…
