ai, ml, agents and busy melting tokens aspring token broker, currently tokenmaxxer in pursuit of Super Intelligence

Joined September 2023
Drin retweeted
i own a relatively new (2025) samsung tv. i kept getting weirdly targeted ads. i tried reversing the firmware but it was aes encrypted and no keys unless tear it apart and do uart/jtag magic. zero days it is. root shell on new samsung TVs! discovered PRIVACY HORROR. write up?
194
549
71
8,897
303,219
Of course it can. Take all 100,000+ games on steam, scrape their descriptions and metadata, semantically plot them in vector space using embeddings, mathematically choose a location in vector space far away from neighbors, convert that back to a description and metadata, boom, brand new ideas ranked by how unlike any other ideas they are.
Replying to @SyntheticBeef
one thing AI can't do is create a brand new idea
147
106
31
3,332
243,186
Two invaluable life skills: 1) Get good at talking to strangers 2) Be comfortable talking to large crowds of strangers Both involve worrying way less about what others think of you.
37
68
3
1,540
20,148
what the fuck is the data store of these platforms and they're getting hacked left and right
45
very fun!!!
Replying to @Railway
Yea. their sealed variables is just a UI feature. I should’ve noticed it then
46
> audit also found a separate concern: its existing lock contains 49 security advisories across 16 packages, including 14 high-severity advisories 🫣
40
Drin retweeted
Lakebed, Postplan, and Shoo will be down indefinitely until Railway gets their shit fixed and I can actually redeploy them with rolled keys. Incidents happen. I understand. Blocking deploys so we can roll keys without downtime is unacceptable. I'm disappointed in Railway.
104
22
13
1,854
124,996
busy day with @AmpCode
8
316
so @Railway secrets aren't so secret after all 💀
58
this is the last straw in using @Railway 🤦🏻
46
Drin retweeted
aren't you the moron that exposed your API keys on stream/uploaded your .env files and lost $90,000 and cried about it on your X lol xitter.cf/JustLingonberry/status… you're a real dev for sure!
FINALLY found how my key got leaked and got the $90,000 bill from google Opus 5.5 said codex had PUBLISHED MY ****ING .ENV TO CLOUDFALRE PAGES ‼️ Meanwhile codex couldn't find anything, refused to explain itself and flagged my chat for cybersecurity risk lol
79
138
55
4,802
347,280
self-hosted orbs in @AmpCode 😭🫶🏻
49
using @AmpCode to do mitigation of php vuln exposure across my different servers 😜 CVE-2026-109618 & CVE-2026-109619
3
6
623
still monitoring the situation
1
38
still no updated packages...
17
--- BEGIN PRIVATE KEY ---
39
758
17
13,083
154,361
can't orb right now :( @AmpCode
1
126
PHP sites behind Cloudflare already have an initial set of WAF rules deployed for the known exploit vectors in these vulnerabilities. The rules are available to all customers, including free. We are seeing early attacks emerging and are updating mitigations as new vectors show up. This is a STOPGAP only. Patch as soon as @ThePHPF releases the update at 14:00 UTC today.
The PHP security team is giving advance notice: Upcoming security release Wed, Oct 21st 2026, 14:00UTC, two critical vulnerabilities, both rated CVSSv4 9.2. PHP users are encouraged to prepare to update. Earlier release if details become public or active exploit evidence.
86
873
192
5,345
730,160
Amp set up his own schedule to run again when the disclosure happens, automatically applying the fixes in addition to the mitigation we just made :D beautiful.
1
77