Mandy Lu retweeted
Americans are smuggling Chinese cancer medications in their suitcase.
26 boxes of Zeggrovy will cost you $10k in China.
AstraZeneca licensed it from the. Chinese company and is projected to sell it around $200k for the 26 boxes.
We don’t have to live like this.
In January 2025 my mom’s lung cancer spread to her brain. The drug with the best chance of helping her was approved in China but not here.
A doctor told me, almost as an aside, that if she were Chinese she could buy it at a pharmacy.
So I flew to Shanghai and came home with 26 boxes in my luggage. That was 19 months ago. My mom is still here, still working, and in her words has had an amazing three years.
The drug was approved in China in 2023. The FDA approved it in July 2025. It still is not for sale here. I know of at least 30 Americans who have made the same trip.
I have been scared to tell this story because I worried it could cost my mom access to the medicine keeping her alive. But the problem matters more than my silence. These drugs need to be developed and available here, and that means FDA reform.
Art Allen at KFF Health News told our story this week. It also ran in The Washington Post.
kffhealthnews.org/health-ind…
Mandy Lu retweeted
We’re like one hack away from me finally being able to get my medical records easily
Mandy Lu retweeted
People are getting way too comfortable treating others like garbage, acting cruel, and carrying on as if their disrespectful behavior is perfectly acceptable.
Mandy Lu retweeted
Lots of Security incidents today, here's some practical tips for those who just wanna protect yourself:
1) UPDATE EVERYTHING - main targets are:
a) Browsers - Chrome, Safari, Firefox
b) OS: : Settings -> General -> software update; Linux: sudo apt update && sudo apt upgrade; Windows: I think there's a button. Do this for any remote home servers & Openclaw/hermes boxes
c) Phones: Update it all
d) Desktop apps (Slack, Cursor, Discord, etc)
2) Limit web browsing this week: Stay within walled gardens (twitter, youtube, etc); don't click random links this week. Just wait until the patches go through. Do step 1 again after a week.
3) Avoid untrusted Wifi networks until your devices are updated
4) Stay vigilant about phishing emails offering "certificate fixes" or fraud updates
5) Have an iPhone 11-16? TURN BLUETOOTH OFF for the time being until apple patches come through.
6) Code/Dev: UPDATE ALL YOUR REPOS - @charliermarsh has already updated uv 0.13.4 which reacts to the eMudra incident for uv (Python), Typesript according to Claude has equivelant. Tell your agents to go and update all your active repos to update package manager across uv, npm, bun, cargo, etc etc
What advice did I miss?
Mandy Lu retweeted
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.