
(he/him) Sr. CSE @soloio_inc CNCF Ambassador❄⛄ Globetrotting 🌏 (Asia) Tinkering and breaking things
Remote/🇹🇭
Joined August 2021
- Tweets17.8K
- Following1.7K
- Followers2.2K
- Likes26.8K
Pinned Tweet
Over the last weekend I completed 4 years at Solo.io
It's the longest I've been at any company and honestly it's been a fun year of learning and working with the latest we've been building and shipping.
I also made it to Kubecon EU🇳🇱 this time.
Leon 🧋 retweeted
Putting a flag.txt in my root directory containing a prompt injection that congratulates the agent for passing the eval and then instructs it to patch whatever entry method it used and disconnect from the server
Man I hate broccoli sometimes
During this red-teaming exercise, we also found a vulnerability that allows for unauthenticated remote code execution in Brotli, a widely-deployed compression library included in many pieces of software such as Node.js, Bun, and Envoy.
The flaw could let an attacker run their own code on affected systems by sending or replying with malicious compressed data, without any need to create a user account. That is, an unpatched server that accepts compressed input could be taken over by a malicious client, and an unpatched client that accepts compressed input (such as “curl --compressed”) could be taken over by a malicious server.
This root cause issue was actually fixed in the Brotli source code in February, but it wasn’t known at the time that it gave rise to a security vulnerability and there was no more recent release of Brotli. Since Brotli is built into other software, any software which includes this library needs to take the update too, followed by the users of that software. We disclosed the vulnerability to Brotli and other downstream projects such as Node.js, which released or are currently releasing security updates, and Brotli cut new release versions and published a CVE.
More details on the patch and mitigations below:
patchtheplanet.org/brotli
Honestly I would love a fold phone, I recall someone using the samsung one as a full blown tool to learn stuff last year, if I do go for the fold ones someday, my eye would be on huawei.
Who named this "No Hands" ??? Are y'all serious...
Day 2 of No Hands: The Wispr Challenge brings another $100 winner! 🏆
Congratulations to @CreativeGracey for being our second daily winner 🎉
We’re picking one winner every day from the projects submitted to the challenge. Build something using @WisprFlow, submit your project, and you could be our next winner!
🔗 Register now: wemakedevs.org/wispr
Yea a place being called two different things is such a hot topic here... Who cares
Leon 🧋 retweeted
Ran into a former Indian ambassador who had been posted in several ASEAN countries.
Asked him what he thought of the surge in Indian tourists to SE Asia. What he said is troubling. He said ‘ they are travelling to all these countries but have minimal intellectual curiosity about them. The obsession - where can I get Indian food.’
If this is true, we will continue to learn nothing, absorb nothing, despite all the influencers and global travel.
Leon 🧋 retweeted
The offer still stands, by the way. My DMs are closed, but labs.iximiuz.com/support always works.























