Siddhartha retweeted
Here's why the eMudhra screwup is of colossal proportions..
Any embedded/IoT device that trusts their compromised roots and never checks revocation accepts forged signatures forever.
A permanent hole in every device.
Siddhartha retweeted
The dehatification of Indian cinema needs to be studied. We went from dil chahta hai & zindagi na milegi dobara to absolute gutter level slop of gaali galoch and jhopad patti.
The decision to move on from well dressed well spoken characters to absolute gawars is haunting India.
Siddhartha retweeted
We believe voice is the most natural way to interact with intelligence, so we created Dessa, the most authentic full-duplex speech model ever built. Talking with it feels like talking with a person…full of emotion, nuance, pauses, and a natural cadence.
block.xyz/dessa
Siddhartha retweeted
So basically, today PHP got two critical bugs that let anyone run code on your server without even logging in, which is bad, and then the details leaked before the patch was even out, which is worse, and it works on WordPress and MediaWiki and Magento and Joomla and Laravel, and Censys says like 1.5 million servers are running a version with no fix, so the NSA was like "take your system offline," and the FBI was like "take your system offline," and CISA and the UK and CERT-EU were all like "take your system offline," and then the Prime Minister of Japan, the actual Prime Minister, posted at 5:55 in the morning telling 48.8 million people to take their system offline, so everyone took their system offline, like the Dutch cybersecurity agency took its own website offline, and the Dutch parliament went offline, and the Port of Rotterdam went offline, and Finland and France and Denmark started pulling government sites, and Wikipedia went down, and Archive.org went down, and Asana and GOG and Something Awful went down, and the University of Vienna's webmail went down for some reason, and that's just PHP. Because GitLab also dropped a CVSS 10.0, which is the highest score they give out, for a bug that's been there since 2014, so that's every self-hosted GitLab for twelve years, and then LiteLLM 1.107.0 got hijacked and shipped a credential stealer and a remote access trojan in every single wheel and the Docker images, including latest, and you didn't even have to import it, just installing it was enough, and it's the second time this year, and then Railway paused every deployment on the entire platform because someone got into the environment variables, so now everyone has to rotate every secret they've ever stored there, and TiDB Cloud said someone was walking around inside with stolen credentials for basically a month and an extortion group says they took 10.6 terabytes, and Zeabur got breached for the second time in two months and is just shutting down, like the whole company, and Node.js patched remote code execution and a TLS bypass, and CISA says Plex is being actively exploited, and someone took over 300 Tor exit relays to steal SSH passwords, and SafePay ransomware has hit over 600 critical infrastructure orgs, and India's biggest bank filed a data loss incident, and Japan has been in an official state of emergency in cyberspace since October 9, which honestly explains the 5:55 AM post. Oh, and eMudhra, a certificate authority that's issued over 60 million certificates, whose entire job is proving websites are who they say they are, was supposed to be using private keys that are random numbers over a hundred digits long, and one of them was 4. Just 4. And the others were like 66 and 237. Anyway, it's Wednesday.
Siddhartha retweeted
Hey, it is Wednesday
OpenCode hacked
eMudra had picked a private key value of 4, thus everything is now deemed unsafe.
PHP, running 70% of the internet, has an insane hack...
Happy getting internet getting humped day
Siddhartha retweeted
The only way to not let any company read anything is to run AI locally.
I really dislike these sales pitches of just “end to end encrypted” AI or “made in India” AI.
Make it fast, cheap, intelligent and exactly tell what data you retain and don’t retain. Simple as that.
More details about Dark.ai in Eternal's shareholder letter. It's being positioned as a 'privacy-first'
AI model, with a global launch slated this year.
"Dark uses fine-tuned frontier open-weight models, running inside our own infrastructure.
End-to-end encryption. We cannot read your conversations, even if we are forced to. Context carries across sessions through an encrypted memory management layer you control.
Dark is in the business of keeping you and your thoughts safe. Your thoughts, questions, insights, research, ideas, emotions, everything – stays within your end-to-end encrypted sandbox, so you can talk about anything without any lingering uncertainty in your mind. Because greatness is always born in the dark.
Dark is built for power users – founders, researchers, scientists, enterprises and governments – who want to keep their thoughts private, because privacy is essential for competitiveness. On top of privacy, we have fine-tuned our models to give you the absolute best quality of answers we have seen from any LLM (benchmarks will be revealed soon). Our models are trained to not please you, and tell you what they think is the truth.
Dark will launch globally, hopefully within 2026"
Siddhartha retweeted
Google's Eric Schmidt dated a woman 24 years younger than him.
They broke up.
She went on to marry Dario Amodei, the founder of Anthropic.
Then she got her ex into Anthropic's Series A.
His stake is now worth ~$20 billion.
Be nice to your exes.
Siddhartha retweeted
We are preparing representations to @GoI_MeitY, @IndianCERT and @ccaindiapki on the compromise of the private keys of eight eMudhra (emSign) intermediate certification authority certificates. Given the scale of the issue, Cabinet Minister @AshwiniVaishnaw must issue a public statement and outline the steps being taken to address it.
Siddhartha retweeted
one of eMudhra’s CA private keys was literally 4. google and mozilla acted within hours.
MeitY’s CCA licenses eMudhra. CERT-In hasn’t issued a public advisory till now. eMudhra works as a technology provider for government project.
literally zero accountability.
private keys from 8 intermediate CA certs have been compromised (eMudhra)
Happy "Update everything" day to all my pager-carrying friends
emudhra.we-have-a-problem.co…
Siddhartha retweeted
In the US, most places have a no-questions-asked return policy. Macy’s has 30 days, Apple has 14. We could’ve had that too, if not for these cheap bastards. India isn’t low-trust because it’s poor. It’s low-trust because it has no values.
Siddhartha retweeted
Why the fuck are Indians hated so much? What have they done to deserve this level of hatred?
Have Indians promoted terrorism? Have they colonized your countries? Enslaved your people? Stolen your homes? Taken away your families? Kidnapped your children? What exactly have millions of ordinary Indians done to deserve this much racism and hostility?
Is it because they're educated, intelligent, ambitious, hardworking, and competing for the same jobs as you? Since when did intelligence and ambition become crimes? Since when did working hard to build a better life become a reason to be hated?
If your problem is job displacement, then why aren't you directing the same anger toward artificial intelligence?
Why not question AI? Why not question ChatGPT, Claude, Grok, Anthropic, OpenAI?
AI has the potential to displace far more jobs than Indian immigrants ever could. Yet somehow, the Indian engineer, the Indian student, the Indian doctor, and the Indian worker become your enemies.
Why? Because it's easier to target a human being with a different skin colour or accent than to confront the actual economic forces changing your world?
And understand one thing clearly.
If an Indian refuses to engage with your racism, if they ignore your insults, if they choose not to respond to your hatred, it doesn't mean they lack a spine.
It means your hatred isn't worth their time.
Indians don't owe you an apology for being educated, ambitious, hardworking, successful, or simply existing.
Being Indian is not a crime. Being successful is not a crime. And your insecurity is not a justification for racism.
Siddhartha retweeted
this is why india can't be saved and why the people with brains are itching to leave so bad. the minority who try to save the country are constantly pushed to the side and ignored and even treated as enemies of the state
not the fault of colonizers, its their own fault. indian people can't tolerate criticism and dismiss anyone who actually proposes better solutions. indians who leave dont even wanna ever go back to live there amongst the *general* population, that should tell u everything about this place
too many dirty ass people who DO NOT care about the collective. the gods have left the land long ago. idiots will trash mother earth, pollute a river they call the most sacred, and then still think they have the favor of any of the gods they're worshipping. can't respect the living land they live on yet "sarrrr we will be worlds #1 nation saaarrr jai hind"
