Do you remember when you joined X? I do! #MyXAnniversary

It's simpler than it sounds: 1. Notice that the project includes a 22k dependency called cpuinfo 2. Prove that the only feature used from cpuinfo is the one to check the CPU brand name 3. Code a C function that reads the CPU brand name in 51 lines (it could be shorter) 4. Done

> be me > get dm > "smelly i found goop" > wtf i love goop (malware) > "I got a weird DM on Telegram. It looks suspicious and I think it's malware" > t(.)me/Exterav > some weird plugin thingy > written in Russian > telegram goop? > recommends plugin for Telegram > download plugin > base64 encoded stuff that is also xor'd > base64 decode, undo the xor stuff > Python code that downloads stuff > downloads from intark(.)shop/api/bkeepfile > very specific web agent in request > try to download with regular web agent > fails > ok > download with very specific url agent > "User-Agent":"Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Mobile Safari/537.36", "X-LD-Code":"GYW7gDO5dyKO0VCt8uAKS9rY5vENZW_g" > gives me big ass fuck off python script > plugin is malware designed only for android users > plugin wants to spy on your Telegram > does some weird stuff > dont understand because i dont do android malware > no idea what im looking at > never seen before on VT Initial payload: 84aaa0c388ad46322e2155212c182e00548eb18de769fcfa2b919e3ebcec45de Secondary (primary Android payload): 018368d56a4b272be8825efd4e965354b56f3b9fae73137cee7ad039d3c3e347 C2: intark(.)shop Other C2 (something about Session Relays in TG?) 185.99.97.216:8081

Lmao. And that's why you don't just trust random domain extensions. "Oh I like .as because my company name ends with as" Same shit with .ly (Libya)

HUBSPOT CUTS NEARLY 660 JOBS 7% of staff. CEO Yamini Rangan told employees it is "not driven by AI-related efficiencies" and "not simply a cost-cutting exercise." The same filing books $65M to $75M in severance charges and reaffirms 2026 guidance. Stock down 45% this year. $HUBS

Hey uh, @Keurig - what the hell is a COFFEE MACHINE uploading, let me double check... ONE FUCKING TERABYTE OF DATA IN 10 DAYS!?!? Immediately unplugging that. Getting my parents a new coffee machine.

DON'T scan your face for Roblox. DON'T scan your face for Discord. DON'T scan your face for Twitter. DON'T scan your face for YouTube. DON'T scan your face for Instagram. DON'T scan your face for Reddit. DON'T scan your face for Spotify. DON'T scan your face for Twitch.

I got hacked at 3:59 AM without clicking anything. My voicemail handed the attacker my Telegram login code. Here is exactly how it worked, so it doesn't happen to you. 3:54 AM. My phone rings about ten times in a row, No Caller ID. That was not harassment. It was the attack: keep my line busy. Meanwhile, the attacker asks Telegram to log in with my number and picks "send the code by phone call". My line is busy, so Telegram's robot call lands on my voicemail and reads the code out loud to it. Carrier voicemail can often be reached remotely, with a default PIN or a spoofed caller ID. He listens to the message. At 3:59 he is in. Fortunately, the attack was noisy. The calls woke me up. At 4 AM I only wanted to go back to sleep, but I had the presence of mind to check my notifications. Telegram was showing a new login from a device I didn't know. That check is what saved me: I ended his session within minutes. If I had rolled over, the next day would have been a mess. In those few minutes he had already typed /balance, then /start on every old wallet bot he could find in my chats. He was hunting for funds tied to my Telegram. The bots were long dead and nothing was lost. He still had time to set his own 2FA password on my account. What would have stopped it: Telegram two-step verification, with a recovery email. With a password on the account, the code alone is useless. Your voicemail. Change the PIN, block remote access, or turn it off (##002# cancels call forwarding on most carriers). Same for WhatsApp and any service that can send a code by voice call. No seeds, keys or passwords in Saved Messages. Ever. A burst of masked calls at night is a signal, not a nuisance. Check your notifications and your active sessions. I have been building in crypto for more than ten years and I had never thought about my voicemail. Check yours today.

this guy is about to become a millionaire.

slovenia is about to get rich off one tweet

Shatner, be at the ready…

This guy?

JUST IN: UFO whistleblower David Grusch claims U.S. troops opened fire on 7-foot “reptilian” beings found alive at the wreckage of an alleged alien spacecraft.

Cloudflare is building its own Certificate Authority to give websites free SSL/TLS certificates. It has applied to be trusted by Chrome, Apple, Microsoft and Mozilla, and is acquiring an existing trusted root from GlobalSign. This would let Cloudflare issue the TLS certificates websites use to prove their identity and establish HTTPS connections. And starting in 2027, it plans to issue post-quantum certificates too. Cloudflare is now moving into the trust infrastructure behind HTTPS itself. Source: blog.cloudflare.com/cloudfla…

I literally can't focus on anything but Dario here 😭

???

I've never had THIS much fun building, Opus 5.5 is so fun. Excalidraw directly in the office, and an elevator to take you to your other projects. Don't forget to pet the dog.

BREAKING: Ukraine’s former Defense Minister Mykhailo Fedorov launches “Army of Robots”

AHAH HAHAHAH COPILOT OS HAHAHAHAHA WHAT THE FUCK SATYA YOU FUCKING DOOFUS HAHAHAHAHAHA

jesus...

I agree with Anthropic on this. This model is way too powerful to be turned to war. They have Grok. We need answers, we need cures, we need longevity and benefits to humanity from this technology. The government acting like this is only going to get Anthropic more support.