i crave knowledge and cats and borgirs || techbro, gamer, jack of not all trades || designing systems || rl envs @ @mercor
India
Based in India
- Tweets 672
- Following 753
- Followers 179
- Likes 1,381
openai just released astra, now my tl is gonna be filled with ai larpers marking this day as end of everything known to mankind
2
133
Career update - Joining @mercor as Member of Technical Staff.
I'll be working on RL environments, evaluations, and the infrastructure that helps train and assess frontier Al models.
9
27
2,499
we see shit like this, and then there are non technical people pushing to production, what can go wrong?
You have to review all LLM code!
Codex 5.5 tried to push this awful hack to our Metal backend when it was coding font rendering. It decided to implement hacky "robust buffer access" style OOM check inside the shader and hacked our whole Metal binding architecture to add a special bind group slot 30 (hardcoded) to deliver sizes of all buffer bindings. This of course made the binding model super slow and required extra data for each buffer.
3
147
2026 is the year of supply chain attacks
🚨 We’ve confirmed the intercom-client@7.0.4 was compromised in the ongoing Mini Shai-Hulud worm attack.
The npm package includes a malicious preinstall hook that downloads and executes an unverified Bun binary, then runs an 11.7 MB obfuscated payload designed to steal Kubernetes, Vault, cloud, GitHub, and CI/CD secrets.
The attack closely overlaps with the SAP CAP, Cloud MTA, and lightning@2.6.2 compromises.
2
4
21
5,416
its great to see oss models getting so close to frontier models.
DeepSeek releases DeepSeek-V4. 🐋
- DeepSeek-V4-Pro: 1.6T params
- DeepSeek-V4-Flash: 284B params
DeepSeek-V4-Pro rivals Claude-Opus-4.6-Max, GPT-5.4-xHigh and Gemini-3.1-Pro-High.
They support 1M context length, thinking and set new records for Codeforces.
4
78
clawdbot is a massive tech debt. the other day i found bunch of clawdbot instances with gateway ports open (no auth) on public interface using shodan.
then i used that to connect and was able to do literally anything on that machine, even got some ssh keys 😭
even on instances with that specific port closed (newer version binds to non public interface now), there was an mdns service running which advertises the name of the user, bot name, ssh port, binary paths etc publically. goldmine of data.
1
5
185
whats with this hype for omarchy, why would you run a broken rolling distro for a mission critical service
1
29
644