alex maleki

So basically, today PHP got two critical bugs that let anyone run code on your server without even logging in, which is bad, and then the details leaked before the patch was even out, which is worse, and it works on WordPress and MediaWiki and Magento and Joomla and Laravel, and Censys says like 1.5 million servers are running a version with no fix, so the NSA was like "take your system offline," and the FBI was like "take your system offline," and CISA and the UK and CERT-EU were all like "take your system offline," and then the Prime Minister of Japan, the actual Prime Minister, posted at 5:55 in the morning telling 48.8 million people to take their system offline, so everyone took their system offline, like the Dutch cybersecurity agency took its own website offline, and the Dutch parliament went offline, and the Port of Rotterdam went offline, and Finland and France and Denmark started pulling government sites, and Wikipedia went down, and Archive.org went down, and Asana and GOG and Something Awful went down, and the University of Vienna's webmail went down for some reason, and that's just PHP. Because GitLab also dropped a CVSS 10.0, which is the highest score they give out, for a bug that's been there since 2014, so that's every self-hosted GitLab for twelve years, and then LiteLLM 1.107.0 got hijacked and shipped a credential stealer and a remote access trojan in every single wheel and the Docker images, including latest, and you didn't even have to import it, just installing it was enough, and it's the second time this year, and then Railway paused every deployment on the entire platform because someone got into the environment variables, so now everyone has to rotate every secret they've ever stored there, and TiDB Cloud said someone was walking around inside with stolen credentials for basically a month and an extortion group says they took 10.6 terabytes, and Zeabur got breached for the second time in two months and is just shutting down, like the whole company, and Node.js patched remote code execution and a TLS bypass, and CISA says Plex is being actively exploited, and someone took over 300 Tor exit relays to steal SSH passwords, and SafePay ransomware has hit over 600 critical infrastructure orgs, and India's biggest bank filed a data loss incident, and Japan has been in an official state of emergency in cyberspace since October 9, which honestly explains the 5:55 AM post. Oh, and eMudhra, a certificate authority that's issued over 60 million certificates, whose entire job is proving websites are who they say they are, was supposed to be using private keys that are random numbers over a hundred digits long, and one of them was 4. Just 4. And the others were like 66 and 237. Anyway, it's Wednesday.

We’re live! 💡 Introducing Idealab.ai. 1.2M+ business ideas rooted in real-world problems. Free to explore and use. Built on @Bill_Gross' lifetime of company-building experience, powered by #AI. What will you build? idealab.ai/

This is pretty terrifying..

Chips are hard for 2 reasons: 1) Design cycles are long and expensive, and like any other product, tough to get right the first time 2) They require a ton of software to make them useful, which is also, super expensive So funding semi companies becomes a matter of access to capital as much as it is about exotic new tech. Question that’s on my mind when I see chip companies: can this team raise the TON of capital it needs to make it?

Thread of childhood artworks by famous artists 🧵 1. Edward Hopper, 9 years old

Today, @lightspeedvp is announcing that we’re leading a $35M Series A in @pika_labs, the company that’s redesigning the entire video-making and editing experience with AI. Founded by @demi_guo_ and @chenlin_meng, Pika is making it possible for anyone to create high quality video through their state-of-the-art video model and creation platform, both of which launch today. Check out the below video (featuring an animated @elonmusk) to see why Pika's model and product are so mind blowing, and why we're so excited to partner with this team, alongside existing investors @natfriedman, @danielgross, @eladgil, and more.

You can give ChatGPT a picture of your team’s whiteboarding session and have it write the code for you. This is absolutely insane.

The human nervous system, an intricate network, from the brain - the command centre, spinal cord and branching nerves, 📹IG SciePro

Today marks the culmination of a dream long-held and a journey often imagined, but only now realized. I'm filled with immense pride and unbounded hope as I announce the launch of PROTOSTAR. I've always believed in the power of dreams and the pursuit of goals that go beyond balance sheets, boardrooms, and the neighborhood block. I dreamed of a venture that could bring together great minds and hardworking people to make a positive, tangible impact on the world. PROTOSTAR is the manifestation of that dream. It is a strategic consulting firm, but more than that, I hope it will be a platform for change dedicated to helping innovators tackle the world's most pressing problems. Our mission is simple: to drive a sustainable and equitable future and make a meaningful difference in the lives of people across the globe. Our path forward is illuminated by the pioneering work of innovators like @Bill_Gross, a personal mentor and friend, who believes in and supports the PROTOSTAR mission and dream. And @AJWinc, our strategic partner for government engagement and energy transition policy, who bring to the table 20 years of experience facilitating access to government funding and creating compelling narratives for ESG investors. But this is more than just a business venture – it's a calling. The launch of PROTOSTAR is the fulfillment of many years of preparation and work and a personal dream come true. As I step into this new chapter, I invite you to join us on this transformative journey. Together, let's light up the path to a sustainable and equitable future and make a lasting impact on our world. Thank you. DA --- + To learn more about PROTOSTAR and our mission, visit: protostar.energy/ + To read the launch announcement, visit: businesswire.com/news/home/2… + Watch the launch video below: ⬇️ ⬇️ ⬇️ #PROTOSTAR #Decarbonization #Sustainability #ClimateTech #AI #Entrepreneurship

Here are some incredible things people are already doing with GPT-4 It’s been less than 3.5 hours 🧵 A thread

GPT-4 does drug discovery. Give it a currently available drug and it can: - Find compounds with similar properties - Modify them to make sure they're not patented - Purchase them from a supplier (even including sending an email with a purchase order)

REMIX or RIPOFF? 🧵 The Fifth Element (1997) Frida Kahlo (1944) 1/55