Brian Jorgensen retweeted
The chances of a rabbit kicking you off your scooter are incredibly low… but never zero 😭
Brian Jorgensen retweeted
Software horror: litellm PyPI supply chain attack.
Simple `pip install litellm` was enough to exfiltrate SSH keys, AWS/GCP/Azure creds, Kubernetes configs, git credentials, env vars (all your API keys), shell history, crypto wallets, SSL private keys, CI/CD secrets, database passwords.
LiteLLM itself has 97 million downloads per month which is already terrible, but much worse, the contagion spreads to any project that depends on litellm. For example, if you did `pip install dspy` (which depended on litellm>=1.64.0), you'd also be pwnd. Same for any other large project that depended on litellm.
Afaict the poisoned version was up for only less than ~1 hour. The attack had a bug which led to its discovery - Callum McMahon was using an MCP plugin inside Cursor that pulled in litellm as a transitive dependency. When litellm 1.82.8 installed, their machine ran out of RAM and crashed. So if the attacker didn't vibe code this attack it could have been undetected for many days or weeks.
Supply chain attacks like this are basically the scariest thing imaginable in modern software. Every time you install any depedency you could be pulling in a poisoned package anywhere deep inside its entire depedency tree. This is especially risky with large projects that might have lots and lots of dependencies. The credentials that do get stolen in each attack can then be used to take over more accounts and compromise more packages.
Classical software engineering would have you believe that dependencies are good (we're building pyramids from bricks), but imo this has to be re-evaluated, and it's why I've been so growingly averse to them, preferring to use LLMs to "yoink" functionality when it's simple enough and possible.
Brian Jorgensen retweeted
🚨 Do you understand what happened today.. a single Monday..
> Zuckerberg announced he's building AI to do his own CEO job.. after firing 31,000 people to "protect" it..
> someone bought $1.5 billion in S&P futures FIVE MINUTES before Trump announced halting attacks on Iran.. the biggest insider trade in broad daylight..
> then the Pentagon started deploying airtroops to Iran anyway.. the "peace" lasted 12 hours..
> then Iran launched missiles at Israel tonight.. so the peace someone made $1.5 billion off of was never real..
> OpenAI started guaranteeing Wall Street 17.5% minimum returns AND early access to unreleased models.. nonprofit to "we'll pay you to invest in us"..
> Jensen Huang told Lex Fridman "I think we've achieved AGI".. then walked it back in the same sentence.. the man selling the shovels just said the gold rush is over and expects you to keep buying..
> Claude launched an AI that sits at your desk and does your entire job while you're not in the room.. shipped it as a Monday night feature update..
> Goldman Sachs raised US recession probability to 30%..
> the owner of OnlyFans died at 43 with $3 billion.. couldn't buy more time..
> Larry Fink called tokenization "the next internet" after calling Bitcoin money laundering for years..
all of this.. one Monday.. if you're not following me you're finding out about this 48 hours late from someone who read my post..
it's only getting crazier from here.
🚨 This week was the most insane week in tech history and most people missed half of it..
> the Pentagon adopted Palantir as the CORE US military AI system.. the government just picked its AI.. and it's the one that builds surveillance software..
> Peter Thiel's Founders Fund put $2 billion on a cow collar startup.. GPS collars for cows.. they call their algorithm a "cowgorithm".. two billion dollars..
> OpenAI announced they're doubling their workforce to 8,000.. the company that told everyone AI replaces jobs is hiring 3,500 more people to build the thing that replaces jobs..
> HSBC announced 20,000 job cuts.. 10% of their entire workforce.. because AI made them unnecessary..
> Jensen closed Nvidia GTC with singing robots and a digital clone of himself.. then said the chip market will hit $1 trillion..
> Bernie Sanders sat down with Claude AI on camera.. asked it about mass data collection.. and the AI snitched on its own industry to a US Senator..
> Elon launched Terafab.. a $25 billion chip factory.. then said money won't exist in the future and you'll be able to take free trips to Saturn..
> the Big Five are spending 94% of their operating cash flow on AI infrastructure.. Amazon is projected to go $28 billion negative.. Alphabet's free cash flow is expected to collapse 90%.. they're borrowing money to keep the data center lights on..
> Reddit CEO said they're considering Face ID to prove you're human.. because they can't tell who's real anymore..
> a guy from North Carolina used AI to make hundreds of thousands of fake songs.. botted billions of streams.. and walked away with $8 million.. first-ever criminal AI streaming fraud case..
> Tim Cook told people to stop doomscrolling.. the CEO of the company that designed the most addictive screen ever made..
all of this happened in ONE week..
if you're not following me you're finding out about this a week late from someone who read my post..
Decimated means 90% is still left, not 10%. You keep using this word, I do not think it means what you think it means.
ARC raiders is the greatest social experiment I’ve ever been a part of. In the same raid, someone gave me a blueprint as a tip, then someone else said “I’m going to hit you with a hammer as soon as the train doors close.” Spooky and accurate to real life.
ARC Raiders is the game of the century. I can't believe how they thought of everything. Every time I think "well there's no way it's THAT good," it surprises me.
Brian Jorgensen retweeted
So what happens to (software) libraries now?
I had this shower thought that, if humans stop coding, there's no incentive for us to make reusable libraries. Clankers are happy to implement quick sort from scratch in assembly.
Will they ever have enough initiative to say "hey, I'm kinda proud of this, let me clean it up and put it out there to help other clankers save some time in the future"?
Is this the end of reusable software? I can't accept that we've peaked as a society library-wise.
Much more realistic than “The Line.”
Transfer
My interest in “moving cities” has developed over time. It is a concept that has inspired architects worldwide for decades.
With Transfer, I wanted to imagine the physical movement of residential units housing up to 8,000 people, transported across the city by large-scale industrial machinery.
As in UNIT 183, this work exists in a rapidly shifting urban environment, where new systems of reuse and adaptation emerge from older structures.
#scifi #cgi @otoy @rendernetwork
Brian Jorgensen retweeted
We will be shocked later that a US president conducted himself the way he does. We're used to it now, but it truly is an aberration.
Brian Jorgensen retweeted
pro tip: only watch really boring tv shows so you feel motivated to work on your projects
No one is ever going to the moon as a private individual. We just don’t actually have the resources nor motivation. It was really fun to say “Tim is going go the moon!”
But the reality is that Elon’s project was to secure LEO access. Mars was bullshit to hire unquestioning kids.
