@fncomp

Builder. Technophile. Tinkerer. (FMR Nurdle (Founder), Spectrum Labs (Founder), Salesforce, Krux)

 Bay Area, CA
Joined November 2010
  • Tweets629
  • Following385
  • Followers138
5Media
> be taeyang lee > read kernel crypto and notice a 2017 optimization in algif_aead > realize any user can overwrite /usr/bin/su in ram > any user can become root in 2 seconds on every linux box since 2017 > every cloud. every k8s cluster. every ai sandbox. > give the bug to an llm > ai produces a 732-byte exploit working on all of them
The Smart Ape 🔥
@the_smart_apeApr 30

an ai just found a 9-year-old bug that gives root on every linux server on earth

Article · @the_smart_ape
6
29
2
376
74,579
Josh Newman retweeted
BuBBliK
@k1rallikApr 19
VERCEL GOT HACKED ShinyHunters - the group behind the Ticketmaster breach - is selling Vercel's internal database for $2M on BreachForums here's why every developer should care: - they have NPM tokens and GitHub tokens - Vercel owns Next.js - 6 million weekly downloads - one malicious push = global supply chain attack - Vercel confirmed the breach today, April 19 - they literally DMed the hackers on Telegram asking them to stop rotate your env variables RIGHT NOW
Vercel
@vercelApr 19
We’ve identified a security incident that involved unauthorized access to certain internal Vercel systems, impacting a limited subset of customers. Please see our security bulletin: vercel.com/kb/bulletin/verce…

Vercel April 2026 security incident | Vercel Knowledge Base

We’ve identified a security incident that involved unauthorized access to certain internal Vercel systems.

vercel.com
290
1,600
293
9,936
2,459,368
Josh Newman retweeted
Sam Rose
@samwhooJan 3
StackOverflow graph of questions asked per month. Holy shit.
A graph of stack overflow questions asked per month. It’s almost a perfect curve starting at 0 on the far left, in 2009, peaking in the middle in 2017 at about 200,000, then dropping down to near 0 today on the right.

ALT A graph of stack overflow questions asked per month. It’s almost a perfect curve starting at 0 on the far left, in 2009, peaking in the middle in 2017 at about 200,000, then dropping down to near 0 today on the right.

845
1,835
875
27,083
4,669,070
Are we ready for a world where our data is exposed at a glance? @CaineArdayfio and I offer an answer to protect yourself here: tinyurl.com/meet-ixray
375
1,559
1,133
5,254
1,248,485
Josh Newman retweeted
Yann LeCun
@ylecun23 Jul 2024
💥BOOM 💥 Llama 3.1 is out 💥 405B, 70B, 8B versions. Main takeaways: 1. 405B performance is on par with the best closed models. 2. Open/free weights and code, with a license that enables fine-tuning, distillation into other models, and deployment anywhere. 3. 128k context length, multi-lingual abilities, good code generation performance, complex reasoning abilities, tool use. 4. Llama Stack API for easy integration. 5. Ecosystem with over 25 partners, including AWS, NVIDIA, Databricks, Groq, Dell, Azure, and Google Cloud. Blog post: ai.meta.com/blog/meta-llama-… Llama home: llama.meta.com/
Ahmad Al-Dahle
@Ahmad_Al_Dahle23 Jul 2024
With today’s launch of our Llama 3.1 collection of models we’re making history with the largest and most capable open source AI model ever released. 128K context length, multilingual support, and new safety tools. Download 405B and our improved 8B & 70B here. llama.meta.com
219
901
117
6,042
740,526
Josh Newman retweeted
Joe Biden
@JoeBiden21 Jul 2024
A letter from President Biden

ALT A letter from President Biden

77,596
155,085
170,252
902,813
447,149,315
144
1,330
112
14,687
1,130,969
a debugging manifesto
a debugging manifesto 1. inspect, don't squash try to fix the bug (crossed out) understand what happened (yes, smiley faces and stars) 2. check your assumptions person (thinking): "wait, how do I know that's true?" 3. being stuck is temporary person (thinking): "I will never figure this out!" ... 2 minutes later.... person (thinking): "well, I haven't tried X..." 4. don't go it alone person (speaking to other person): "hey, have you seen this problem before?" 5. trust nobody and nothing person (thinking): this library can't be buggy... OR CAN IT??? 6. there's always a reason computer: "computers are always logical, even when it doesn't feel that way" 7. build your toolkit person (holding toolkit): "wow, the CSS inspector makes debugging SO MUCH EASIER" 8. it can be an adventure person (talking, with cute bug next to them): "you wouldn't BELIEVE the weird bug I found" by @b0rk @omarieclaire, more like this at https://wizardzines.com

ALT a debugging manifesto 1. inspect, don't squash try to fix the bug (crossed out) understand what happened (yes, smiley faces and stars) 2. check your assumptions person (thinking): "wait, how do I know that's true?" 3. being stuck is temporary person (thinking): "I will never figure this out!" ... 2 minutes later.... person (thinking): "well, I haven't tried X..." 4. don't go it alone person (speaking to other person): "hey, have you seen this problem before?" 5. trust nobody and nothing person (thinking): this library can't be buggy... OR CAN IT??? 6. there's always a reason computer: "computers are always logical, even when it doesn't feel that way" 7. build your toolkit person (holding toolkit): "wow, the CSS inspector makes debugging SO MUCH EASIER" 8. it can be an adventure person (talking, with cute bug next to them): "you wouldn't BELIEVE the weird bug I found" by @b0rk @omarieclaire, more like this at https://wizardzines.com

85
1,801
206
6,712
Josh Newman retweeted
GamesBeat
@GamesBeat8 Sep 2022
Spectrum Labs has figured out how to use its artificial intelligence tech to identify healthy online behavior and reward it. venturebeat.com/business/spe…
2
1
4
Josh Newman retweeted
Dean Takahashi
@deantak8 Sep 2022
This is an interesting approach to an old problem. Spectrum Labs teams with IMVU to use AI to identify healthy online behavior #SpectrumLabs #IMVU venturebeat.com/games/spectr… via @GamesBeat
2
4
Josh Newman retweeted
GreenSilex@greensilex8 Sep 2022
We're looking for an awesome person for our Platform Engineering Team. Join us and help to make the internet a safer and more valuable place! angel.co/l/2xH4k5
2
1
🚨ATTENTION🚨 Apple found two 0-days actively in use that could effectively give attackers full access to device. For most folks: update software by end of day If threat model is elevated (journalist, activist, targeted by nation states, etc): update now techcrunch.com/2022/08/17/ip…

Apple releases iOS, iPadOS and macOS security fixes

Update your Apple devices today.

techcrunch.com
86
1,988
256
3,231
*keanu face* WOAH You can do flow diagrams in markdown on GitHub now via Mermaid? That's so useful! github.blog/2022-02-14-inclu…

Include diagrams in your Markdown files with Mermaid

Mermaid is a JavaScript based diagramming and charting tool that takes Markdown-inspired text definitions and creates diagrams dynamically in the browser.

github.blog
28
213
18
1,111
Josh Newman retweeted
MIT CSAIL
@MIT_CSAIL18 Oct 2021
Programming languages ranked by how much electricity they use: bit.ly/ProgEnergy (v/@DavidCasselTNS @thenewstack)
48
244
105
877
[Thread] 1/ This is a thread on Twitter manipulation around #Tunisia, where the current President is accused of instigating a coup. One Arabic trend translates as "Tunisians revolt against the Brotherhood". I analysed around 12000 tweets from 6800 unique accounts #disinformation
174
790
304
1,449
It seems to also appears on updated Windows 10 to another Windows 10 version... Check if you have Shadow Copy enabled for system protection... (but this is ON by default...) Conclusion: Updated Windows 10 (or 11 version) + System Protection Enabled (default) = vulnerable
13
90
22
313
Josh Newman retweeted
GreenSilex@greensilex1 May 2021
I'll be speaking at continuouslifecycle.london/s… 
on how we at Spectrum Labs tackle build and deploy pipelines in the world of continuous deployments , micro-services, and giant AI/ML embeddings. Come check it out!
1
1
1
Josh Newman retweeted
yan
@bcrypt30 Mar 2021
RIP ubiquiti krebsonsecurity.com/2021/03/…
11
81
8
178
I found a way to stuff up to ~3MB of data inside a PNG file on twitter. This is even better than my previous JPEG ICC technique, since the inserted data is contiguous. The source code is available in the ZIP/PNG file attached:
74
1,626
266
5,370
Josh Newman retweeted
IQT Labs@IqtLabs11 Mar 2021
We want your opinion! #IQTLabs is conducting a survey to better understand software reuse practices. If you are a software engineer, web developer, data scientist, or in a related role, we invite you to take our brief ~6 minute survey. #datascience #pip surveymonkey.com/r/codereuse
8
1
5
Load more