@_orcaman

๐Ÿง›๐Ÿผ @Accomplish_ai. Prev: Co-Founder, CTO @ Skyline AI (acquired by $JLL), StreamRail (acquired by $U), Lecturer @TelAvivUni, security research @AVGFree

 Zion, IL
or.hilt.ch
Joined December 2010
  • Tweets22.5K
  • Following4.6K
  • Followers20.5K
2.5KMedia
Our craziest escape yet: The @Accomplish_ai research team was able to exploit a vulnerability in Cloudflare Containers that let a sandbox read other customers' files - SQLite DBs, Chromium profiles, .env files etc, Cloudflare Sandboxes and Browser Run run on the same disk implementation and were affected too. We reported this to @Cloudflare, who super quickly fixed it. Read @CloudflareDev post in collaboration with Accomplish researcher @orenyomtov on their official blog: blog.cloudflare.com/containeโ€ฆ
36
90
24
804
131,506
New AppSec best practice just dropped
Aditya ๐Ÿฆ€
@ItsAditya_xyz19h
Well, I am safe from railway incident because I hard coded the private keys in the code instead of putting it in environment variable.
3
39
1,856
There were many cybersecurity catastrophes in the past 24 hours but this is the winning shit show
merlin
@merlindru23h
wow. this might be the end of railway. attackers stole env vars of deployments. entire infra compromised. but the kicker is that deploys are disabled. so you cannot actually deploy with new env vars. meaning projects currently hosted on railway are either compromised or down
6
49
4,837
We have a shared slack channel with one of our vendors, which we use to get support from their team, including one account manager, who we can call Joe. One bright day we've noticed something weird: while Joe's user looks the same (same name on slack, same avatar with his picture), a small "APP" label next to Joe's name started showing. Clicking on his profile picture, we can see it's the Pylon bot. Bro was replaced with a bot in stealth.
4
38
4,498
While all of us were afraid of Chinese made AGI it was PHP plotting against us in the shadows
NSA Cyber
@NSACyberOct 21
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
5
42
1,768
ืื– ื‘ืฉื‘ื•ืข ืฉืขื‘ืจ ืงืจื” ืžืฉื”ื• ื’ื“ื•ืœ ืฉื›ืžื” ืื ืฉื™ื ืคื” ื—ื™ื›ื• ืœื• ื›ื‘ืจ ืขืฉืจ ืฉื ื™ื: ืžื•ืขื“ื•ืŸ ื”ื•ื•ื™ืกืงื™ โ€˜ื—ื•ื–ืง ื—ื‘ื™ืชโ€™ ืฉืœ @omef_the ืฉื”ืชื—ื™ืœ ื›ื›ืช ื•ื›ื‘ืจ ื”ืคืš ืœืชื ื•ืขื”, ื™ืฆื, ืื—ืจื™ ืžื’ื™ืคื•ืช ืขื•ืœืžื™ื•ืช ื•ื™ื•ืชืจ ืžื“ื™ ืžืœื—ืžื•ืช ื•ืื™ืœื•ืฆื™ ื—ื™ื™ื ื•ืขื‘ื•ื“ื” ืื—ืจื™ื, ืœื˜ื™ื•ืœ ื”ืžื•ืขื“ื•ืŸ ื”ืจืืฉื•ืŸ ืื™ ืคืขื ืœืกืงื•ื˜ืœื ื“. ื”ื˜ื™ื•ืœ ื”ื–ื” ื”ื•ื ื–ื™ืงื•ืง (๐Ÿฅ) ืฉืœ ืงืจื™ื™ืจื” ืฉืœืžื” ืฉืœ ืžื™ ืฉื”ื•ื ื‘ืขื™ื ื™ ืื•ืฉื™ื™ืช ื”ื•ื•ื™ืกืงื™ ื”ื›ื™ ืžืขื ื™ื™ื ืช, ืฉื ื•ื ื”, ืžื™ื•ื“ืขืช ื•ืžืฆื—ื™ืงื” ื‘ืขื•ืœื, ื•ื›ืžื• ื‘ื›ืœ ืคืจืง ื‘ืคื•ื“ืงืืกื˜, ืกื“ื ื” ืื• ืื™ืจื•ืข ืื—ืจ, ื”ืฉืขืจ ื”ื›ื™ ื˜ื•ื‘ ื‘ืขื•ืœื ืœื™ืงื•ื ืื—ืจ. ื–ื” ืžื“ื”ื™ื ื›ืžื” ืฉืืคืฉืจ ืœื”ืฉืื™ืจ ืืช ื›ืœ ื”ืขื•ืœื ืžืื—ื•ืจื”, ืœื ืฉื•ื ืื•ื•ื™ืจ ื”ืจื™ื ืกืงื•ื˜ื™ ืฆืœื•ืœ (ืคื™ื–ื™ืช ืœื ืฉื•ื ืื•ืชื•, ื–ื” ื›ืžื• ืœืฉืชื•ืช ืžื™ื ืงืจื™ื ื‘ื™ื•ื ืงื™ืฅ ื—ื) ื•ืคืฉื•ื˜ ืœืขืฉื•ืช ืืช ื”ื›ื™ืฃ ื”ื›ื™ ื’ื“ื•ืœ ืฉื™ืฉ: ืœืื—ื•ื– ื‘ืฉืขื•ืจื” ื‘ื™ื“ ืขืœ ืจืฆืคืช ื”ื”ืœืชืชื”. ืœื”ืกื ื™ืฃ ืืช ืจื™ื— ื”ืคืจืžื ื˜ืฆื™ื” ื”ืžืชื•ืง. ืœื”ืชื—ืžื ืžื”ืงื•ืจ ื”ืกืงื•ื˜ื™ ื”ืžืคื•ืจืกื ืžื”ื—ื•ื ืฉืœ ื“ื•ื“ื™ ื”ื–ื™ืงื•ืง. ืœืฉืžื•ืข ื”ื›ืœ ืขืœ ื”ืžื–ืงืงื•ืช ื”ืื”ื•ื‘ื•ืช ืขืœื™ื›ื ืžืกืงื•ื˜ื™ื ื›ืคืจื™ื™ื ืžืชื•ืงื™ื (ื‘ืืžืช ืฉื”ื›ื™ ืžืชื•ืงื™ื ื‘ืขื•ืœื) ืฉืขื•ื‘ื“ื™ื ืœืขื™ืชื™ื ืขืฉืจื•ืช ืฉื ื™ื ื‘ืžืงื•ื. ืื‘ืœ ื›ืžื•ื‘ืŸ ืฉื’ื•ืœืช ื”ื›ื•ืชืจืช ืœื’ื™ืงื™ื ืฉืœ ื”ื“ื‘ืจ ื”ื™ื ื”ื–ื›ื•ืช ื”ื’ื“ื•ืœื” ืœื˜ื™ื™ืœ ืขื ืขื•ืžืฃ. ื–ื” ื”ื™ื” ื˜ื™ื•ืœ ื”ื•ื•ื™ืกืงื™ ื”ืจื‘ื™ืขื™ ืฉืœื™, ืื– ื™ืฉ ืœื™ ื‘ืกื™ืก ื“ื™ ื˜ื•ื‘ ืœื”ืฉื•ื•ืื” (ื›ืœ ื”ื˜ื™ื•ืœื™ื ื”ืงื•ื“ืžื™ื ื”ื™ื• ืขืฆืžืื™ื™ื). ืื– ื‘ืžื” ื–ื” ื‘ื ืœื™ื“ื™ ื‘ื™ื˜ื•ื™? ืœืกื™ื™ืจ ื‘ืกืงื•ื˜ืœื ื“ ืขื ืขื•ืžืฃ ืื•ืžืจ: * ืœื‘ืงืจ ื‘ืžื—ืกื ื™ื ืฉืœ ืžื–ืงืงื•ืช ื•ืžื‘ืงื‘ืงื™ื ืขืฆืžืื™ื™ื ืฉื‘ื–ื›ื•ืช ื”ื™ื—ืกื™ื ืขื ืขื•ืžืฃ ืžืืจื—ื™ื ืืชื›ื ื›ื‘ื ื™ ื‘ื™ืช ื‘ืงื˜ืข ืžื•ื’ื–ื. ื“ื•ื’ืžื” ืงื˜ื ื” ืœื’ื•ื“ืœ ื”ืื™ืจื•ืข - ื‘ื•ื•ื“ืจื•ืณื– ืžืื“ื™ื ื‘ื•ืจื• (ื•ื•ื™ืกืงื™ ืฉืขื•ืžืฃ ืžื™ื™ื‘ื ืœืืจืฅ) ื™ืฉื‘ื ื• ืขื“ ืžืื•ื—ืจ ื‘ืœื™ืœื” ืขื ื”ื‘ืขืœื™ื ื‘ืžื—ืกื ื™ ื”ื—ื‘ื™ื•ืช ืฉืœ ื”ื—ื‘ืจื”, ืฉื ืคืชื—ื• ืœื ื• ืฉืœืœ ืจื‘ ืฉืœ ื—ื‘ื™ื•ืช ืคืกื™ื›ื™ื•ืช (ื•ืื ื™ ืžื“ื‘ืจ ืคื” ื’ื ืขืœ ื›ืืœื” ื‘ื ื™ 40 ืฉื ื”), ื”ืฉืื™ืจื• ืœื ื• ื•ืืœื™ื ืฅืณ, ื•ืื™ื—ืœื• ืœื ื• ื‘ื”ืฆืœื—ื” - ื”ื‘ื•ืคื” ืคืชื•ื—. ื˜ื™ืจื•ืฃ ื—ื•ืฉื™ื ืฉืœื ื—ืฉื‘ืชื™ ืฉืงื™ื™ื. * ืขื•ืžืฃ ื”ื•ื ืื ืฆื™ืงืœื•ืคื“ื™ื™ืช ื•ื•ื™ืกืงื™ ืžื”ืœื›ืช ื‘ืจืžื” ื”ื’ื‘ื•ื”ื” ื‘ื™ื•ืชืจ. ื›ื“ื™ ืœื”ื‘ื™ืŸ ืขื“ ื›ืžื”, ืืชื ื™ื›ื•ืœื™ื ืœืฉืžื•ืข ืžื™ืฉื”ื• ืžืฆื•ื•ืช ื”ืžื–ืงืงื” ืžืกืคืจ ืขืœ ื’ื•ื“ืœ ื“ื•ื“ื™ ื”ื–ื™ืงื•ืง ื•ืœืจืื•ืช ืืช ื”ื’ื‘ื” ืฉืœ ืขื•ืžืฃ ืงื•ืคืฆืช ื›ื™ ื”ื•ื ื™ื•ื“ืข ืฉื”ื’ื•ื“ืœ ื”ืžืงื•ืจื™ ืงื˜ืŸ ื‘2 ื•ื—ืฆื™ ืœื™ื˜ืจ ืื—ืจื™ ืฉื”ืžื–ืงืงื” ื”ืขื‘ื™ืจื” ืืช ื”ื“ื•ื“ ืœืžื–ืงืงื” ื”ืื—ื•ืช ืžืžื•ืœ ื•ืฉื™ืคืฆื” ื“ื•ื“ ืฉืœ ื”ืžื–ืงืงื” ืฉืœ ืกื‘ืชื ืฉืœ ื”ืžื™ื™ืกื“. ื›ืžื•ื‘ืŸ ืฉื›ืœ ื”ืžื™ื“ืข ื ื™ืชืŸ ื‘ืฆื•ืจื” ื-ืกื™ื ื›ืจื•ื ื™ืช ืžื›ื‘ื“ืช ืœืžืืจื—ื™ื ืื—ืจื™ ื”ืกื™ื•ืจ :-) * ืžืจืืฉ ื›ืœ ื”ื”ืกืชื›ืœื•ืช ื”ื™ื ืฉืœ ื‘ื™ืงื•ืจ ืฉืœ ื’ื™ืงื™ื. ืœื›ืŸ ื”ื˜ืขื™ืžื•ืช ื›ื•ืœืŸ ืžืฉื•ื“ืจื’ื•ืช ื‘ื’ื“ื•ืœ, ื”ื”ืกื‘ืจื™ื ืžื•ืชืืžื™ื ืœื’ื™ืงื™ื ื•ื›ื™ื•ืดื‘. ื–ื” ื”ื‘ื“ืœ ื’ื“ื•ืœ ืžืื•ื“ ื‘ื”ืฉื•ื•ืื” ืœืคืฉื•ื˜ ืœื”ื–ืžื™ืŸ ืกื™ื•ืจ ืขืฆืžืื™. ื•ื›ืžื•ื‘ืŸ (ื•ืื•ืœื™ ื”ื›ื™ ื—ืฉื•ื‘) - ืื ื™ืฉ ืœื›ื ืžื–ืœ ื‘ื›ืœืœ ืื– ื’ื ืœืขืฉื•ืช ืืช ื–ื” ืขื ื—ื‘ืจื™ื ื˜ื•ื‘ื™ื ืฉื ื”ื ื™ื ื›ืžื•ื›ื ืžื”ืชื•ืคืขื” ื”ื–ื• ืฉื ืงืจื™ืช ืขื•ืžืฃ ื›ื‘ืจ ืœื ืžืขื˜ ืฉื ื™ื. ื‘ืงื™ืฆื•ืจ, ื–ื” ื”ื™ื” ื”ื˜ื™ื•ืœ ื”ืจืืฉื•ืŸ ืฉื”ื™ื” ืกื•ื’ ืฉืœ ืคื™ื™ืœื•ื˜ ืœื”ืžืฉืš, ืžืžืœื™ืฅ ืœืขืงื•ื‘ ืžืงืจื•ื‘ ืื—ืจื™ @omef_the ืคื” ื›ื“ื™ ืœื’ืœื•ืช ืžืชื™ ื ืคืชื—ืช ื”ื”ืจืฉืžื” ืœื˜ื™ื•ืœื™ื ื”ื‘ืื™ื ืฉืœืœื ืกืคืง ื™ื’ื™ืขื• ื‘ืงืจื•ื‘.
19
4
2
121
5,735
Many years after we are all gone this page will continue the supply of Steve Jobs email bangers
Internal Tech Emails
@TechEmailsOct 18
Steve Jobs emails Paul Rand March 2, 1996
1
31
4,042
Or Hiltch retweeted
The omef@omef_theOct 17
ื”ืœื ื‘ืขื•ืœื ื”ื”ื™ื™ื˜ืง. @_orcaman ืžืฉื ื” ื›ื™ื•ื•ืŸ ื‘ื—ื™ื™ื ื•ืขื•ื‘ืจ ืœืชืขืฉื™ื™ืช ื”ื•ื•ื™ืกืงื™. ื”ื ื” ื”ื•ื ื›ืืŸ ืžื•ื–ื’ ื‘ื•ื•ืžื•ืจ ื‘ืŸ 16 ื™ืฉืจ ืžื”ื—ื‘ื™ืช ืœื›ื•ืกื• ืฉืœ @yuvsh ืขื @nir_benz ื‘ืจืงืข.
3
3
65
4,973
Love the zappers. Go @jonatanbien and team!
Guy Weiss
@GuyWeissZZOct 14
AI is everywhere, but walk into almost any company and work hasnโ€™t changed Meet @Zenzap_chat, the Multiplayer AI platform. Now, people and proactive AI agents are in the same group chats, automating workflows with shared context across business tools and teams Everyone can bring their team and create AI agents in 90 secs (even from your phone). CISOs and CIOs love it Thousand of teams from our early access program already transformed their day to day AI agents have joined the team
1
32
1,684
Team did a thing
Accomplish
@Accomplish_aiOct 14
We're honored to be named to the #Disruptors60 class of 2026 curated by @GreenfieldVC Partners at @TechCrunch Disrupt, alongside the top AI companies. Thank you to our team, customers, and partners.
2
58
2,092
DHH
@dhhOct 12
"The culture on X today is remarkably friendly and inclusive. It is a cheerful place", I couldn't agree with @daringfireball more. X is the place to be if you genuinely like technology and progress. Just such a delightful optimism here. daringfireball.net/2026/10/xโ€ฆ

X Once Again Marks the Spot

If you returned from exile on a desert island and took a look at X today for first time in a year, you might reasonably guess that Elon Musk got bored and sold it while you were away.

daringfireball.net
2
69
2,937
We are reinventing XGBoost from first principles
Satya Nadella
@satyanadellaOct 9
Introducing Microsoft-Decision-1, our new model for fast decision-making. It delivers top performance on structured decision tasks, outperforming both LLMs and other decision models in latency and quality. Weโ€™re already testing it across Microsoft for everything from incident response and quality control to scientific discovery.
7
1
58
3,814
A lot of the Palestine movement is an op
Ohio Rob
@TheOhioRobOct 11
Funny thing: Ukraine takes out Russian data centers and โ€œZelenskyโ€ rises while โ€œgenocideโ€ and โ€œFree Palestineโ€ drops off according to Xโ€™s Radar analytics page. Anyone else seeing trends w/๐Ÿ‡ท๐Ÿ‡บ bots muzzled?
134
579
26
6,417
179,061
The weirdest decision on AWS today is not turning Bedrock into a LiteLLM style AI gateway. Huge miss. Maybe this re:Invent?
6
48
6,554
ืจืื™ืชื™ ืจื—ื•ื‘ื•ืช ืžืœื•ื›ืœื›ื™ื ื™ื•ืชืจ ืžืจื—ื•ื‘ ื”ืขื‘ื•ื“ื” ื‘ืชืดื. ืœื ื”ืจื‘ื” (ื’ื ืœื ื‘ื”ื•ื“ื•, ื”ื™ื™ืชื™ ืžื‘ืงืจ ื‘ื‘ื ื’ืœื•ืจ ืžื™ื“ื™ ืคืขื ื‘ืขื‘ื•ื“ื” ื”ืงื•ื“ืžืช), ืื‘ืœ ื–ื” ืงื™ื™ื. ืื‘ืœ ืžื” ืฉื‘ื˜ื•ื—, ื–ื” ื”ืจื—ื•ื‘ ืขื ื™ื—ืก ื”ื—ืจื ื•ืฉืชืŸ ื‘ืจื—ื•ื‘ ืœืžื—ื™ืจ ืœืžื˜ืจ ื”ื’ื‘ื•ื” ื‘ืขื•ืœื. ืžื–ื•ื‘ืœ ื‘ื›ืœ ื˜ื•ื‘ ื‘ืจืžืช ื”ื•ื“ื• ื‘ืžื—ื™ืจื™ื ืฉืœ ืžื ื”ื˜ืŸ.
14
2
125
11,156
Terance Tao: Imagine prescribing a drug no one understood. Medical community:
113
890
82
13,040
292,311
Matan is one of the best engineers I got to work with. Give him a fellow for more hot takes โฌ‡๏ธ
Matan
@macmatanOct 10
ok going back to codex after opus 5.5 feels like interacting with a retarded person
8
60
8,170
List of top whisky distilleries in the world, not including Scotland:
Assaf Elovic
@assaf_elovicOct 10
new level of bechmark bias - leave the winners out. Why is jev not ranked lol
1
25
2,024
ื–ื” ืœื ื™ืคื” ืœืขืฉื•ืช ื’ื™ื™ื˜ืงื™ืคื™ื ื’ ืœืื ืฉื™ ื”ืžื•ืฆืจโ€ฆ
3
69
1,333
Or Hiltch retweeted
float
@notesbyfloatOct 8
A man cannot prompt the same agent twice, for it is has compacted and is not the same agent, and he is not the same man
93
918
62
9,143
222,776
Load more