Adi retweeted
Mumbai Fire Brigade received 142 fire calls on November 8, of which 137 were attributed to firecrackers, making it one of the busiest days for the department in recent times. Region 4, covering Borivli to Kandivli, tops the list with 53 calls
The number of calls surged through the day, particularly after 8 pm, leaving fire brigade personnel stretched as they rushed from one incident to another across the city.
Adi retweeted
#AQI is soaring, lungs are struggling and Mumbai is choking. But who cares? Patakhas must burst, smoke must fill the air and #cheap_showmanship must prevail! What a spectacular way to celebrate by making an entire city pay for a few seconds of #noise and #vanity! #HAPPY_DIWALI🪔
Adi retweeted
An OpenSSH bug that took 46 years to ripen!
1980
UNIX puts * in the password field of system accounts. The idea is simple: it’s not a real hash, so it can’t be brute-forced and you can’t log in with a password.
2012
The musl libc developers decide that returning NULL from crypt() on failure is dangerous - programs often forget to check it and crash with a segfault. So they return an error string instead.
Guess which one?
The same asterisk: *.
Three weeks later they add a length limit: passwords longer than 256 bytes burn CPU. Anything longer is rejected. And since it’s an error, crypt() returns *.
2016
OpenSSH fixes a timing attack (CVE-2016-6210). If a user doesn’t exist, the server still hashes the password with a fake/borrowed salt so an attacker can’t tell valid usernames by response time.
2022
Alpine Linux changes the locked root password in /etc/shadow from ! to * so SSH keys work properly on cloud images.
… and the loop closes!
You connect over SSH as root (whose shadow entry is *).
You type any password longer than 256 characters (e.g. 300 As).
crypt() hits the length limit → returns * → OpenSSH compares it with the value in the database → that value is also * → you’re in as root.
That chain took 46 years (!!!) to complete.
Every individual change was reasonable. Together they produced a perfect * == * authentication bypass (CVE-2026-123158, nicknamed *sshole). Fixed in OpenSSH 10.6p2 and Alpine packages.
🚨 Critical OpenSSH flaw allows passwordless account access using any password over 256 characters
sshhole.com
A newly disclosed vulnerability dubbed *sshole has been discovered in OpenSSH installations using musl libc, potentially allowing attackers to bypass authentication and gain access to accounts that should reject password logins entirely.
The flaw affects certain configurations of Alpine Linux, OpenWrt, Buildroot, and Yocto where PAM is disabled and password authentication remains enabled. Under specific conditions, attackers can authenticate to locked accounts using arbitrary passwords between 257 and 1,024 characters.
The researcher demonstrated that affected Alpine Linux cloud images could allow attackers to gain root privileges through a passwordless administrative account.
OpenSSH 10.6p2 addresses the issue. Administrators are urged to update immediately or disable SSH password authentication until patches can be applied.
Adi retweeted
Good progress today! @omarchy now boots from disk on my MacBook Pro 14" M5 Max. Working: all 18 cores, internal display with brightness keys, keyboard + backlight, trackpad, Wi-Fi incl. 6 GHz, Bluetooth, speakers + mic, battery, lid, power off, USB-C. Next: continue GPU and sleep optimisation.
Adi retweeted
Sound on please ! Hornbills are calling ! How many Great Hornbills are too many ! Surely never enough! A gathering like this is called a ‘congregation’, and what a stunning congregation this is ! Somewhere in in the Anamalai landscape in Tamil Nadu there is a precious stronghold for these iconic birds, whose future rests in the great old trees in the last remaining rainforests. These magical moments are captured by @dhanu_paran #GreatHornbills #Hornbills #wildlifeconservation #BirdsofIndia
Adi retweeted
When researchers analyzed how Pegasus spyware infected iPhones without the user tapping anything, they found something wild. The attackers sent an iMessage with a fake GIF that targeted Apple's image decompression engine. The decompression math was so flexible that the exploit chained arithmetic operations together to construct a literal, functioning software CPU using over 70,000 segment commands that defined logical bit operations (AND, OR, XOR, XNOR, etc.) entirely inside the image parser. This created a small computer architecture with registers, a full 64-bit adder, and a comparator, running raw code before the phone even buzzed with a notification
Adi retweeted
I have to thank Apple for their support of Linux and our efforts to bring up the M5 Max and Ultra on Omarchy!
@edimoldovan found this item marked fixed in Apple's macOS 27.3 beta 1 release notes: “Only a single core is available when you boot Linux or other third-party operating systems from a
custom raw boot object on Mac computers with M5 Pro, M5 Max, and M5 Ultra chips.”
Thank you, @radian, @johnternus and the whole Apple team for making this incredible hardware for local AI and giving us the path to bring the entire Linux local AI ecosystem to it!
Adi retweeted
Someone got DeepSeek-V4.1-Flash running at 38.2 tps on an AMD Strix Halo. 🤯
No multi-GPU server, just a single Ryzen AI Max+ 395 with 128GB unified memory.
why should I care? ... because this model is enormous
Setup
🧠 552B backbone parameters
💾 ~196B additional Engram parameters
🔥 16B active during decoding
🖥️ AMD Ryzen AI Max+ 395
🎮 Radeon 8060S integrated GPU
💾 128GB unified memory
🐧 Linux + ROCm 7.x
The secret? YES! You are correct, new inference engine!!
A new open-source inference engine called libosmos.
Developer-reported benchmarks using Unsloth's UD-IQ1_S quantization:
⚡ 38.2 tps — speculative decoding
⚡ 19.2 tps — without speculation
📥 482 tps — 8K prompt processing
📚 1M configured context support
And the developer compared it against Project Maya 1.1.53 on the same hardware and quantization
Decode with drafting
🚀 libosmos → 38.2 tps
🔵 Project Maya → 35.4 tps
8K prompt processing
🚀 libosmos → 482 tps
🔵 Project Maya → 429 tps
That's about 12% faster prefill and 8% faster drafted decoding.
How is a model this large running in 128GB?
Here is how...
🔧 Aggressive 1–2-bit expert quantization
🧠 Frequently used experts stay in unified memory
💽 Other experts stream from NVMe SSD
⚡ DSpark speculative decoding
🔓 MIT-licensed inference engine
The tested configuration uses roughly 122GB of expert shards plus a massive Engram table on SSD.
libosmos is designed to produce bit-identical outputs whether experts execute on the CPU or GPU, and whether speculative decoding is enabled. That is really interesting!
This is Localmaxxing. 🔥
🔗Links in ALT.
Adi retweeted
With my travels currently paused due to unavoidable reasons, will be sharing some archived reviews for now.
Brahmini duck in an afternoon form Mangalajodi, Chilka #IndiAves
Adi retweeted
Once every ten days, a bright canary-yellow bullet train glides into Tokyo Station at full speed, yet not a single passenger is allowed to step on board.
Its windows are mostly covered from the inside, its timetable is never published for the public, and there are no ticketed seats in any of its seven cars.
In Japan, every child and every commuter knows this train by two English words: Doctor Yellow.
Since the Tokaido Shinkansen began running between Tokyo and Osaka in October 1964, Japanese bullet trains have carried more than seven billion passengers at speeds up to one hundred and eighty-five miles per hour with zero passenger fatalities from derailments or collisions.
Critics sometimes assume that kind of sixty-year safety record is a miracle of luck.
It is not luck; it is what happens when a nation builds a high-speed hospital train whose only patient is the steel track itself.
Why does Japan run a seven-car bullet train painted bright yellow with zero paying customers on board?
In the early days of high-speed rail, engineers realized that checking hundreds of miles of track on foot at night with hand gauges was too slow, and that tracks behave differently when a three-hundred-ton train slams over them at one hundred and sixty-eight miles per hour.
So Japanese railway engineers took a seven-car Class 923 Shinkansen trainset and packed every car from nose to tail with laser-optical sensors, gyroscopes, accelerometers, and high-speed cameras.
Running in the middle of the regular passenger schedule at a full one hundred and sixty-eight miles per hour, Doctor Yellow fires laser beams onto the left and right rails to measure track width, vertical dip, and curvature alignment down to one-tenth of a millimeter, about the thickness of a single human hair.
At the same time, two special observation domes built into the roof and laser pantographs check the overhead high-voltage copper wire for microscopic wear before a single spark can cause a power outage.
The instant Doctor Yellow detects a rail that has shifted by even a fraction of an inch, it beams the exact GPS coordinates to maintenance crews waiting along the line so they can fix the spot that very night after the last passenger train goes to sleep.
Because its schedule is kept secret so crowds do not pack the platforms, Japanese commuters treat spotting Doctor Yellow by chance as a genuine good-luck charm that brings happiness for the rest of the week.
Safety is never an accident when engineers check their work down to the width of a hair.
(Note: Every photograph-style illustration on my feed is created by AI.)
🤖 Made with AI
Adi retweeted
A hop-by-hop view of @Cloudflare network engineer @tstrickx crossing the Atlantic on Starlink Wi-Fi.
Over 8 hours and 7,000 km, Starlink handed off satellites every 15 seconds and carried traffic through 7 Cloudflare deployments. Each plane appears to keep its own IPv6 /56.
Over the ocean, inter-satellite lasers carried traffic to the nearest available ground station. Cloudflare’s anycast routing followed it, keeping traffic local as the plane moved at 40,000 feet and 500 knots.
- Ocean crossings use inter-satellite laser links until traffic can reach a ground station.
- Those laser routes appeared slower than fiber in this single test.
- Latency showed two distinct bands, possibly from first-packet dataplane setup.
- Ground-station selection changed during the flight, including a Canada-to-US switch near the border.
- Cloudflare’s anycast routing followed the ground station, not the plane’s source address. That kept traffic local without DNS-based steering.
starlink.ecmp.network/f/2026…
Adi retweeted
With the recent wave of vulnerability disclosures, it’s a good time to take a closer look at your own code.
Turn your coding agent into a team of security auditors with the open-source skill that seeded Cloudflare’s vulnerability discovery harness.
The 6 phase approach:
1. Map the codebase
2. Hunt for vulnerabilities
3. Challenge each candidate
4. Record the findings
5. Verify the findings
6. Report what’s confirmed, rejected, or still needs validation
Start your hunt here:
github.com/cloudflare/securi…
Omarchy 4.5 will ship with full compatibility for M1, M2, M3, and Neo! Incredible achievement from the Omarchy M team. The installer makes this so smooth, the dual boot makes it a no brainer. Apple hardware liberated. M4-6 on the way. WE CAN FIX EVERYTHING!
Adi retweeted
For those interested - the open source & free image to 3d tool is here: assetfurnace.com - runs on Mac, Nvidia (Windows + Linux) and has a tonne of other features to generate characters, props across various levels of detail. Rig + Animate humanoids too.
<3 thank you for the shoutout @chongdashu
One test of a model's capability is how good it can handle creating 3d assets for your games.
I always create or import them into blender before exporting for the game world.
Where if fails - you can (and probably should) use something like Tripo / Meshy / maybe even @Bingeljell 's open source image to 3d tool
But you should always mix and match where possible. Doesn't always need to be one or the other.
Adi retweeted
👉 Union Government releases tax devolution of ₹1,09,019 crore to State Governments, as one advance instalment of tax devolution in view of upcoming festive season and to enable States to accelerate capital spending and finance their development/ welfare related expenditure
Read more ➡️ pib.gov.in/PressReleasePage.…
Adi retweeted
If you want to make 3D models for free on your own machine, AssetFurnace 0.5.4 is out! You can take them into blender, drop them into godot, unreal, unity... do whatever you want!
As for how to use it? Here's the whole tutorial: write a prompt or paste a picture. Hit build. That's it. Lol
But what if you don’t have the hardware to run it? We got you too: Read on!
New in 0.5.4:
· Don't like part of your picture? Paint over it, say what goes there, only that bit changes
· Bring your own back picture, so the back of your character is YOURS, not a guess
· FLUX.2 draws your pictures: much faster, and Apache-2.0, so they're yours for any use
What else you get:
· Game-ready: a few thousand faces instead of a million, 32 MB down to under 5, GLB straight into Blender, Godot, Unity or Unreal
· Or full detail, if detail is all you want
· Textured from your actual picture: your lettering, your logo, your face. Not a redrawn lookalike
· Rigged and animated if you want: 22 moves, each fitted to your character so arms clear the body and feet stay on the floor. More coming
· Nine game props from one picture, each with three levels of detail
Free and Apache-2.0. The pictures are yours, commercial use included, and every model file carries a note of the licence behind the engine that made it, so you know what you can ship before you ship it.
Works across Nvidia (Linux + Windows), Mac and AMD (Linux).
No big GPU?? The AssetFurnace Cloud is launching soon - generate assets at near cost. A special founder price for those who reserve their spots now - only 82 left! Reserve now!
Let’s go: assetfurnace.com
Adi retweeted
Replying to @ComfyUI
@ComfyUI #OpenSourceHiggsfield Submission:
Instead of 1 feature, we built the entire Higgsfield platform + way more... but open source.
🎬 Imagination Studio.
An all in one studio with 61+ apps. Video,Music,Audio, Sfx/Foley, Agents, Prompt Assistance, Depth Mapping, Audio Separation, Loras, Custom 3D animatics, Editing.
Collab by Me and @u1tra_instinct
REPO LINK BELOW: 👇
github.com/drowzeys/Imaginat…
Adi retweeted
So I recently badgered my cinematographer @steveyedlin into making my ideal iPhone still camera app. It shoots RAW, bypasses the iPhone's look processing and instead uses the same image processing we use on our movies. apps.apple.com/app/apple-sto…


































