Nick (@broblas) header
Nick (@broblas) profile picture

Dad, Engineer, Co-Founder @ Singularis (sold to @microwavevision) Surgical devices, precisions systems, future obnoxious middle school soccer coach

NYC/PHL
Joined October 2012
Photo by Nick (@broblas)Photo by Nick (@broblas)Photo by Nick (@broblas)Photo by Nick (@broblas)Photo by Nick (@broblas)Photo by Nick (@broblas)Photo by Nick (@broblas)Photo by Nick (@broblas)Photo by Nick (@broblas)Photo by Nick (@broblas)
Pinned Tweet
novel idea: manufacturing but in a place people want to live on purpose
77
25
19
827
427,060
木漏れ日 japan is way ahead of you
"A green leaf lit by light that passes through another leaf one time is already outside of the gamut, greener than green"
68
Rare instance where McMaster was cheapest because they’ll deliver literally anything from any warehouse for $150 in less than 48 hrs
1
3
169
3D-printed harmonic drive with a cycloidal tooth profile. 42:1, 70 × 22 mm, and backdrivable. Pretty happy with this first attempt — the tolerances still needed some work. Printed on @formlabs. #3DPrinting #Robotics
9
21
2
274
10,606
Incredibly excited to debut the Volund Manufacturing VT-100 at the Air Force Innovation Expo in Tucson this week. Some of our first testing units were on display. This is a 100lbf class engine specifically engineered with attritable munitions in mind. Please reach out for more info.
13
8
8
228
175,851
made a tool for searching for PCB assy/fabs throughout the world: zackslab.com/atlas if you're favorite pcb house isn't on here lmk :)
28
17
7
164
14,948
Get off my back
1
2
124
Somehow, it’s starting to feel like a party trick already. Where is the room temp super conductor? The new speed limit of c? The micro fusion reactors?
1
137
Why does no one ever include humans on their graphs
Grok 4.7 probably should not be used at this point
3
1
5
2,317
lead program engineering at a top aero company uses papyrus font in their email fireable offense, possibly jail time.
4
10
641
Nick retweeted
another development :) my samsung TV loads a region specific convolutional neural network (LogoCNN.bin, cnn.mapping) which tracks your usage in app. like in youtube it's looking for videos you watch, ads you skip, progress in a video, etc. so glad they're interested in me.
48
301
54
4,890
209,335
Idk feels like satellite constellations has a few decades left
there is no moat
6
428
SUPPLY CHAIN IS A SEARCH PROBLEM
It's pretty common in manufacturing that you need some difficult operation performed and there exists some industry in which they do it all the time. The trick is finding that industry and then finding "the guy" who has the tooling and knows how to do it really well. Suddenly, an operation that seemed impossible is actually cheap and easy.
7
5
4
61
7,161
You can just buy happiness
3
13
687
Seems like by Monday we’ll either have fixed or broken the internet permanently
1
114
The world runs on drawings from 1982
9
248
I’m so glad all my most valuable secrets are hardcoded in weird grades of stainless steel
So basically, today PHP got two critical bugs that let anyone run code on your server without even logging in, which is bad, and then the details leaked before the patch was even out, which is worse, and it works on WordPress and MediaWiki and Magento and Joomla and Laravel, and Censys says like 1.5 million servers are running a version with no fix, so the NSA was like "take your system offline," and the FBI was like "take your system offline," and CISA and the UK and CERT-EU were all like "take your system offline," and then the Prime Minister of Japan, the actual Prime Minister, posted at 5:55 in the morning telling 48.8 million people to take their system offline, so everyone took their system offline, like the Dutch cybersecurity agency took its own website offline, and the Dutch parliament went offline, and the Port of Rotterdam went offline, and Finland and France and Denmark started pulling government sites, and Wikipedia went down, and Archive.org went down, and Asana and GOG and Something Awful went down, and the University of Vienna's webmail went down for some reason, and that's just PHP. Because GitLab also dropped a CVSS 10.0, which is the highest score they give out, for a bug that's been there since 2014, so that's every self-hosted GitLab for twelve years, and then LiteLLM 1.107.0 got hijacked and shipped a credential stealer and a remote access trojan in every single wheel and the Docker images, including latest, and you didn't even have to import it, just installing it was enough, and it's the second time this year, and then Railway paused every deployment on the entire platform because someone got into the environment variables, so now everyone has to rotate every secret they've ever stored there, and TiDB Cloud said someone was walking around inside with stolen credentials for basically a month and an extortion group says they took 10.6 terabytes, and Zeabur got breached for the second time in two months and is just shutting down, like the whole company, and Node.js patched remote code execution and a TLS bypass, and CISA says Plex is being actively exploited, and someone took over 300 Tor exit relays to steal SSH passwords, and SafePay ransomware has hit over 600 critical infrastructure orgs, and India's biggest bank filed a data loss incident, and Japan has been in an official state of emergency in cyberspace since October 9, which honestly explains the 5:55 AM post. Oh, and eMudhra, a certificate authority that's issued over 60 million certificates, whose entire job is proving websites are who they say they are, was supposed to be using private keys that are random numbers over a hundred digits long, and one of them was 4. Just 4. And the others were like 66 and 237. Anyway, it's Wednesday.
3
129
So basically, today PHP got two critical bugs that let anyone run code on your server without even logging in, which is bad, and then the details leaked before the patch was even out, which is worse, and it works on WordPress and MediaWiki and Magento and Joomla and Laravel, and Censys says like 1.5 million servers are running a version with no fix, so the NSA was like "take your system offline," and the FBI was like "take your system offline," and CISA and the UK and CERT-EU were all like "take your system offline," and then the Prime Minister of Japan, the actual Prime Minister, posted at 5:55 in the morning telling 48.8 million people to take their system offline, so everyone took their system offline, like the Dutch cybersecurity agency took its own website offline, and the Dutch parliament went offline, and the Port of Rotterdam went offline, and Finland and France and Denmark started pulling government sites, and Wikipedia went down, and Archive.org went down, and Asana and GOG and Something Awful went down, and the University of Vienna's webmail went down for some reason, and that's just PHP. Because GitLab also dropped a CVSS 10.0, which is the highest score they give out, for a bug that's been there since 2014, so that's every self-hosted GitLab for twelve years, and then LiteLLM 1.107.0 got hijacked and shipped a credential stealer and a remote access trojan in every single wheel and the Docker images, including latest, and you didn't even have to import it, just installing it was enough, and it's the second time this year, and then Railway paused every deployment on the entire platform because someone got into the environment variables, so now everyone has to rotate every secret they've ever stored there, and TiDB Cloud said someone was walking around inside with stolen credentials for basically a month and an extortion group says they took 10.6 terabytes, and Zeabur got breached for the second time in two months and is just shutting down, like the whole company, and Node.js patched remote code execution and a TLS bypass, and CISA says Plex is being actively exploited, and someone took over 300 Tor exit relays to steal SSH passwords, and SafePay ransomware has hit over 600 critical infrastructure orgs, and India's biggest bank filed a data loss incident, and Japan has been in an official state of emergency in cyberspace since October 9, which honestly explains the 5:55 AM post. Oh, and eMudhra, a certificate authority that's issued over 60 million certificates, whose entire job is proving websites are who they say they are, was supposed to be using private keys that are random numbers over a hundred digits long, and one of them was 4. Just 4. And the others were like 66 and 237. Anyway, it's Wednesday.
1,076
8,935
1,654
69,393
4,197,936
BREAKING: Ukraine has carried out the world’s first medical evacuation of a human via a drone from the battlefield the 30th mechanised brigade of Ukraine managed to save their injured comrade from a minefield. Just absolutely insane.
910
10,164
728
84,086
4,520,888
Replying to @_baldtires
We need a stamping video
10
2
2
95
4,813