Building cool tech stuff | Building https://xitter.cf/t.co/sgqRVBCXo2 DM for any development works I’m Boring Baby All I Do Is Make Money And Come Home
India
Joined December 2023
- Tweets1K
- Following264
- Followers330
- Likes1.7K
DevSo.iOS retweeted
Today we are in a security nightmare:
- Railway may have exposed customer environment variables and API keys
- SBI confirmed that customer records ended up on the dark web
- eMudhra's certificate keys were extremely weak (one was literally just the number 4)
- LiteLLM shipped a compromised version that steals credentials and includes a backdoor
- PHP released two critical remote code execution vulnerabilities (PHP2Shell)
- Node.js issued urgent security patches for a Brotli decoder remote code execution flaw, plus TLS and DNS issues and blocked the compromised eMudhra certificates
- Rajasthan gov systems were allegedly linked to the exposure of a large set of identity records
- OpenCode confirmed a breach that exposed AI provider API keys (OpenAI, Anthropic, Google) for a portion of Console users
- Plex Media Server vulnerabilities (Plex2Shell) are being actively exploited in the wild to install malware on unpatched servers
- GitLab fixed a critical CVSS 10.0 unauthenticated remote code execution flaw in its CI/CD regex compiler
DevSo.iOS retweeted
We're adding a new plugin to Claude Code: You should Know.
It scans Claude's output for important information you might miss to help keep you in the loop.
Enable it with:
/plugin enable cc-plugin-you-should-know@builtin
DevSo.iOS retweeted
Announcing dots. Dots work 24/7 for you, learn from your feedback, have their own computer, browser and can be connected to over 4k apps in our ecosystem.
They’re powered by Astra our best model yet. Included in your Pro plan, without drawing down on any of your usage. You can even call a dot while it’s working.
We’re getting you started with your primary dot today and soon you’ll be able to create entire teams of them.
DevSo.iOS retweeted
Device Hub in Xcode 27.1 has a hidden Action Bar specifically for iPhone Duo.
It gives you a lot more control over the device angle, and you can quickly switch between 5 device poses with keyboard shortcuts. There’s also a “Table Mode” control.
To enable:
defaults write com\.apple.dt.Devices com\.apple.dt.coredevicepop.useInternalV68ActionBar -bool true
and restart Device Hub.
The iPhone Duo simulator also comes with a hidden HingeStatePoster wallpaper.
DevSo.iOS retweeted
i’ve had 5289365493 diet cokes in the last one week while waiting for claude to get refilled.
so i built diet coke, for my dearest claude
get one for your claude - dietclaude.com
DevSo.iOS retweeted
Introducing OpenSEO, the open source alternative to Semrush and Ahrefs.
I started building it out of spite because the existing tools were too expensive, bloated or scammy.
Since then, we've gotten 4k stars on Github and are launching on Product Hunt today.
Hope you support!
DevSo.iOS retweeted
today's release of claude code on desktop makes it easy to turn remote control on by default for your sessions
DevSo.iOS retweeted
Dude.
Microsoft is investigating mistralai PyPI package v2.4.6 compromise. Attackers injected code in mistralai/client/__init__.py that executes on import, downloads hxxps://83[.]142[.]209[.]194/transformers.pyz to /tmp/transformers.pyz, and launches a second-stage payload on Linux. The file name transformers.pyz appears deliberately chosen to mimic the widely used Hugging Face Transformers library and blend into ML/dev environments.
The main payload is a credential stealer, but it also includes country-aware logic; it avoids Russian-language environments and contains a geo fenced destructive branch that has 1-in-6 chance of executing rm -rf / when the system appears to be in Israel or Iran.
To mitigate this threat: isolate affected Linux hosts, block 83[.]142[.]209[.]194, hunt for /tmp/transformers.pyz, pgmonitor[.]py, and pgsql-monitor.service, and rotate exposed credentials.
ALT Screenshot of mistralai PyPI package v2.4.6 compromise
DevSo.iOS retweeted
Hello Apple,
We noticed an issue with your submission that requires your attention.
Specifically, your ad is displayed in a way that may mislead or confuse users and may prevent them from understanding that they are tapping on an ad.
Next steps: show the blue background.
😘
DevSo.iOS retweeted
MLXAudio swift package is ready for prime time!
Still early days but we are happy to share it.
Great work by @rudrank!
DevSo.iOS retweeted
This is so cool!
cmd: agentic AI in Xcode
github.com/getcmd-dev/cmd
