Secure, Scalable & Compliant DevSecOps, CyberSecurity, AI tooling, SRE & FinOps Solutions. Connect via https://teapaw.org/t.co/CaUilu5rdL or email for a consultation.
Bengaluru, India
Joined May 2015
- Tweets620
- Following422
- Followers43
- Likes3.1K
Well, pam_fingwit has a pretty easy LPE bug.
github.com/xapp-project/fing…
(Security issue: Local Privilege Escalation in pam_fingwit)
This one needs physical access to the machine, but the impact is way too high!
1
1
56
Claude finds an RCE in vim; older vim is immune!
Imagine an seeker who can run Claude against all popular FOSS, in parallel on their many used/popular versions, and build out a DB of exploits that work across many versions of an app.
Remember K3yM4k3r from Matrix Reloaded!😂
We asked Claude to find a bug in Vim. It found an RCE. Just open a file, and you’re owned. We joked: fine, we’ll switch to Emacs. Then Claude found an RCE there too.
Full story: blog.calif.io/p/mad-bugs-vim…
47
@excitel_rocks recheck your BGP peering!
Took 100 samples each, dig on ecovacs.com via 8.8.8.8, 8.8.4.4 & 1.1.1.1. Resolves to { 43.109.97.22, 43.109.97.31, 43.109.97.45, 43.109.97.52 }
@ecovacsrobotics These aren't reachable from Excitel ISP (ASN: 133982)
48
Hey @ecovacsrobotics, @excitel_rocks
ecovacs.com (resolves to all.ecovacs.com.a1.initww.co…) isn't reachable from a few ISPs like Excitel in India.
Excitel resolves that to 43.109.97.45 & times out, whereas Airtel resolves to 155.102.2.162 & works.
Check your DNS!
Rashtrotthana folks @Rashtrotthana_P,
Maybe you deserve a better IT partner. Seems your current IT partner isn't really doing even basic site monitoring properly.
Please reach out via DM for more details! I can help in setting up some basic site monitoring for your portal.
21
>> Rather than throw hardware at the problem, our engineering team relied upon thoughtful architecture
Neat!
There are many tech leaders that get fooled by the "merchants of complexity", over-engineering their solutions at the infra layer.
cc: @dhh @brankopetric00 @QuinnyPig
2 servers.
8 CPUS.
Processing 8 billion ticks per day. Under 2 milliseconds.
Running at 20% CPU utilization.
Sometimes the best infrastructure is the one you build yourself.
That's our market feed data infrastructure at Sahi. This processes high speed feeds from the Exchanges and builds the critical data products that power your trading experience on Sahi.
Rather than throw hardware at the problem, our engineering team relied upon thoughtful architecture choices:
→ Lock-free Rust actors
→ Pre-serialized message caching
→ Time-bucketed partitioning
→ Token-aware database routing
Full technical deep-dive:
sahi.com/blogs/from-exchange…
@Sahi_HQ
Restuarant Chain mental model to understand the basics of k8s ecosystem is very helpful for many.
Source: medium.com/@kanishks772/i-wi…
9
Sounds highly suspicious.
1. If there's really nothing to hide, why make a huge fuss wasting precious founder energy & effort, instead of simply trashing that *black*mail?
2. If LEA are already on it, why announce in public & share a status update with the blackmailers?
This quoted post is unavailable.
282
Article (in tweet below) by @dileeplearning offers a great insight on how it's usually *hot-air* that gets a whole lot of attention before the next paradigm-shift.
Skeptics & oddballs move the needle.
Now, think of a dirigible being a mothership for hundreds of nimble drones!
A bit too pessimistic. Scaling on current path won’t get us there, but humans are existence proof for AGI and we’ll eventually figure out the principles of human intelligence.
Somewhat reminds me of the 1903 nyt article “flying machines that don’t fly”
blog.dileeplearning.com/p/we…
30