Author of Klag - kafka lag monitoring tool. https://teapaw.org/t.co/JLE37DxzUF // Dad; data engineer
- . .-.. -....- .- ...- .. ...
Joined March 2008
- Tweets7.6K
- Following306
- Followers564
- Likes10.4K
Pinned Tweet
Climate change evidence: How do we know? climate.nasa.gov/evidence/#.… thanks @NASA
Hacktoberfest recap for Klag. A bit overdue.
I maintain Klag, a Kafka consumer lag exporter
github.com/themoah/klag
On 21 Sep I put up a contributor board:
github.com/themoah/klag/issu…
Closed it as completed on 3 Nov.
7 people new to the project got their work merged. 13 PRs merged, out of 17 opened. Nobody who already contributed to Klag came back for this one. Every merged contributor was new.
There is a StatsD/DogStatsD reporter now. Also partial-cycle metric cleanup, Helm disruption budgets, a bunch of MCP hardening (JVM -D settings, rejecting bad JSON types, Origin/Content-Type checks, blocking multipart uploads, locale-safe labels), CI on Java 25 LTS. And docs for Confluent Cloud, a kafka-lag-exporter cutover, Grafana/PromQL polish and an MCP/Prometheus checklist.
One person landed five of those merged PRs. Thanks to everyone who contributed.
A few issues are still open if you want to jump in - MSK IAM, topic filters, a Datadog dashboard and a local integration stack.
github.com/themoah/klag
Yey, finally got the blue mark ✔️
Took a bit more than a week of "under review".
First perk I'm going to abuse - longer posts. Kafka, Klag and tiny ML models, without squeezing everything into 280 chars.
First long one goes out later today ;)
Someone tried to sneak a remote-code loader (Crypto stealer) into my open-source project.
I maintain Klag, a Apache Kafka consumer lag exporter
github.com/themoah/klag
They didn't touch the Java exporter. They came dressed as documentation.
A first-time contributor opened two PRs on 13 Oct. One would merge CLAUDE.md into AGENTS.md. The other added a label cardinality guide I'd actually asked for. They looked like a gift. Hacktoberfest energy. "Docs-only." website/package.json was edited so `npm run dev`, `start`, and `build` run `node init && …`. If you maintain a docs site, this is the line a tired review skips. The new website/init file looks like it only creates a `.tmp` folder. That's the rubber-stamp part. Harmless. Helpful, even. Scroll to the end of the file. After a long run of tabs and spaces: a layered, obfuscated JavaScript dropper. The same class of hidden tail is tacked onto website/astro.config.mjs, so merely loading the docs-site config would run it too.
I unpacked it statically. I did not run it. It's a remote-code loader. It queries Ethereum for transactions from a hardcoded sender, then reads two IPv4 addresses out of a transaction's `to` field. Those IPs serve a second-stage script, which it XOR-decodes and runs in a detached hidden `node` process. Blockchain as a dead-drop: the C2 address can rotate without anyone editing the PR. You merge once; they retarget later. This was an attempt.
The PRs were closed without merge. The pages — and the account that opened them — are gone from GitHub now. Nobody running Klag was infected.
Attacker has already deleted the PRs, sharing screenshots:
I've spent over 7 years at cybersecurity companies as Data & ML Engineer and it almost slipped through.
If you maintain a docs site: read the tail of "docs-only" files — whitespace is a hiding place — and diff npm script hooks like production code.
Share this so other maintainers see the trick.
If you work with Kafka, star or watch Klag: github.com/themoah/klag
What a day for cybersecurity.. first OpenAI files 948 patches, then vuln from 2016 OpenSSH on musl is being released.
Reading about OpenCode security incident.
"An intruder reached a legacy system at OpenCode".
Afaik OpenCode was released in June 2025.
That ain't legacy. That's the price of rushing
thehackernews.com/2026/10/op…
Should we expect grok 4.8 soon @SpaceXSI ? Looks like 4.7 was dumbed down / quantized
Am I too late to the party and Jev-alike models are the yesterday new, or anyone is still interested in them?
I'm happy to announce that I'm releasing Lev1, based on @IFM_AI K2 Horizon - 3.7B model.
themoah.medium.com/introduci…
It's fast, ~28ms median response time.
Great - 68.8 on Tools & Automation benchmark (Decision index v0.2.1), on par with 27B (8x bigger) models.
Apache-2.0 licensed.
And I'd really appreciate the feedback. Please don't hesitate to message me or open a discussion on @huggingface
Additionally I'm releasing the dataset that I've build for post-training - huggingface.co/datasets/thea…
I’m probably more worried about next generation that struggles to read and basic math, than about AI itself and the future.
46% of Israeli 15-year-olds don’t reach the basic PISA mathematics threshold.
PISA 2025 is out. Average math, reading, and science scores in rich countries are at their lowest point since the test began 📉
East Asia still dominates. China (Beijing, Shanghai, Jiangsu, Zhejiang) led math and science. Singapore led reading. Japan, South Korea, Taiwan, and Macao were close behind.
The U.S. kept slipping in reading and math. Only about 8% of American 15-year-olds hit the top math level, versus 37% in Singapore and 54% in the Chinese sample.
The accompanying survey found family engagement falling in almost every country, especially for boys. Kids whose parents asked about school at least weekly scored about 35 points higher in science, more than a year and a half of learning.
Still can’t understand why @cursor_ai’s monthly charge keeps triggering fraud alerts on my Amex every single time.
Yey! Klag now have ai agent skills, klag.dev/ai/agent-setup/
now you can you simple start with
/plugin marketplace add themoah/klag
/plugin install klag@klag
I've been planning to add this for quite some time.
Recently I've become a huge fan of @maxinomics .
Great topics, narration and graphics. Not too short, not too long.
Benchmark results driven model development.
Introducing GLM-5.3: Built to Code. Ready for Cyber Defense.
- Top-tier coding and agentic capabilities, achieved through post-training on the 743B base model
- A major leap in cybersecurity, setting a new standard among open models
Tech Blog: z.ai/blog/glm-5.3
Looking at how @karpathy built LLM models in couple hours made me wonder - how hard it is to build an AI model from scratch, by myself.
And here I present to you - Mevine-0.1, 107M Speech-to-text model I've build from scratch.
huggingface.co/theaviv/mevin…
Let me tell you something you might already know - building AI model from scratch is very, very hard.
Probably, on the most challenging tasks I've done in my entire career.
While most of modern LLMs are decoder-only, encoder part of ASR is the most important one. But shortly in the journey I've found that there are so many other hard parts: sourcing and preparing training data, building training pipeline and evals.
medium.com/@themoah/introduc…
