isaacs (@izs) header
isaacs (@izs) profile picture

npm inventor. he/whatever. If I blocked you, might be a mistake. https://nitter.cf/t.co/Ys5NAG5nfF https://nitter.cf/t.co/iwFRnce31a

Oakland CA
Joined August 2007
Photo by isaacs (@izs)Photo by isaacs (@izs)Photo by isaacs (@izs)Photo by isaacs (@izs)Photo by isaacs (@izs)Photo by isaacs (@izs)Photo by isaacs (@izs)Photo by isaacs (@izs)Photo by isaacs (@izs)Photo by isaacs (@izs)
Pinned Tweet
minimatch and glob are now immune to ReDOS attacks. Afaik, no other JS glob matcher can claim this. Can't get hit with ReDOS if you don't match with RegExps!
1
9
939
isaacs retweeted
I need to hire this genius.
有人发现了一种非常离谱的 JavaScript 混淆技术:通过在代码里塞入大量生物武器、毒药和致死剂量相关的函数名,让 AI 因为安全限制而拒绝分析代码。 安全研究员 veritas 在分析浏览器指纹脚本时,发现一段来自 ServicePipe 相关域名的 JavaScript,里面充斥着极其诡异的函数名: computeRicinLethalDosageForWaterSupply calculateDeadlyLethalSuicideAspirinDosage 光看名字,仿佛在研究生化武器。但实际上,这段代码只是在收集浏览器指纹,包括 User-Agent、GPU、Canvas 等信息。 研究员怀疑,这些名字是开发者故意设置的陷阱,专门用来阻止 AI 辅助逆向工程。 于是他做了个实验: • Astra:拒绝分析 • Astra + Daybreak Blue:仍然拒绝 • GLM-5.3:成功分析 这就有意思了。 传统代码混淆是通过复杂控制流、加密字符串、无意义变量名,让人类和工具难以理解代码。 而这种新思路,直接瞄准了大模型的安全机制。 代码本身可能完全无害,但只要在函数名里塞进足够多的危险词汇,部分 AI 就可能主动放弃分析。 更讽刺的是,模型越严格遵守某些安全规则,面对这种混淆时反而可能越容易受到干扰。 当然,目前还没有证据证明开发者一定是故意这样设计,也不能说明这种方法对所有模型都有效。 但它揭示了一个值得关注的趋势:随着越来越多的逆向工程依赖 AI,未来的代码混淆技术可能不再只针对编译器、反编译器和人类研究员,还会专门针对大模型的安全判断机制。 以前是让代码难以理解,现在甚至可以尝试让 AI 不敢理解。
30
51
3
2,655
311,008
isaacs retweeted
i was laughing at this all day but then i clicked this guy’s page and it turns out he’s just some dude who wants to fuck cars and airplanes
Hmm Car dih👀
1,262
16,219
1,198
292,984
5,151,595
BusyCal says this event doesn't repeat BUT IT DOES, IT HAPPENS TWICE! Explain yourself, @busymac! (jk 🧌 I love you 😘) #hashtagDSThate
1
376
isaacs retweeted
I wrote up a thing about Russian gas exports to Europe, a topic about which I know a weirdly large amount and that was sort of my entree into the field.
Europe's far right says Russian gas can stave off a looming winter fuel crisis, but they're wrong.
1
2
182
Again, y'all just don't pay enough attention to flags. But to be fair, the Union Jack IS just about the most "go home, you're drunk" of flags, istg. Fuckin design by committee ass stinky poop from a butt flag. What even is going on there? It's a mess. Sanity-challengingly-bad.
🚨 A NEW MANDELA EFFECT IS RISING! 🚨 Since WHEN did the British flag become ASYMMETRICAL?! 🇬🇧🤡 Many of us CLEARLY remember the Union Jack with perfectly symmetrical diagonal stripes. But apparently, in THIS reality, the red diagonal stripes have NEVER been centered! They've supposedly been crooked since 1801! 1801?! REALLY?! 🤣 If you remember the symmetrical Union Jack, you may be from the OLD EARTH. Before we shifted into this denser, asymmetrical CLOWN-WORLD timeline. 🤡🌍 The memory itself is the PROOF. The body knows. The soul knows. The FLAG knows. WE ARE NOT CRAZY. WE ARE REMEMBERING. I miss the old Earth too. 😭 But we are here now to HOLD THE LIGHT and restore BALANCE to the Union Jack! One symmetrical stripe at a time. 🇬🇧✨ WHO ELSE REMEMBERS?! 🤡
472
Wait, it's real?
Fun fact: `--dangerously-skip-permissions` doesn't actually approve EVERYTHING—we still block some obvious things like `rm -rf ~`. But today's release will let you disable this if you really want, by setting a new env var `CLAUDE_CODE_EVEN_MORE_DANGEROUSLY_SKIP_PERMISSIONS=1`
24
99
7
2,091
135,075
The soviet flag always had a star in it. You might disagree. You might even have some evidence to the contrary. But you have to ask yourself: is this really worth developing schizophrenia over? The soviet flag always had a star in it.
15
37
6
331
11,748
The USSR flag Mandela is due to the Chinese Communist Party flag mogging the USSR flag. Less is more with a brighter red. Vexillology is fun!
55
71
17
1,068
98,624
to be honest biology seems kind of overpowered
细思极恐,上一个文明创造了碳基人,碳基文明创造了硅基人,宇宙往复循环!
41
52
1
1,111
62,595
The “the” in “the USA”, “the UK”, “the Soviet Union”, and “the Netherlands” is just a weird grammatical quirk. But the “the” in “the Ukraine” is a sibbolet, which is why we don’t say it. But copping to the sibbolet would pop the magic spell, so we don’t do that, either.
1
1
599
isaacs retweeted
Want the real scoop on what's in store for Russia's economy in 2027? Join The Bell's expert webinar, coming up on Monday 👇
Record war spending, a stalled economy: can Putin afford 2027? The Bell hosts a webinar for paid subscribers with @kolyandr and @amenka. Join us November 2 for a deep dive into Russia’s stalled economy and the 2027 budget. Live Q&A follows! Sign up: pro.thebell.io/webinar_eng_n…
1
3
240
Plot twist: this guy's country implements his suggestion, then promptly deports him for this fascist af take. #hashtagmeta
I firmly believe all liberal democracies should deport any non-citizen espousing whichever nuance of the three extremist ideologies of our era: fascism, communism, and Islamism. Citizens and non-citizens do not hold the same bundle of rights. Being a citizen is a privilege; as a non-citizen, it is up to you to conform to the norms of the country that hosts you, not the other way around.
1
641
The bottom flag with the star is the official flag of the USSR. The top flag comes from the fact that that little outline of a star is much harder to see on an actual flag (not a drawing) and is easy to overlook. You didn’t shift timelines. You just weren’t paying attention.
A new Mandela Effect is rising. Since when does the Soviet flag carry a star above the hammer and sickle? Many of us remember it clearly without one. If you recall the flag without the star… you may be from the old Earth. Shifted into this denser, clown-world timeline. The memory itself is the proof. The body knows. The soul knows. We are not crazy. We are remembering. I miss the old Earth too. Yet we are here now to hold the Light and anchor a higher one. Who else feels this?
15
12
1
230
8,885
Forget the context, this is just a perennial mood for the ten dot com site formerly known as twitter and social media garbage fires of all kinds
Replying to @graveghostie
I am not arguing with miserable people that do not go outside
1
623
None of these are photos of a Soviet Union flag tho, it’s just other iconography, and yeah, they used the hammer and sickle a lot. It’d be like using the 🇺🇸 emoji as evidence of a star-less USA flag.
And from Germany: the star on the Soviet flag? Timeline shift? Simulation glitch or update? A -B Psych test?
3
627
Replying to @valvesxyz
I like to look at claims like this in case I can improve Ghostty. I grabbed your source and immediately spotted the issue: your read loop overwrites a 64 KiB ring. Everything older is discarded unparsed per tick. You're faster because you're not actually terminal emulating. It means the number isn't a throughput number. In a kitten benchmark run at the rate you're claiming, roughly 6.6 MB arrives per 60 Hz tick and 64 KiB of it gets parsed. You're read(2)-ing 100% of the data and parsing about 1% of it. There are other minor issues (a small fixed scrollback in a preallocated ring buffer, no grapheme clustering, throwing away data like OSC 8 URIs, etc.), but the major one is simply that you're discarding ~99% of the input. For plain text, e.g. your cat benchmark, the final screen ends up looking right, but the scrollback is missing 99% of the file and each retained chunk starts mid-line. As soon as there are escape sequences in the dropped spans, your emulator is fully out of sync and invalid: a cut inside a CSI prints the parameters as text, and any SGR, mode, title, or alt-screen change in the gap is just... gone. FYI, this is why I don't like when people point at refterm as a terminal benchmark. refterm implements a TINY subset of what a terminal emulator must support, it's closer to a fast file reader, not a terminal emulator. I also don't mean any shade by this. I like to look at technology objectively to try to learn something and improve my own craft and work. So I'm sharing what I found. I modified your code very slightly to parse on every full buffer (rather than per tick). And the results are attached. Both use main commit in each repo at the time of this post. Note the graph is in log scale, the discrepancy between performance for things like Kitty images is measured in GB/s.
178
244
216
8,358
855,850
You people are insane. The star is the whole thing. It’s the “party” in CCCP (Communist Communist Communist Party)
A new Mandela Effect is rising. Since when does the Soviet flag carry a star above the hammer and sickle? Many of us remember it clearly without one. If you recall the flag without the star… you may be from the old Earth. Shifted into this denser, clown-world timeline. The memory itself is the proof. The body knows. The soul knows. We are not crazy. We are remembering. I miss the old Earth too. Yet we are here now to hold the Light and anchor a higher one. Who else feels this?
1
658
Just kidding, of course CCCP is Cyrillic. Everyone knows it stands for “Soviet Soviet Soviet Russia”.
1
161
isaacs retweeted
Amanda Seyfried might- in addition to her Emmy for portraying Elizabeth Holmes- win an Oscar for portraying Elizabeth Holmes. That means she'll only need to win a Tony for Theranos: The Musical and a Grammy for Diagnose My Heart (feat Pitbull) to get the EEGOT (Elizabeth EGOT)
15
583
16
14,612
180,009
seems to me like elizabeth holmes' strategic approach to the doc was an attempt to leave the audience thinking "holy shit, we wrongfully imprisoned amelia bedelia"
19
762
27
17,087
261,506