Co-founder & Chief Product Officer at @mainfrme - #Nightscout, #OpenAPS developer #WeAreNotWaiting - Formerly Next Games, MakieLab, Habbo Hotel. https://nitter.cf/t.co/wimt0Zs3UA
Helsinki
Joined September 2007
- Tweets22.6K
- Following647
- Followers2.2K
- Likes20.2K
Sulka Haro retweeted
as bad as things have gotten in the past 4 days, they are going to get a lot worse before they get better. security leaders, never let a crisis go to waste: please go to your boards and ask for help right now. not for ai, for the basics. (we need to hold on for ~18 months.)
The material science to make a foldable that doesn’t develop a crease doesn’t exist even at Apple budget level
Sulka Haro retweeted
We are underestimating the bad faith eMudhra possibly operated in. They actively added a step to the key generation process causing this failure but are making it seem like a dumb mistake. Let me explain with diagrams and python snippets 👇
Global TLS Intermediate CA incident: We’ve updated our incident page with how it happened, who is affected (one US customer ecosystem), what’s not affected, and what we’re putting in place. We will publish the root cause once our investigation is complete.
👉emudhra.com/en/post/certific…
Readers added context they thought people might want to know
eMudhra minimizes the scope by claiming only "one US customer ecosystem" is affected. In reality, 8 of its CA certificates had catastrophically weak private keys (one being simply the number 4), allowing anyone to forge trusted HTTPS certificates for any website on the internet.blog.google/security/prote…
Oh wow, wrote obsession while typing in Finnish and iOS corrected it to “incest enthusiast”. What the hell is happening in Cupertino?
Sulka Haro retweeted
🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages.
The latest [email protected] now pulls in [email protected], a package that did not exist before today. This is a live compromise.
This is textbook supply chain installer malware. axios has 100M+ weekly downloads. Every npm install pulling the latest version is potentially compromised right now.
Socket AI analysis confirms this is malware. plain-crypto-js is an obfuscated dropper/loader that:
• Deobfuscates embedded payloads and operational strings at runtime
• Dynamically loads fs, os, and execSync to evade static analysis
• Executes decoded shell commands
• Stages and copies payload files into OS temp and Windows ProgramData directories
• Deletes and renames artifacts post-execution to destroy forensic evidence
If you use axios, pin your version immediately and audit your lockfiles. Do not upgrade.
Hey @AppleSupport how do I get this to not appear on my screen every minute? I have zero intent to upgrade until you’re resolved out open case where iPadOS 26 wasn’t compatible with data from iPadOS 25, causing loss of large amount of work.
Someone at Apple seems to be getting desperate to push people to upgrade to the latest OS version, so iOS and MacOS are pushing dialogs to the users, designed to make it easy to accidentally trigger the update.
Apple user interface changes to cause me to accidentally install iOS 26 are getting a lot more aggressive. Based on reports on how bad it still is, I have zero intent to install.
Noticed Apple Music was taking whopping 12 GB of space on my phone with no locally downloaded music. 👀 Deleted and instantly reinstalled. 10 GB of local documents disappeared, with zero effect on functionality or responsiveness.
Again deep disappointment buying food for our pets. Local store has these delicious looking products, only for me to realize a few seconds later it’s not for cats.
For whatever reason, @claudeai really, really wants to use Python for everything unless you tell it not to in every prompt. I'm parsing some very large files in a hobby project and the first parser Sonnet made for me used Python. 1/
The python importer was very slow. The script estimated it'd literally take 2 days to parse 500 GB of data. Optimisation doubled the speed, but still too slow. So I asked for a @rustlang version of the parser. The first pass was literally 2000 times faster. 2/
Sulka Haro retweeted
Here is a great summary of what is known and what is unusual / usual about comet 3I/ATLAS from Jason Wright at Penn State - I don’t think he’s on X. The headline is ‘It’s Obviously a Comet’. sites.psu.edu/astrowright/20…
Sulka Haro retweeted
I gave an opening keynote at the FIDO Alliance’s “Authenticate” conference a few weeks ago! My goal was to explain, as clearly as I can, why passkeys are important and how we should use them to reduce the harm that passwords cause. [1/2] youtube.com/watch?v=otObbUSx…
