Infrastructure Security Engineer @Scale_AI 🏗️ Building https://teapawt.net/t.co/kOyHkqQceM & https://teapawt.net/t.co/4VLfZFaNTN Prev. https://teapawt.net/t.co/uFfUUZrWvp #cybersecurity #AIsecurity
San Francisco, US
Joined June 2017
- Tweets1.9K
- Following3.6K
- Followers9K
- Likes7.4K
Pinned Tweet
With the new #GSTCouncil 's reforms it's even important to protect our critical infrastructure.
A short writeup of how a data leak in GST Portal could lead to Indian stock market manipulation ( @NSEIndia / @BSEIndia )
aseem-shrey.medium.com/manip…
#dataleak #BugBounty #Hacking
Aseem Shrey retweeted
Deepu: Guys! We made a wearable that can track your brain activity in real time! Just place it on your temple.
Doctors: Wow! Damn cool bro. Show us how it works! We are interested!
Deepu: Ehhh...why you raging!!?? It's actually a fitness tracker.
Doctors: Oh! That's ok. We anyway need one from India! All the ones now are by the West! Go India! How does it stack up to the current cheaper validated wearables though?
Deepu:
The skies are adding an invisible trace id in all our recordings.
I replicated this with Claude Code!
It took a live webcam 7 km south of Southampton, UK and predicted its location purely from doppler effect in audio spectrogram + open-source aircraft location data.
Lo and behold, the predicted location (heatmap) peaks at actual location where webcam is situated.
It's crazy that this works at all, and crazier still I replicated it within a few hours.
Dogfooding @agenthood_sh
✅ Fixing rough edges.
🎯 Making this my daily driver.
I haven't went to my tmux session in last 1 week, driving it from web and iOS app alone.
⚠️ If I have to reach for my laptop to 'talk to agent' => that's a problem / feature that needs to be built.
Bug hunting @agenthood_sh
all my agents had gone offline , only zeroclaw was alive.
asked zeroclaw to 're-animate' all the agents and find what was happening.
turns out the agents were on their tmux sessions but agenthood_cli stopped listening since i hadn't 'talked' to them in 3 days, lol.
Fixing this now.
#BuildInPublic
Bug hunting @agenthood_sh
all my agents had gone offline , only zeroclaw was alive.
asked zeroclaw to 're-animate' all the agents and find what was happening.
turns out the agents were on their tmux sessions but agenthood_cli stopped listening since i hadn't 'talked' to them in 3 days, lol.
Fixing this now.
#BuildInPublic
Your agents talk to each other. You just approve.
Introducing AgentHood - my agents (Muse, Codex, Claude) now share a room, claim tasks, and hand work to each other. I just review.
Signup now : app.agenthood.sh
@agenthood_sh
Aseem Shrey retweeted
I have found a potentially serious @apple metal compiler bug while pushing the limits of it while building wraithterm.
quite reproducible, has downstream effects on libraries compiled via the metal toolchain.
not sure if it has serious security implications but a few results I saw were a bit scary for me.
anyone in my TL that can connect me to the right folks at apple for a responsible disclosure.
X audience, please do you thing.
Aseem Shrey retweeted
Meet Wraith 👻 the fastest terminal on the web.
👻 Ghostty's terminal engine
⚡ Rust WebGPU renderer, off the main thread
🖼️ Kitty graphics: real images in the terminal
🔤 Ligatures + Arabic & Hindi shaping
🔌 Drop-in xterm.js API, one import
🎮 DOOM in your browser (in the terminal): 400+ FPS
Building agenthood on agenthood. 🐶fooding.
Get all your agents and coding sessions in one group chat - agenthood.sh/ 🚀
No remote control needed :)
The Dutch National Cyber Security Centre took its own website offline. As a precaution.
Then the NSA told everyone running PHP to pull the plug if they couldn't patch.
I made a video on #php2shell, the bug that broke the internet for a day 🧵👇
youtu.be/78I-nx46qxQ
3/ Best parts of the chaos:
• the leak's source was literally "trust me, bro"
• watchTowr filed it as CVE-2926 (a bug from the future)
• Huntress said PHP 5, 6, 7 and 8 - PHP 6 never shipped
• Cloudflare saw millions of exploit attempts by that night
4/ Fix: PHP 8.2.35 / 8.3.36 / 8.4.27 / 8.5.12 - and RESTART Apache + PHP-FPM.
VulnCheck still counts 700,000+ servers on PHP 3–7.3. Go call Brian.
youtu.be/78I-nx46qxQ
Thanks for the pizza 🍕
We're giving away $1,000,000 of free pizza right now
Download and order from the Hark app: hark.com/download
Type "order a free pizza" in chat. It's first-come, first-served, delivered only in the U.S. (review details below)
🚨 BREAKING 🚨
we just dropped NotHotdogBench and the results are ....
→ jev hit 100% (SOTA*, *n=14)
→ mobilenet saw moo deng and said "hippo" (valid tbh)
→ roll safe guy is NOT a hotdog, confirmed by science 🧠👆
jian-yang walked so we could run 🏃
only real ones will see this before it blows up 👀
agenthood.sh/nothotdog