Founder @ https://teapawt.net/t.co/MS5IB7hdby Scaling the world's largest CI challenges for 42 months Built Atlas Vector Search @mongodb
San Francisco, CA
Joined February 2014
- Tweets2K
- Following1.4K
- Followers2.1K
- Likes11.8K
Pinned Tweet
Londonmaxxing Part 2! One of the greatest angel investors of all time and a good friend. There’s been a ton of building in the morning, now it’s time for football. Wild videos and photos in the thread. cc @mjasay (en absentia)
So I’m at the weirdest record store I’ve ever seen in London. You. have. to. dig. to find any damn thing. Look what I just found.
.@theo never worked at a database company but he handles release candidates for his product better than all of them.
props to @cz_binance for handling but no one employee should be able to take down a business that big with their laptop
Scientific independent replication is one of the most important in research right now. I'm dialed in right now.
I’ll lose a lot of followers or whatever for this and be regarded as an idiot but while Bitcoin will collapse in line with the collapse of all money, it and its descendants will collapse last because agents will prefer them to paper/government notes.
Marcus Eagan retweeted
my guy @0xjustadev warned of this exact situation when EIP-7702 was discussed two years ago
Marcus Eagan retweeted
13 out of 5592 times google has been down this much. use godel (instead of the garbage you are using now) to find out:
GOOGL <F8> (EQUITY) HRH <ENTER>
In the name of @akshatvig , I have been fighting for this result, which I am now very proud of:
Critical vulns
Announcing 3 Critical vulns for hundreds of millions of IoT, Firewalls, OT, and Military devices including: Palo Alto Networks, Comcast, D-Link, HP, Canon, Honeywell, GE, Oracle, Siemens, Rockwell, Digi, Lockheed Martin, Boeing...
The vulns are with GoAhead Web Server which is a backend library used by these devices. There's a patch available from GoAhead but that doesn't mean there's a patch available for the devices yet -- that's up to the manufacturer.
- TLS traffic over DHE ciphers have a 1-byte secret, "04", meaning anyone can decrypt connections to these devices and steal login credentials and session tokens if the client negotiated with DHE ciphers like the latest TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256, which is extremely likely.
- LibreSSL mTLS has been completely bypassed, meaning anyone can connect over mTLS. If you have one of these devices listening on the internet and are expecting mTLS to protect it from attackers, take it offline or patch asap.
- OpenSSL Certificate Revocation Lists (CRLs) are not enforced, meaning if a user device is stolen or compromised, and you revoke that mTLS cert, nothing actually happens. There are a lot of other attacks this can be used for.
These are critical because these types of devices run our world. Water systems, electricity, military, firewalls, critical infrastructure.
foxio.io/blog/choose-your-ba…
Been a key pillar of the strategy spearheaded by @AvgDatabaseCEO for customers in financial services.
SF’s dating pool was once, as an Egyptian founder put it to us, “drier than the desert in my homeland.”
Now, gorgeous women are flocking to the city.
Why? As AI gets cheaper to build, companies flush with venture cash are hiring beautiful women to charm investors and clients.
Enjoy it while it lasts, gentlemen. As @nicolewizman1 writes: paying hotties 6 figures to get drunk with your business prospects feels like a pretty good sign we’re in a bubble. 👇
People do not understand how serious this matter is.
Some stats on #php2shell. In the 10 hours before it was publicly announced, across the @Cloudflare network we saw thousands of attempts to exploit it. That jumped to tens of thousands in the 45 minutes post announcement, hundreds of thousands within 2 hours, and millions now.
If you knew where my business was last year and you learned about this year, you wouldn't believe it!