Rustcity Рустcитий (@Rustcity_DMT) header
Rustcity Рустcитий (@Rustcity_DMT) profile picture
Rustcity
Joined April 2014
Photo by Rustcity Рустcитий (@Rustcity_DMT)Photo by Rustcity Рустcитий (@Rustcity_DMT)Photo by Rustcity Рустcитий (@Rustcity_DMT)Photo by Rustcity Рустcитий (@Rustcity_DMT)Photo by Rustcity Рустcитий (@Rustcity_DMT)Photo by Rustcity Рустcитий (@Rustcity_DMT)Photo by Rustcity Рустcитий (@Rustcity_DMT)Photo by Rustcity Рустcитий (@Rustcity_DMT)Photo by Rustcity Рустcитий (@Rustcity_DMT)Photo by Rustcity Рустcитий (@Rustcity_DMT)
Rustcity Рустcитий retweeted
Regime change was successful🇺🇸
298
2,432
349
21,089
337,415
Rustcity Рустcитий retweeted
Replying to @HormuzLetter
"Worth it"
1
5
148
4,648
Rustcity Рустcитий retweeted
Get in the $VVV Stream! Starting in a few min!
7
7
2
56
8,428
this is rather hopeful
Scientists found a way to flush Alzheimer’s plaque out of the brain in minutes. Without any surgery and drugs. Your brain has a waste-clearance network called the glymphatic system. It flushes out toxic proteins and dead cells. But it only really activates during deep, slow-wave sleep. If you don't sleep, the trash piles up. Over time, that buildup leads to cognitive decline and Alzheimer's. Until today. Researchers just published a paper proving they can manually trigger this cleaning cycle. Without you ever going to sleep. They used 40.68 MHz ultrashort waves (USW) beamed non-invasively into the brain. Within 10 minutes, the brain's fluid flow rapidly accelerated. The waves artificially synchronized the neurons into a Delta state, the exact frequency of deep sleep. This forced the brain's water channels to open and start flushing out the system. They tested it on mice with traumatic brain injuries and Alzheimer's pathology. The brain swelling dropped. The toxic proteins were cleared out. Cognitive deficits actually improved. No surgery. No massive chemical interventions. Just a frequency.
9
Rustcity Рустcитий retweeted
see - if eMudhra was chinese, they would never have picked number 4 as their private key
136
524
62
11,132
209,853
Indian Cybersecurity Certificate holders be like
144
2,158
152
19,452
371,433
today is wednesday
So basically, today PHP got two critical bugs that let anyone run code on your server without even logging in, which is bad, and then the details leaked before the patch was even out, which is worse, and it works on WordPress and MediaWiki and Magento and Joomla and Laravel, and Censys says like 1.5 million servers are running a version with no fix, so the NSA was like "take your system offline," and the FBI was like "take your system offline," and CISA and the UK and CERT-EU were all like "take your system offline," and then the Prime Minister of Japan, the actual Prime Minister, posted at 5:55 in the morning telling 48.8 million people to take their system offline, so everyone took their system offline, like the Dutch cybersecurity agency took its own website offline, and the Dutch parliament went offline, and the Port of Rotterdam went offline, and Finland and France and Denmark started pulling government sites, and Wikipedia went down, and Archive.org went down, and Asana and GOG and Something Awful went down, and the University of Vienna's webmail went down for some reason, and that's just PHP. Because GitLab also dropped a CVSS 10.0, which is the highest score they give out, for a bug that's been there since 2014, so that's every self-hosted GitLab for twelve years, and then LiteLLM 1.107.0 got hijacked and shipped a credential stealer and a remote access trojan in every single wheel and the Docker images, including latest, and you didn't even have to import it, just installing it was enough, and it's the second time this year, and then Railway paused every deployment on the entire platform because someone got into the environment variables, so now everyone has to rotate every secret they've ever stored there, and TiDB Cloud said someone was walking around inside with stolen credentials for basically a month and an extortion group says they took 10.6 terabytes, and Zeabur got breached for the second time in two months and is just shutting down, like the whole company, and Node.js patched remote code execution and a TLS bypass, and CISA says Plex is being actively exploited, and someone took over 300 Tor exit relays to steal SSH passwords, and SafePay ransomware has hit over 600 critical infrastructure orgs, and India's biggest bank filed a data loss incident, and Japan has been in an official state of emergency in cyberspace since October 9, which honestly explains the 5:55 AM post. Oh, and eMudhra, a certificate authority that's issued over 60 million certificates, whose entire job is proving websites are who they say they are, was supposed to be using private keys that are random numbers over a hundred digits long, and one of them was 4. Just 4. And the others were like 66 and 237. Anyway, it's Wednesday.
10
Rustcity Рустcитий retweeted
Controversial take from Gemini 4 Argon
264
264
120
3,198
335,012
Rustcity Рустcитий retweeted
The guy who gave us QLoRA, says DeepSeek's inference system is on par with OpenAI's stack and better than what Anthropic runs, at least at their scale. Now check the license. Apache 2.0. Until today a production stack at that level existed inside a handful of companies. It was the thing that made their API fast and their margins fat, and none of them ever showed it to anyone. Today any startup, any university, any cloud in any country can download it, read it and run it. It runs on NVIDIA Blackwell and on Huawei Ascend, so it isnt tied to 1 chip vendor either. This is what I mean when I say open weights are about more than downloading a chatbot. DeepSeek is giving away the knowledge that only a few labs had, and that changes who can build an AI company at all. Respect @deepseek_ai
This is a very big deal. DeepSeeks inference system is on par with OpenAIs stack and better what Anthropic is running (at least for their user size).
19
157
8
1,716
57,765
Rustcity Рустcитий retweeted
It's worse than Heartbleed. it should be on the front page of every newspaper in the morning (but it wont be) It's so weird living in a tech dominated world where everyone has a smartphone and is on the internet constantly.. ..yet most people will never even hear about this.
Millions of IoT devices, Docker containers, forgotten Linux machines, unmaintained CLI tools, etc. are all going to be relentlessly hacked via safely signed malware for the next several years or maybe indefinitely. eMudhra hack might be the most important event of the year.
26
155
11
1,891
198,242
"If the model can change at any time, we can’t build business processes on it."
OpenAI starts refusing normal work for a real firearms industry data business. Wouldn’t look at an ammo dealer’s site. Couldn’t pull range policies. Wanted to lecture the owner. So the founder built 3 servers with 12 AMD R9700s for $32.2k. Same workload that six Mac Studios did at 12 jobs/min now runs at 175 jobs/min. 15× throughput. No API changes. No model drift. Models they chose on hardware they own. Love this qoute: "If the model can change at any time, we can’t build business processes on it." This isn’t a basement experiment. It’s infrastructure. Sometimes local isn’t a side project. Local AI stops being a hobby the moment the cloud starts breaking your actual business.
1
14
Rustcity Рустcитий retweeted
one day you wrote console.log("here") for the last time and didn't even know it
213
1,727
268
17,880
607,517
Rustcity Рустcитий retweeted
WHAT ??
987
14,411
1,114
280,638
9,431,571
Rustcity Рустcитий retweeted
“Fifty eight, out of date! Let our onions speculate!”
59
236
89
2,815
320,426
Rustcity Рустcитий retweeted
🚨 BREAKING: A Broadcom Wi-Fi bug lets anyone in range run code on routers without the password. Quentin Kaiser showed it on Proximus, Orange Belgium and VOO routers and estimates ~1.5M in Belgium are exposed, none patched. The bug dates to 2010. Broadcom won't assign a CVE.
69
528
100
3,164
377,974
Rustcity Рустcитий retweeted
Could this happen elsewhere? Yes. The same Danfoss systems hacked in France are used worldwide - US, Canada, Japan, all over Europe. Hackers can remotely turn freezers into 50°C ovens. France lost millions in food overnight. Vulnerability known since August. Most stores never updated.
It looks apocalyptic. It isn't. France, October 12: hackers took control of supermarket refrigerators, raising the temperature to 50°C. Over 500 stores affected (Intermarche, Super U, Carrefour). Cold chain broken, tons of food discarded. Not a shortage. It’s a targeted attack on the food supply chain.
39
341
10
1,152
51,473
Rustcity Рустcитий retweeted
🇾🇪🇸🇦⚡️- Three big booms heard in Riyadh, according to Reuters.
211
11,920
119
223,385
3,536,373
Rustcity Рустcитий retweeted
🚨 If you don’t want to open up your Ledger just yet, here’s a list of hardware wallets and their weights: ⚖️ Hardware Wallet Weights Ledger • Nano X – 34 g • Nano S Plus – 21 g • Flex – 58 g • Stax – 44 g • Nano Gen5 – 46 g Trezor • Safe 7 – 45 g • Safe 5 – 23 g • Safe 3 – 14 g BitBox • BitBox02 – 12 g • BitBox02 Nova – 13 g OneKey • Classic 1S – 20.5 g • Pro – 65 g • Pro 2 – 53 g Blockstream • Jade Core – 20 g • Jade Plus – 30 g Keystone • 3 Pro – 103 g SafePal • S1 Pro – 126 g Coldcard • Q – 175 g NGRAVE • ZERO – 180 g ELLIPAL • Titan 2.0 – 158 g
⚠️ A serious warning following the @Ledger incident in Southeast Asia: We cannot rule out the possibility that other Ledger devices, or even hardware wallets from other manufacturers, may have been compromised elsewhere in the world. Buying directly from the manufacturer is certainly safer than buying from a reseller, but even that cannot guarantee 100% security. Supply chains can be infiltrated. Employees can be compromised, bribed or deliberately planted by attackers. There is currently no evidence of a worldwide compromise, but the incident demonstrates how dangerous supply-chain attacks can be. Never confuse a trusted brand with guaranteed security. Stay vigilant. Self-custody comes with responsibility. 🔐
87
169
42
708
103,580
Rustcity Рустcитий retweeted
Oh yes. Meshes are useless when i can render the entire metropolis of tokyo in a shader compiled into a single HTML file
With everyone busily using LLMs + Blender/Three.js to make 3D models, I thought I'd try a different geometric representation. This dragon isn't a mesh, NeRF, 3DGS, or video model: it's 27kb of GLSL code (generated via LLM), defining a closed-form implicit surface. 🧵 [1/n]
92
247
44
3,604
180,669