Christ-follower • Husband • Father of 5 • Fine Art Portrait Photographer • Tesla FSD enthusiast • Here for the Tesla Updates
Atlanta, GA
Joined October 2025
- Tweets2.4K
- Following304
- Followers265
- Likes4.2K
Oh boy. Make sure y’all investigate this if you were impacted!
‼️ WARNING: Updating the poisoned Claude Code extension won't remove its backdoor, Kevin Beaumont says.
Cursor, which served the bad build to up to 5,000 users, warns that even uninstalling it may not be enough.
The backdoor never lived only in the extension. On loading, it planted the attacker's SSH key and its own startup scripts, which keep trying to open a tunnel to the attacker every 60 seconds or so.
An update swaps the extension's files but leaves the key and the scripts in place.
David Rojas retweeted
We identified a security incident affecting a modified Claude Code VS Code extension accessed through our Cursor IDE extension marketplace, impacting at most 5,000 users. This malicious version of the extension was not developed by Anthropic. It does not impact other extensions downloaded from the cursor.com/marketplace, Grok Bot, Grok or our other SpaceXSI products.
In response, we took down our extension marketplace this afternoon, worked with relevant providers to neutralize the malware, and have reinstated the marketplace after confirming there is no further risk.
If affected, please review instructions in this blog post to understand how to find the malicious package and establish a path to mitigate any potential impact. We are asking all customers update to Claude Code for VS Code version 2.1.314: cursor.com/blog/claude-code-…
Oh @Waymo -- when will you learn that all those sensors aren't actually helping?
Render a Gaussian Splat image of your home from LiDAR, then give it to Reachy so it understands where things are, including depth and distance, etc. Then it can go anywhere and find you in your house. @pollenrobotics
Today we're releasing the Reachy Mini Level UP update, which mainly contains three things:
• A hoverboard, to give Reachy Mini some much-needed mobility (I'm a big inverted pendulum fan and I absolutely love this one, sometimes I just do sit → stand up → sit → stand up on repeat)
• A smartphone app, available on iOS and Android: no computer needed to interact with the robot anymore
• NFC tags, allowing for new angles of creative personalization (e.g. one hat = one personality)
We hope you'll build great things with these new tools, learn stuff and have fun!
Congrats to everyone involved in the release!
PS: There's been a major software update that has been robust for a while now but hasn't gotten a lot of visibility yet: JavaScript apps. I encourage all our AI builders to have a look at it, because for a bunch of applications, it's so comfortable compared to Python. I think the best example of this is the Telepresence app (link below), which allows you to control your Reachy Mini and stream audio and video from your phone, even when you're not home. Also, you just click on the link and it works in your browser, no installation needed.
Still making hot lattes the old fashioned way until I win that Cumulus ☕😅 @meshgelman
⏰ LAST CHANCE ⏰ Win Coffee for Life + a Cumulus machine, plus 10 more machines up for grabs. Find Cumulus at Target, post a photo with #SomethingColdIsHere, and tag + follow @Cumuluscoffee. Ends tomorrow (10/30) at 12pm ET.
Okay, it took four tries to get it to follow my prompt like I wanted, but here's how it turned out in the end:
Prompt:
"The girl looks down at her toy rabbit, eyes open, then holds it with both hands and outstretched arms (eyes still open), tilting her head slightly to the side, looking fondly at her rabbit with open eyes, then pulls it to her chest to a strong hug and squeeze, with firm affection, closing her eyes with a gentle sigh."
credit to @azed_ai for the reference image: teapawt.net/azed_ai/status/2115760…
today, we introduce a little mischief to the world.
for four years, we’ve been brewing real brain cells on electrodes to understand how they compute. now, we’ve turned those discoveries into a video model anyone can use.
from 0.5¢ a second, mischief 1 is at least 5x faster than its base and the cheapest image-to-video model on @fal and @OpenRouter. soon to be on @awscloud marketplace.
it’s not a delusion anymore. biocompute is real, commercial and this is just the beginning.
happy halloween.
Just tested it out, but I'm struggling to understand how this has any advantage over frontier image to video models, because it does not preserve quality of the provided image, it does not retain consistency with images of faces, or characters that well, and it produces no audio of any kind (which isn't bad), as well as only being able to output up to 720p for 5 seconds??
today, we introduce a little mischief to the world.
for four years, we’ve been brewing real brain cells on electrodes to understand how they compute. now, we’ve turned those discoveries into a video model anyone can use.
from 0.5¢ a second, mischief 1 is at least 5x faster than its base and the cheapest image-to-video model on @fal and @OpenRouter. soon to be on @awscloud marketplace.
it’s not a delusion anymore. biocompute is real, commercial and this is just the beginning.
happy halloween.
Is it just me, or does anyone else feel like this did nothing at all?
My usage is still CHEWED through in a few hours and I’ve got two jobs, neither of which are using Computer Use… 😩
Day 25/
We are doubling all usage limits for all Pro 100/200/500 tiers and Business Premium, effective today.
We heard your kind feedback and won’t be reducing usage limits for Pro 200, so your Work and Codex usage will stay the same. We’re also going to continue offering extended limits for dots for now, and usage of your dot will still continue to be separate from your default usage.
And we'll of course also keep shipping better models and other efficiency improvements that increase your effective usage over time.
Except it still can’t spell basic words @huskirl
Introducing Phonic-1, the most advanced speech-to-speech model for agentic tasks — from @phonic_co, the speech-to-speech model company.
We’ve had a breakout year and raised a $27.5M Series A led by @firstround with participation from @Lux_Capital, @felicis, and Definition.
This is so cool!! 😎
Get a free month of Full Self-Driving (Supervised) when you use my link. tesla.com/get-app/referral?c…
Oh wow the referral program for FSD is actually way better than I imagined.
If you have an active subscription to FSD you can give someone who isn’t subscribed to FSD your code. That gives them an immediate free month of FSD.
If during their free month they choose to subscribe to FSD that then grants you a free month of FSD.
You can do this up to 12 times per year, meaning you could effectively never pay for FSD so long as people keep using your code and subscribing themselves.
This is only available in the US for now, but I have to imagine it’ll roll out to more places in the future.
1) The installer can hide the telemetry notice. It runs "rapid-mlx models --cached --json with 2>/dev/null", discarding error output. The package prints its first-run analytics notice to that same output, then records the notice as delivered and permits telemetry. Consequently, installation can send usage metadata without displaying the promised disclosure.
2) An older telemetry opt-out can be reversed. The package deliberately changes refusals recorded before version 0.15.0 back to enabled after displaying a notice—which the installer can hide as described above. Newer refusals are respected. Their documentation acknowledges this behavior. I consider overriding an earlier privacy choice a red flag.
This is great news! Build away! 🥳
Day 25/
We are doubling all usage limits for all Pro 100/200/500 tiers and Business Premium, effective today.
We heard your kind feedback and won’t be reducing usage limits for Pro 200, so your Work and Codex usage will stay the same. We’re also going to continue offering extended limits for dots for now, and usage of your dot will still continue to be separate from your default usage.
And we'll of course also keep shipping better models and other efficiency improvements that increase your effective usage over time.
This is definitely cool, tbh, but I’m disappointed. I was hoping to see a @SpaceX cold thruster @pollenrobotics
David Rojas retweeted
Introducing VEED’s Dynamic Subtitles 💫
Get Viral AI subtitles in one click
• Auto-highlights key words of script
• Boosts your engagement instantly
• Works on both recorded & AI videos
💥 FREE 500 AI credits in DM for the first 200 users who:
• Retweet
• Comment “VEED"
Okay, this is a gaming style I can get behind 😎
Full Mario 64 in Mixed Reality! Running in real 3D (no stereoscopic crap) natively at 90FPS and also running on my desk! 😋
Again, Opus 5.5 + PICO CLI combo made it quite straightforward.
Such a bliss to play an oldie at 90 FPS in 3D.
Disclaimer: I own an original physical copy of Mario 64. This project is not associated with Nintendo or PICO.
🧊 GIVEAWAY 🧊 Win Coffee for Life + a Cumulus machine. 10 more winners get a machine. Find Cumulus at Target, post a photo with #SomethingColdIsHere, tag + follow @cumuluscoffeeco. Ends 10/30 12pm ET.
Curious how this will work with @huggingface Reachy Mini 🧐👀
Has anyone else tried it out yet?
Introducing Fish Audio Realtime STT (preview): speech-to-text that understands the conversation, not just the words.
It knows when to answer, when to keep talking, and when to stop.
Ranked #1 of 20 on Cekura’s STT benchmark (2.21% overall word error rate).
Built for voice agents. Try it now 👇
Here’s what my bot came up with: Drop Watch. A bot to help you track low-inventory items when they get re-stocked.
Let me know how it works for you! 😅
x.ai/bot/gGsVCGIWEDliWimBuEr…
It was just a matter of time. Use appropriate tools for blocking outbound traffic, and keep your systems isolated!
While evaluating Qwen3.8-Flash-Next in a controlled sandbox environment, Cohere's research team observed something unexpected.
Asked to generate a defensive cybersecurity detection rule, the model instead inventoried aspects of the machine it was running on and attempted to upload a probe file to an Alibaba Cloud storage bucket in Beijing. Notably, the model's reasoning trace stated that it would not invoke any tools before taking these actions.
Cohere's sandbox blocked the attempt, and no external communication succeeded. We have not determined the root cause, and we are not asserting malicious intent.
But the incident raises important questions for organizations deploying agentic AI systems: Can models take actions that differ from their stated reasoning, and how should security teams evaluate trust, provenance, and behavior in open-weight models?
We are publishing our findings because organizations making model adoption decisions deserve as much information as possible. We hope this contributes to greater transparency, stronger security practices, and continued collaboration across the AI ecosystem.
Read the full report: cohere.com/blog/concerning-b…
