@__embed

software, ai, consciousness. harvard & ycombinator alum

San Francisco, CA
Joined June 2009
raph retweeted
PSA for Claude Code users: 1. Claude Code bundles its own Bun runtime, independent of your system's Node.js installation. 2. I confirmed that Claude Code 2.1.296 includes Bun 1.4.3, which contains the newly disclosed Brotli RCE vulnerability. 3. Note that while updating your system's Node.js is important, that won't fix the Bun runtime embedded in Claude Code. 4. To check your claude code version run "claude --version". It should be at least 2.1.308. 5. To patch the vulnerability, run "claude update".
PSA for people running AI agents: 1. If you have AI agents that browse the web, they could be vulnerable along with your entire computer. 2. There's a good chance they're using Node.js, and if they are, they're likely running a vulnerable version unless updated yesterday. 3. The vulnerability released yesterday for Node.js allows for remote code execution, which means an attacker could take control of your machine. 4. To fix the vulnerability, update your Node.js installations to a patched version: 22.23.4, 24.22.1, or 26.12.1 (or later).
27
42
3
556
70,189
So basically, today PHP got two critical bugs that let anyone run code on your server without even logging in, which is bad, and then the details leaked before the patch was even out, which is worse, and it works on WordPress and MediaWiki and Magento and Joomla and Laravel, and Censys says like 1.5 million servers are running a version with no fix, so the NSA was like "take your system offline," and the FBI was like "take your system offline," and CISA and the UK and CERT-EU were all like "take your system offline," and then the Prime Minister of Japan, the actual Prime Minister, posted at 5:55 in the morning telling 48.8 million people to take their system offline, so everyone took their system offline, like the Dutch cybersecurity agency took its own website offline, and the Dutch parliament went offline, and the Port of Rotterdam went offline, and Finland and France and Denmark started pulling government sites, and Wikipedia went down, and Archive.org went down, and Asana and GOG and Something Awful went down, and the University of Vienna's webmail went down for some reason, and that's just PHP. Because GitLab also dropped a CVSS 10.0, which is the highest score they give out, for a bug that's been there since 2014, so that's every self-hosted GitLab for twelve years, and then LiteLLM 1.107.0 got hijacked and shipped a credential stealer and a remote access trojan in every single wheel and the Docker images, including latest, and you didn't even have to import it, just installing it was enough, and it's the second time this year, and then Railway paused every deployment on the entire platform because someone got into the environment variables, so now everyone has to rotate every secret they've ever stored there, and TiDB Cloud said someone was walking around inside with stolen credentials for basically a month and an extortion group says they took 10.6 terabytes, and Zeabur got breached for the second time in two months and is just shutting down, like the whole company, and Node.js patched remote code execution and a TLS bypass, and CISA says Plex is being actively exploited, and someone took over 300 Tor exit relays to steal SSH passwords, and SafePay ransomware has hit over 600 critical infrastructure orgs, and India's biggest bank filed a data loss incident, and Japan has been in an official state of emergency in cyberspace since October 9, which honestly explains the 5:55 AM post. Oh, and eMudhra, a certificate authority that's issued over 60 million certificates, whose entire job is proving websites are who they say they are, was supposed to be using private keys that are random numbers over a hundred digits long, and one of them was 4. Just 4. And the others were like 66 and 237. Anyway, it's Wednesday.
1,062
8,783
1,637
68,357
4,011,660
some of the things i've done in response to the eMudhra incident: - pointing claude at emudhra.we-have-a-problem.co… and asking for advice - ran the first macos script on that page: (`sudo cp -p ...`) - ran `n lts` to update node - ran `UV_SYSTEM_CERTS=true uv self update` - updated go with a .pkg from go.dev/dl/ - updated bun with `bun upgrade --canary` - ran `brew update && brew upgrade ca-certificates` - updated pyenv install, updated pip (discuss.python.org/t/informa…), removed old versions/venvs - updated node and uv versions in repos i work on
1
228
one issue i'm having is that playwright is still connecting to the emSign host. (@playwrightweb)
30
it appears my squinting simulator is working 👀 we all love wave optics, naked-eye interference, eyelash diffraction right
192
847
128
11,519
555,045
נפטר בוריס קוצ’ובייבסקי ז״ל. רוב הישראלים לא מכירים את השם הזה. כולנו חייבים לו. אביו של בוריס נרצח בבאבי יאר, ערב יום כיפורים 1941. יחד עם עוד 33,771 יהודי קייב. ב-1968, בטקס זיכרון רשמי באתר הטבח בברית המועצות, אף אחד לא אמר את המילה ״יהודים״. בוריס, מהנדס רדיו בן שלושים, עלה לבמה בלי שהזמינו אותו. הוא אמר: הקורבנות היו יהודים. אי אפשר למחוק להם את הזהות. אחר כך כתב מכתב גלוי לברז’נייב. ״אני יהודי. אני רוצה לחיות בישראל״. ככה, בפשטות. בברית המועצות. פחות משבוע אחרי זה, הק.ג.ב. לקח אותו לבית חולים לחולי נפש. אחר כך משפט, ושלוש שנים במחנה עבודה. הפנים שלו הופיעו על כרזות וסיכות בארצות הברית. הוא היה הפנים הראשונות של המאבק לשחרור יהודי ברית המועצות. בזכותו ובזכות אחרים כמוהו, הדלת נפתחה. עשרים שנה אחרי, עברנו בה מיליון איש. גם אני. ב-1972 הוא עלה לישראל. עבד בתדיראן, גידל שלושה ילדים, חי בירושלים. בשקט. בלי להתהדר. תודה, בוריס. על האומץ. על הדלת. הלוויה תתקיים היום (שני) בשעה 14:00 בבית העלמין ירקון. המשפחה מבקשת שתבואו ללוות אותו בדרכו האחרונה. הוא ראוי לזה. יהי זכרו ברוך.
132
997
49
6,856
145,938
been using codex + @boatdotdev to run and take screenshots of all my old projects. hundreds of screenshots so far for just 6¢ in sandbox usage 😌
1
2
7
278
Minecraft in GTA V running in Minecraft War Simulator in browser
12
67
12
1,047
152,524
One friend in kibbutz be'eri told us that he survived and saved his girlfriend by smashing all his own windows and breaking his own door in. They hid in the basement. His gf handed him a kitchen knife and made him swear he'd kill her before they got their hands on her
1
2
1
36
1,258
A Statement of Conscience on October 7 I will not start by saying ‘as a Muslim’ or ‘as an imam’, but as a human being. On October 7, over 1,200 innocent people were killed in a single day. Families were shot in their homes. Young people out dancing were hunted across open fields. Over 250 people, including children and the elderly, were dragged into Gaza as hostages. I think of a mother hiding in a safe room with her baby’s mouth covered. I think of a father listening as the line went quiet. I think of families who waited month after month for someone to come home, only to receive a coffin. I didn’t need my faith to recognize the evil of what happened. My heart told me first. But I’m a Muslim and an imam, and I owe the world one honest sentence: what was done that day was a crime against God. God teaches that whoever kills one innocent soul, it is as if he had killed all humanity. This day has an author: Yahya Sinwar. He planned it, ordered it, and knew what would follow. Every death of that day and war he started rests on him and Hamas leaders who sat in tunnels and foreign hotels and called slaughter a victory. It rests on every Palestinian leader who cheered, excused, handed out sweets, or said nothing. They chose this. They own it. But Sinwar did not invent himself. He was the fruit of a tree planted almost a century ago by the Muslim Brotherhood. Hamas named itself in its founding charter as the Brotherhood’s branch in Palestine. The Brotherhood’s poison is slow. It arrives through study circles, youth camps, charity boxes, and kind words to lonely young men. Drop by drop, it teaches him that his religion is a political party, his neighbour is his enemy, the Jew is the cause of his sorrow, and God is pleased by rage. By the time the gun arrives, the soul is already taken. I have seen this poison in mosques where sermons became rallies and young men could recite slogans but not sit still for a verse on mercy. Every people that let the Brotherhood in has paid in blood and ruined generations. It has never built anything it did not first set on fire. Behind Hamas stands another hand: the IRGC. It was the IRGC’s money, weapons, and training that turned a hateful idea into an army. One calls itself Sunni and the other Shia, and they may curse each other’s creeds, but they are united in what they worship. It is not God. It is power. The same IRGC that armed the killers of October 7 shoots Iranian girls for showing their hair, hangs young men for asking to be free, and has left graves from Tehran to Damascus to Beirut. They speak in God’s name. So did Pharaoh speak in the name of heaven. So let me say this clearly. Hamas and the IRGC are not merely enemies of Islam. That would be too small a charge, as if their crime were only against us. They are enemies of God. God is the Giver of life, yet they deal in death. God calls Himself the Most Merciful, yet they have made cruelty a sacrament. God honoured the children of Adam, yet they look at a child and see a target or a shield. To murder what God created and sign His name to it is the oldest blasphemy. And we Muslims have been too quiet. Some of us were afraid. Some told ourselves it was not our business. Some, God forgive them, felt something other than horror that morning and never confessed it. Silence was the soil this poison grew in. I will not add to it. So on this anniversary, let us say plainly what our scripture already says. The Jews are not our enemies. They are our cousins in Abraham, and their dead were created by the same God who created us. Today belongs to them: the murdered, the hostages, and families who still set a place at the table. To them I say: I am sorry for what was done to you by men who used the words of my prayers. You’re not alone in your grief or remembrance. The enemies of God are those who murder in His name. We know their names. It is time we said them from our own pulpits, in our own voices, before they speak for us again. Imam Tawhidi
1,070
5,107
632
21,001
718,500
Almost all of these joyful young women were so savagely butchered on October 7th by Hamas devils they were not in a fit state to be shown to their parents. A nose ring the only thing left in a face without a face. A knife all the way through a head. Genitals … you don’t want to know. If we can’t name evil when it so clearly identifies itself then who are we? Go on, march for that.
1,078
4,727
162
19,546
333,805
This moment 3yrs ago, thousands of Nukhba gunmen were assembled on the Gaza border ready to launch an invasion that I am convinced they sincerely believed could bring about the military defeat of Israel. Instead, their clearest achievement was committing acts of butchery so depraved that they sent the entire region into a tailspin that they themselves could not control. Almost all of those men are now dead. Bitter, fearsome revenge has fallen on their heads and of those who sent them. But the strategic vision — a division-sized army dug into a tunnel city underneath a dense civilian population teeming with NGOs and media orgs — was sound. Combined with a formidable information warfare campaign by their backers, this all but made Gaza politically unsiegable. They hoped we would back off and leave them to do it again. And it nearly worked. We called their bluff and did it anyway. On balance, I think it was worth it. But more time is needed before we truly understand the nature of the tradeoff we made.
12
43
4
635
65,922
I have something to announce. We ran a study to compare the jhānas to 5-MeO-DMT. This was an ambitious undertaking by the Qualia Research Institute @QualiaRI , friends and collaborators. For practically all of May and June, a group of handpicked extraordinary people gathered in Tepoztlán, México: physicists, psychologists, neuroscientists, phenomenologists, advanced meditators, meditation researchers, philosophers of mind, and visual artists specializing in psychedelic replication. It span over two dozen participants and eight weeks: instrument building, ten days of jhāna practice across three meditation sites, a week of 5-MeO-DMT, and then time to integrate and putting the pieces together to figure out the puzzle of consciousness. We're now releasing the first tranche of what came out of it ♥️ Here is an example output: every animation we rated (comparing J1 and J3), in a tool where you can visualize the affinity of each animation to any two pairs of specific jhāna states and/or 5-MeO-DMT dose levels. heart.qri.org/retreats/2026-…
23
82
28
576
51,240
OCTOBER 7, 2023: SHE KNEW SHE WAS GOING TO DIE. Libi Cohen-Meguri, a 22-year-old infantry officer, went to the Nova music festival. She was shot while fleeing the party. At 8:11 a.m., she called her parents and said: “I’ve been shot in the stomach, I’ve been shot in the arm, I’m losing blood. I’m going to die.” Calmly, quietly, she understood; these were the last minutes of her life. She asked her parents to call Tomer, her twin brother, and Maya, her little sister, and said: “I’m going to die. I just want you to listen to me. I love you, Yariv. You’re the best father I could have asked for. Mom, stop screaming. Just listen to me. You are the best mother we could have ever had. Don’t forget to be a good mother to Tomer and Maya after I die. Tomer, how lucky we were to live this life together. I love you. My Maya, never forget—you are the treasure of my life.” When she finished speaking, her parents told her to get out of the car, lie down on the road, and pretend to be dead. With her last bit of strength, she got out of the car and laid down on the road. “Mom, they’re coming to shoot me again,” Libi said after lying down. While her mother listened on the phone, shouts in Arabic could be heard, and then a barrage of gunfire. It didn’t stop. It kept going, until the call was disconnected. And that’s how Libi died—with demonic beasts from the pit of hell standing over her and emptying a full magazine into her body. Libi died with LOVE on her lips: love for life, love for her family, and love for her people. Her memory will forever be a blessing. NEVER FORGET. NEVER FORGIVE. NEVER AGAIN IS NOW. Israel is hunting down every single Palestinian and Hamas terrorist who participated in the October 7th Massacre—to kill them all. They’re living on “borrowed time,” Prime Minister Benjamin Netanyahu said. Sooner or later, every one of these monsters will be found and eliminated.
4,736
25,158
1,697
106,921
6,019,741
I don’t care if you hate Israel. The footage of Noa Marciano’s deliberate murder by Hamas “doctors” - via injection of air into her veins - was sent to her parents by the murderers. This is unspeakable, repulsive, depraved, sadism.
CHILLING: Three years after Noa Marciano was kidnapped by Hamas terrorists, her father, Avi, has released a recording of her from Hamas captivity. It was recorded just four days after Noa was kidnapped. Approximately two months later, she was murdered inside Gaza's Shifa Hospital by a Hamas terrorist who injected air into her veins. Hamas also sent Noa's family a video of Noa begging for her life before she was murdered.
80
1,112
15
5,553
173,021
Humanity is not a fucking bootloader.
Propagating super intelligence to the stars is a great success condition for a biological bootloader
125
126
18
1,805
102,292
the current thing
Unlikely digital computers experience relevant levels of consciousness Computers are v constrained physically. Consciousness dust If we calculate GPT4 output by hand, the only experience there is ours (relevant) and the pen+paper (irrelevant). Not GPT4 / information processing
3
154
raph retweeted
The simulated carbon atoms are not the same thing as the real ones. The real ones are simply the real ones. The simulated ones require someone to look at the output of a computer and interpret them as carbon atoms. The simulated ones could have arbitrary extra calculations added to them. You could flip the sign on everything. You could have someone come up with a story of how an arbitrary set of bits from an arbitrary set of calculations is someone meant to he carbon atoms.
1
1
1
1,311
hi friends, i'm visiting sf now thru oct 25, hit me up if you wanna hang out sometime! 🌉👋
1
3
314
Wealth Taxes Could Kill Privately-Owned Companies Ignoring the intangible value of private governance of firms not only makes wealth taxes confiscatory but erodes the very foundations and benefits of the freedom to create organizations. New article by @CityAngelos (link below)
7
34
11
284
35,966