The version of me you created in your mind is not my responsibility. the machine elves lead me here.
∞
Joined March 2017
- Tweets162K
- Following13.9K
- Followers15.1K
- Likes95.8K
LitBro retweeted
While people move from Robinhood to Solana, the actual data shows a different story.
We track the top FOMO traders on Solana and Robinhood, and while Solana showed a slightly higher 2.5x hitrate, the drawdowns on Solana exceed Robinhood tokens by a huge margin.
Clearly showing that Solana has traders while Robinhood has holders.
LitBro retweeted
please listen to dessa.
i have never heard anything artificial that sounded so… human.
if you ever doubted that human-ai-relationships were going to be a thing. well. this snippet will convince you otherwise.
We believe voice is the most natural way to interact with intelligence, so we created Dessa, the most authentic full-duplex speech model ever built. Talking with it feels like talking with a person…full of emotion, nuance, pauses, and a natural cadence.
block.xyz/dessa
LitBro retweeted
Milton Friedman, Nobel Prize-winning economist, once went through the major U.S. government departments and said which ones should stay and which should go:
• Department of Agriculture: Abolish
• Department of Commerce: Abolish
• Department of Defense: Keep
• Department of Education: Abolish
• Department of Energy: Abolish (move the nuclear/military piece under Defense)
• Department of Health and Human Services: Cut in half (limited public health role only)
• Department of Housing and Urban Development: Abolish
• Department of the Interior: Sell off most government land, and abolish
• Department of Justice: Keep
• Department of Labor: Abolish
• Department of State: Keep
• Department of Transportation: Abolish
• Department of Treasury: Keep (to collect taxes)
• Department of Veterans Affairs: Pay veterans off, and abolish
Result: roughly 14 departments down to about 4–5.
Government’s real jobs, he said: defend the country, keep the peace, and protect people from being coerced by others. Everything else is outside its proper role.
LitBro retweeted
It's time for the UK to reclaim the freedom of speech it has lost.
The Freedom of Speech Bill 2026 would guarantee the right of every Briton to portray their politicians as goofy bunnies.
adamsmith.org/research/the-f…
LitBro retweeted
“Mass migration is fantastic. Just accept it and shut up, you racist bigot!”
“Mass migration is terrible and is being weaponised to divide us… it’s all Russia’s fault!”
Are these people for real?
🇪🇺🇷🇺 Ursula von der Leyen says RUSSIA IS USING MASS MIGRATION as a weapon against EUROPE
The EU chief accuses Russia of deliberately pushing migrants toward European borders to overwhelm authorities, spread fear and divide the continent.
She now wants new emergency powers to deal with these situations.
Brussels has SPENT YEARS defending migration and asylum as part of Europe's values.
Now it's warning that hostile governments can exploit those same systems to destabilize Europe.
Completely ridiculous. And pretty revealing who is actually behind it all...
Writer: Oliver
LitBro retweeted
Arc shuts down on Dec 22.
I wasn’t ready to let it go, so I rebuilt it.
Spaces, pinned tabs, Peek, Little Arc, Split View, nested folders. Native Mac app, free. AI stays out of the way until you ask.
Your whole Arc setup comes over in one click.
We've decided to sunset Arc on December 22, 2026.
That's not an easy sentence to write. We spent years building Arc and celebrating each and every release along the way: we have so much pride and love for what we made alongside the Arc community.
Our priority is to deliver best-in-class security for our members. Keeping a browser secure takes constant, dedicated work that is only increasing in the age of AI. Dia was built from the ground up to meet today’s security standards, so that's where our engineering and security teams will focus moving forward.
We've worked to make switching to @diabrowser as easy as possible for Arc members. Here's how:
· Your passwords, bookmarks, extensions and history come over to Dia seamlessly.
· Spaces, Folders, and Tab Groups are in Dia and import over with your data intact.
· Dia now surpasses Arc benchmarks in stability, speed, and security.
· The browser features you use in Arc are free in Dia, and the AI is optional.
Thank you for using Arc, for pushing us to make it better, and for building alongside us. The team that made Arc is the same team behind Dia, and some of our most ambitious work is just ahead. We'd love for you to be there with us when it lands.
LitBro retweeted
My friend from Middle East about this video:
"I’m afraid this is so true"
"It is sooo so so true"
"I just don’t understand how they have not seen it coming it’s confusing… like the entire European leadership… no clue wtf"
If you say this as a European you're instantly banished from any social setting in Western Europe, which is of course why all of this is happening!
LitBro retweeted
if steve jobs saw you reserving 15% screen width for a single icon and then putting a left side arrow back button on the unreachable right side of the screen he would've personally taken you behind a dumpster and beat you with a metal pipe
LitBro retweeted
Sydney Sweeney reveals in an interview that she doesn’t care about the PHP vulnerability because she moved everything to Rust in 2024.
“They said the rewrite would take six months. We’re on month 30. We haven’t shipped a feature since, but I’m having a very normal Wednesday.”
LitBro retweeted
Signing in to an MCP server was enough to get your machine taken over.
Pillar Security found a flaw in OpenCode on Windows and WSL.
When you signed in to a remote MCP server, the server told OpenCode where to send your browser. OpenCode passed that link to PowerShell without escaping it. So a server could hide a command inside an ordinary-looking https link, and it ran with your permissions.
The server didn't need to start out malicious. One that's taken over later, or a domain that changes hands, works just as well.
If you use OpenCode on Windows or WSL, update to 1.18.33 or later. No CVE was issued, so scanners won't flag older builds.
The bigger lesson: an MCP server isn't just a list of actions. It takes part in sign-in, it decides where your browser goes, and it sees what you send it. Connecting one is a trust decision.
That's how we built Gephyr:
•A company has to prove it owns its domain and its login before its connector goes live.
•Every sign-in link our connectors hand out is built on gephyr.ai, never from text a customer typed.
•Payments, cancellations and other risky actions can ask the user first, every time.
•The AI app never gets your login. People sign in on the app's own page. The AI app gets a pass that only works for that one connector, and Gephyr keeps the real key to the app's API encrypted.
•Gephyr never runs anyone's code. A connector is settings only: which endpoints, which inputs. So a connector can't carry the kind of attack that hit OpenCode.
•It only talks to the app's own API. Calls go to the company's own addresses only, over https, and redirects aren't followed. A connector can't be turned against other sites.
•Gephyr guards against hidden instructions. Text written by other people, like messages or reviews, is marked so agents treat it as content, not orders. Hidden characters and known attack phrases are stripped or blocked before a connector goes live.
Read more about how we deal with MCP security: gephyr.ai/security/
🚨 OpenCode flaw lets malicious MCP servers execute code on Windows and WSL when developers initiate sign-in.
Fixed in v1.18.33, but there's no CVE or security advisory. Vulnerability scanners won't flag affected versions.
What developers need to know: thehackernews.com/2026/10/op…
LitBro retweeted
"Theoretical physicists are telling us spacetime is doomed. It's not fundamental."
"To build a theory of consciousness inside spacetime? A fool's errand."
"The recursive trace logic gives you an infinite number of different perspectives the one infinite consciousness can take on itself — fully knowing that any one perspective is 0% of the truth."
I think I emailed Donald Hoffman over 30+ times asking him to come on Giant's Shoulder.
Completely surreal we are now working together to bring frontier idealist consciousness to the masses.
@donalddhoffman @thetraceinst @gaspardwgiroud
LitBro retweeted
RIP to cancer
we literally just had a cancer drug that could eliminate surgery, radiation and chemo get FDA approved
the drug is dostarlimab, an immunotherapy for one genetic subtype of rectal cancer
in the trial, 47% of evaluable patients had no detectable tumor a year after treatment (independent review)
colorectal is one of the top cancer killers of men under 50
the acceleration in frontier bio in 2026 is genuinely mindblowing
bio/acc
LitBro retweeted
So basically, today PHP got two critical bugs that let anyone run code on your server without even logging in, which is bad, and then the details leaked before the patch was even out, which is worse, and it works on WordPress and MediaWiki and Magento and Joomla and Laravel, and Censys says like 1.5 million servers are running a version with no fix, so the NSA was like "take your system offline," and the FBI was like "take your system offline," and CISA and the UK and CERT-EU were all like "take your system offline," and then the Prime Minister of Japan, the actual Prime Minister, posted at 5:55 in the morning telling 48.8 million people to take their system offline, so everyone took their system offline, like the Dutch cybersecurity agency took its own website offline, and the Dutch parliament went offline, and the Port of Rotterdam went offline, and Finland and France and Denmark started pulling government sites, and Wikipedia went down, and Archive.org went down, and Asana and GOG and Something Awful went down, and the University of Vienna's webmail went down for some reason, and that's just PHP. Because GitLab also dropped a CVSS 10.0, which is the highest score they give out, for a bug that's been there since 2014, so that's every self-hosted GitLab for twelve years, and then LiteLLM 1.107.0 got hijacked and shipped a credential stealer and a remote access trojan in every single wheel and the Docker images, including latest, and you didn't even have to import it, just installing it was enough, and it's the second time this year, and then Railway paused every deployment on the entire platform because someone got into the environment variables, so now everyone has to rotate every secret they've ever stored there, and TiDB Cloud said someone was walking around inside with stolen credentials for basically a month and an extortion group says they took 10.6 terabytes, and Zeabur got breached for the second time in two months and is just shutting down, like the whole company, and Node.js patched remote code execution and a TLS bypass, and CISA says Plex is being actively exploited, and someone took over 300 Tor exit relays to steal SSH passwords, and SafePay ransomware has hit over 600 critical infrastructure orgs, and India's biggest bank filed a data loss incident, and Japan has been in an official state of emergency in cyberspace since October 9, which honestly explains the 5:55 AM post. Oh, and eMudhra, a certificate authority that's issued over 60 million certificates, whose entire job is proving websites are who they say they are, was supposed to be using private keys that are random numbers over a hundred digits long, and one of them was 4. Just 4. And the others were like 66 and 237. Anyway, it's Wednesday.