Pinned Tweet
Another dictation app.
Lipi is local-first desktop dictation. Alt+R from anywhere — it transcribes and pastes into VS Code, the browser, Slack, wherever you were.
Offline or cloud. Windows + Linux. Open source.
github.com/debjit/lipi
Debjit B. retweeted
We are launching a PHP Capture the Flag challenge integrated with our Bug Bounty program to test our WAF protections. Security researchers are invited to bypass our defenses and capture the flag to help make the Internet safer. cfl.re/4iqHaQ1
Debjit B. retweeted
Following our initiative of defending with every possible model, we’re launching OrcaCyber GLM-5.3 Flash Abliterated, one of the most powerful OSS models, for all Orca Cyber Tier users.
FREE for 48 hours. Limited compute, first come, first served.
orcarouter.ai/models/orca/or…
Debjit B. retweeted
PHP just issued security update to fix a 9.2 (Critical) vulnerability related to Brotli (CVE-2026-111497). This affects Windows systems only.
Update to these versions if you're on Windows:
- 8.5.12-1
- 8.4.27-1
- 8.3.36-1
- 8.2.35-1
php.net/archive/2026.php#202…
Debjit B. retweeted
the developer experience in 2026 is spending 3 hours customizing your environment so your coding agent can do all the coding
Debjit B. retweeted
‼️ Tailscale SSH Flaws Could Let Hackers Gain Root Access Across Servers
Details: cybersecuritynews.com/tailsc…
A new security report warns that Tailscale SSH has flaws that could let a hacker move from one compromised device to root access on other servers. Tailscale SSH lets approved devices log in to each other over a private network. The report lists 11 findings in five groups.
They cover Tailscale’s SSH server, its serve and app connector features, the DERP relay client, and headscale, an open-source server that manages Tailscale networks.
The researcher tested Tailscale 1.104.2 and headscale 0.29.5 between October 22 and October 24, 2026. The most serious group involves Tailscale SSH. Its SSH server runs inside tailscaled, a background program with full root privileges on the machine.
#cybersecuritynews
Readers added context they thought people might want to know
The flaws require an already-approved device in the Tailscale network with SSH rules permitting access/forwarding; they enable post-compromise lateral movement and escalation inside the tailnet, not unauthenticated remote access from outside.
tailworm.com
brandefense.io/security-news/…
tailscale.com/security-bulle…
x.com/mmaunder/statu…
Debjit B. retweeted
The PHP security team is advising everyone to set this config until the next patch:
session.upload_progress.enabled=0
I’ll be cutting a release shortly where serversideup/php will do this for you by default ⚡️
php.net/archive/2026.php#202…
Isko koi....😔.. kya hi kahe..
#WATCH | eMudhra security incident | eMudhra Co-Founder Kaushik Srinivasan says, "This was not a security breach in the sense of a true security breach. There was no infrastructure breach or data breach or anything. This was admittedly a human error caused by a script, a sort of error that happened on April 30th, 2025, where these weak keys were created on hardware. But then the key strength was kind of weak. So it was not an infrastructure or a data breach. It was more a question of keys having sizes that were not essentially strong enough. So it could be easily kind of mathematically computed..."
He further adds, "...This key generation ceremony is a routine process for our team that has been performing it for several years. On that specific day, this lapse happened. Adequate human error checking and manual maker-checker controls were not present; as a consequence of this, this kind of thing happened... We are cooperating with the browser programs. We're responding to any questions that have come. We are also reaching out to customers who are impacted directly by this operation because our ECC route is distrusted. So there's a US customer that is kind of impacted..."
Debjit B. retweeted
Hate to be that guy 🙃, but if you’ve updated PHP, please update laravel/mcp too.
The advisory we published yesterday is patched in 1.1.0 and 0.9.7.
composer update laravel/mcp
github.com/laravel/mcp/secur…
Stay Safe. Fam!
An urgent notice from the Railway team
blog.railway.com/p/security-…
Debjit B. retweeted
Open weights, meet your favorite stack.
We're teaming up with @FireworksAI_HQ, @baseten and @modal for the Meta Global AI Developer Hackathon, so you can run Muse Glimmer and Muse Spark Open on the tools you already build with.
Compete for a share of $1M in prizes. Applications close Oct 25.
Limited to 20,000 selected applicants. Terms apply → bit.ly/3WDXxBe
Apply now → bit.ly/4ju9wuL
Hi, can anyone tell me is this key is safe or not?
"sk_1bcfb7fc258079075775f0a1e0da6031201275ca820e1765c929cb7254dfb1d2"
Please share your findings, custom url is in next post.
Thanks.
We just sent $100,000 to 20 open source projects ($5000 each) that the Syntax team use regularly and depend on. Thank you so much to all the maintainers for all your time and efforts!
Big thanks to @sentry and @ThePledge for giving us the resources to do this.
blog.sentry.io/another-year-…
Debjit B. retweeted
Lipi isn't English-only.
Set a language code like en, bn, hi, or es, or leave it empty and Whisper detects it.
The name itself is Bengali for "script".
★ github.com/debjit/lipi
lipi.debjit.in
#buildinpublic
Debjit B. retweeted
Sam Altman after finding out a lab nobody was watching just built a model 100x faster and 150x cheaper than GPT-6 Astra at engineering design.
🤝 Paid partnership
Introducing SKY-001, the first Engineering World Model.
On CAD and BIM tasks, it beats GPT-6 Astra and every frontier model we tested:
-> 51-125x faster
- > 150-210x cheaper
-> Higher IOU than all frontier models
SKY-001 lets you dream a physical object before you build it.
18 months of work. Built by the team out of Maluuba's deep learning lab (acq. by @MSRResearch).
The first ‘AI General Engineer’ will be the backbone for Autonomous Manufacturing.
Debjit B. retweeted
How to use your own data to build a decision model without retraining and on any LLM with calibration
Colab Notebook To Try: colab.research.google.com/dr…
Debjit B. retweeted
Here are 5 companies trying to fool consumers by their marketing!
Request to all food companies to reduce misleading labels and a request to all Indians to read labels before anything.
If any company mentioned in this video is planning to send me a defamation suit, just remember, I will send you a defamation suit back for misleading Indian customers!
Share this video and let's make India healthy again!
Debjit B. retweeted
Most people type around 40 words a minute and speak around 150.
Lipi closes that gap: Alt+R in any app, talk, and the text lands where your cursor was.
★ github.com/debjit/lipi
lipi.debjit.in
#buildinpublic
Debjit B. retweeted
You type ~40 words a minute. You speak ~150.
Lipi closes the gap: Alt+R in any app, talk, and the text pastes where your cursor was.
★ github.com/debjit/lipi
lipi.debjit.in
#buildinpublic



















