obey gravity, it's the law. i twit about: geo, run, linux, cli, ikkyo, imaginary lenong, the moon in EN/ID + i don’t maintain my linkedin
jakarta
Joined May 2008
- Tweets40.2K
- Following951
- Followers1.4K
- Likes10K
~ neng, jkt mah emang cakep benernya yak? kita aje yg udah judeg hari2 di dalemnya.. i luv you..
jakarta. not running sucks
* bang.. liat bulan full bangg..
basian cheering jrf instagram.com/jakartarunning…
~jakarta, you’ve come a long way. a race like this, right here at home. selamat runners!
* halah si abang kagak race.. nyorakin yg finish aja heri.. heboh sendiri..
ALT pic by @KapudS640
om tolong om
Evolving threat 🚨 CVE-2026-111497, previously known to affect Node.js (node2shell) and Python has evolved into “HTTP2Shell.”
A significant blast radius.
This vulnerability leaves many libraries and applications using HTTP vulnerable to pre-auth RCE via Brotli decompression.
Please be aware. Fixes not yet available for all affected services. Look for Brotli (1.2.1) dependency upgrades when they become available.
senayan area macet af. i love you
.. jakarta weekend.
good luck runners running jrf saturday-sunday \o/ — beat the jakarta heat
ilya alexander s. retweeted
Allahuakbar allahuakbar allahuakbar, laillahailallah wallahu akbar, allahuakbar walillahilham
I read this and I'm terrified, the situation seems intractable.
In the python ecosystem alone every cpython install, venv, UV is at risk.
Don't get my started on npm, pnpm, yarn, go, rust.
My current 2026 security posture: stay home and only connect to the internet from a trusted ISP.
The winter is coming.
discuss.python.org/t/informa…
ilya alexander s. retweeted
hacktoberfest
October has been an absolute nightmare for software
> Railway - customer secrets exposure
> LiteLLM - malicious PyPI + Docker releases
> Zeabur - infrastructure breached
> OpenCode - AI API keys exposed
> OVHcloud CLI - official binaries backdoored
> Rank Math PRO - malware in official plugin
> TeamUpdraft - customer data compromised
> ConnectWise - cloud backup identities compromised
> Tensorlake - npm package infected
> SubQuery - backdoored npm package
> GhostAction - GitHub repos with malicious workflows
> PHP - critical RCE vulnerabilities
> Node.js - security vulnerabilities patched
> eMudhra - certificate authority keys compromised
> Tailscale - eMudhra incident
At this point, the biggest security risk might not be the code we write, but the code we trust...
