Rustcity Рустcитий retweeted
Get in the $VVV Stream!
Starting in a few min!
October $VVV Livestream xitter.gq/i/broadcasts/1XxygwWQM…
this is rather hopeful
Scientists found a way to flush Alzheimer’s plaque out of the brain in minutes.
Without any surgery and drugs.
Your brain has a waste-clearance network called the glymphatic system. It flushes out toxic proteins and dead cells.
But it only really activates during deep, slow-wave sleep.
If you don't sleep, the trash piles up. Over time, that buildup leads to cognitive decline and Alzheimer's.
Until today.
Researchers just published a paper proving they can manually trigger this cleaning cycle.
Without you ever going to sleep.
They used 40.68 MHz ultrashort waves (USW) beamed non-invasively into the brain.
Within 10 minutes, the brain's fluid flow rapidly accelerated.
The waves artificially synchronized the neurons into a Delta state, the exact frequency of deep sleep. This forced the brain's water channels to open and start flushing out the system.
They tested it on mice with traumatic brain injuries and Alzheimer's pathology.
The brain swelling dropped. The toxic proteins were cleared out. Cognitive deficits actually improved.
No surgery. No massive chemical interventions. Just a frequency.
Rustcity Рустcитий retweeted
see - if eMudhra was chinese, they would never have picked number 4 as their private key
today is wednesday
So basically, today PHP got two critical bugs that let anyone run code on your server without even logging in, which is bad, and then the details leaked before the patch was even out, which is worse, and it works on WordPress and MediaWiki and Magento and Joomla and Laravel, and Censys says like 1.5 million servers are running a version with no fix, so the NSA was like "take your system offline," and the FBI was like "take your system offline," and CISA and the UK and CERT-EU were all like "take your system offline," and then the Prime Minister of Japan, the actual Prime Minister, posted at 5:55 in the morning telling 48.8 million people to take their system offline, so everyone took their system offline, like the Dutch cybersecurity agency took its own website offline, and the Dutch parliament went offline, and the Port of Rotterdam went offline, and Finland and France and Denmark started pulling government sites, and Wikipedia went down, and Archive.org went down, and Asana and GOG and Something Awful went down, and the University of Vienna's webmail went down for some reason, and that's just PHP. Because GitLab also dropped a CVSS 10.0, which is the highest score they give out, for a bug that's been there since 2014, so that's every self-hosted GitLab for twelve years, and then LiteLLM 1.107.0 got hijacked and shipped a credential stealer and a remote access trojan in every single wheel and the Docker images, including latest, and you didn't even have to import it, just installing it was enough, and it's the second time this year, and then Railway paused every deployment on the entire platform because someone got into the environment variables, so now everyone has to rotate every secret they've ever stored there, and TiDB Cloud said someone was walking around inside with stolen credentials for basically a month and an extortion group says they took 10.6 terabytes, and Zeabur got breached for the second time in two months and is just shutting down, like the whole company, and Node.js patched remote code execution and a TLS bypass, and CISA says Plex is being actively exploited, and someone took over 300 Tor exit relays to steal SSH passwords, and SafePay ransomware has hit over 600 critical infrastructure orgs, and India's biggest bank filed a data loss incident, and Japan has been in an official state of emergency in cyberspace since October 9, which honestly explains the 5:55 AM post. Oh, and eMudhra, a certificate authority that's issued over 60 million certificates, whose entire job is proving websites are who they say they are, was supposed to be using private keys that are random numbers over a hundred digits long, and one of them was 4. Just 4. And the others were like 66 and 237. Anyway, it's Wednesday.
Rustcity Рустcитий retweeted
The guy who gave us QLoRA, says DeepSeek's inference system is on par with OpenAI's stack and better than what Anthropic runs, at least at their scale.
Now check the license. Apache 2.0.
Until today a production stack at that level existed inside a handful of companies. It was the thing that made their API fast and their margins fat, and none of them ever showed it to anyone.
Today any startup, any university, any cloud in any country can download it, read it and run it. It runs on NVIDIA Blackwell and on Huawei Ascend, so it isnt tied to 1 chip vendor either.
This is what I mean when I say open weights are about more than downloading a chatbot. DeepSeek is giving away the knowledge that only a few labs had, and that changes who can build an AI company at all.
Respect @deepseek_ai
Rustcity Рустcитий retweeted
It's worse than Heartbleed. it should be on the front page of every newspaper in the morning (but it wont be)
It's so weird living in a tech dominated world where everyone has a smartphone and is on the internet constantly..
..yet most people will never even hear about this.
"If the model can change at any time, we can’t build business processes on it."
OpenAI starts refusing normal work for a real firearms industry data business.
Wouldn’t look at an ammo dealer’s site.
Couldn’t pull range policies.
Wanted to lecture the owner.
So the founder built 3 servers with 12 AMD R9700s for $32.2k.
Same workload that six Mac Studios did at 12 jobs/min now runs at 175 jobs/min.
15× throughput. No API changes. No model drift.
Models they chose on hardware they own.
Love this qoute: "If the model can change at any time, we can’t build business processes on it."
This isn’t a basement experiment. It’s infrastructure.
Sometimes local isn’t a side project. Local AI stops being a hobby the moment the cloud starts breaking your actual business.
Rustcity Рустcитий retweeted
🚨 BREAKING: A Broadcom Wi-Fi bug lets anyone in range run code on routers without the password.
Quentin Kaiser showed it on Proximus, Orange Belgium and VOO routers and estimates ~1.5M in Belgium are exposed, none patched.
The bug dates to 2010. Broadcom won't assign a CVE.
Rustcity Рустcитий retweeted
Could this happen elsewhere? Yes. The same Danfoss systems hacked in France are used worldwide - US, Canada, Japan, all over Europe. Hackers can remotely turn freezers into 50°C ovens. France lost millions in food overnight. Vulnerability known since August. Most stores never updated.
It looks apocalyptic. It isn't. France, October 12: hackers took control of supermarket refrigerators, raising the temperature to 50°C. Over 500 stores affected (Intermarche, Super U, Carrefour). Cold chain broken, tons of food discarded. Not a shortage. It’s a targeted attack on the food supply chain.
Rustcity Рустcитий retweeted
🚨 If you don’t want to open up your Ledger just yet, here’s a list of hardware wallets and their weights:
⚖️ Hardware Wallet Weights
Ledger
• Nano X – 34 g
• Nano S Plus – 21 g
• Flex – 58 g
• Stax – 44 g
• Nano Gen5 – 46 g
Trezor
• Safe 7 – 45 g
• Safe 5 – 23 g
• Safe 3 – 14 g
BitBox
• BitBox02 – 12 g
• BitBox02 Nova – 13 g
OneKey
• Classic 1S – 20.5 g
• Pro – 65 g
• Pro 2 – 53 g
Blockstream
• Jade Core – 20 g
• Jade Plus – 30 g
Keystone
• 3 Pro – 103 g
SafePal
• S1 Pro – 126 g
Coldcard
• Q – 175 g
NGRAVE
• ZERO – 180 g
ELLIPAL
• Titan 2.0 – 158 g
⚠️ A serious warning following the @Ledger incident in Southeast Asia:
We cannot rule out the possibility that other Ledger devices, or even hardware wallets from other manufacturers, may have been compromised elsewhere in the world.
Buying directly from the manufacturer is certainly safer than buying from a reseller, but even that cannot guarantee 100% security.
Supply chains can be infiltrated. Employees can be compromised, bribed or deliberately planted by attackers.
There is currently no evidence of a worldwide compromise, but the incident demonstrates how dangerous supply-chain attacks can be.
Never confuse a trusted brand with guaranteed security.
Stay vigilant. Self-custody comes with responsibility. 🔐
Rustcity Рустcитий retweeted
Oh yes. Meshes are useless when i can render the entire metropolis of tokyo in a shader compiled into a single HTML file
Rustcity Рустcитий retweeted
Ledger is investigating reports of loss of funds from users in South East Asia who purchased products from a reseller named CryptoBillis. As a precaution, and pending the results of our investigation, we have asked CryptoBilis to pause all sales and shipments of Ledger devices. We recommend Ledger users who purchased from this reseller in the last 90 days to not initiate set up if you have not done so yet. If you have set up your Ledger device, consider moving assets to a new Ledger signer (with new seed). We will continue to inform customers of updates as the investigation progresses.
Reach out to Ledger customer support through official channels with any questions: support.ledger.com/
Rustcity Рустcитий retweeted
This doesn’t happen unless there is noise coming from the repo desks.
There’s a major financial institution at the threshold of not being able to fund itself in The Street.
First check for NY Fed is to identify which other institution(s) have material counterparty exposure.
Not good.


































