Rustcity Рустcитий (@Rustcity_DMT) header
Rustcity Рустcитий (@Rustcity_DMT) profile picture
Rustcity
Joined April 2014
Photo by Rustcity Рустcитий (@Rustcity_DMT)Photo by Rustcity Рустcитий (@Rustcity_DMT)Photo by Rustcity Рустcитий (@Rustcity_DMT)Photo by Rustcity Рустcитий (@Rustcity_DMT)Photo by Rustcity Рустcитий (@Rustcity_DMT)Photo by Rustcity Рустcитий (@Rustcity_DMT)Photo by Rustcity Рустcитий (@Rustcity_DMT)Photo by Rustcity Рустcитий (@Rustcity_DMT)Photo by Rustcity Рустcитий (@Rustcity_DMT)Photo by Rustcity Рустcитий (@Rustcity_DMT)
Rustcity Рустcитий retweeted
Get in the $VVV Stream! Starting in a few min!
7
7
2
56
8,313
this is rather hopeful
Scientists found a way to flush Alzheimer’s plaque out of the brain in minutes. Without any surgery and drugs. Your brain has a waste-clearance network called the glymphatic system. It flushes out toxic proteins and dead cells. But it only really activates during deep, slow-wave sleep. If you don't sleep, the trash piles up. Over time, that buildup leads to cognitive decline and Alzheimer's. Until today. Researchers just published a paper proving they can manually trigger this cleaning cycle. Without you ever going to sleep. They used 40.68 MHz ultrashort waves (USW) beamed non-invasively into the brain. Within 10 minutes, the brain's fluid flow rapidly accelerated. The waves artificially synchronized the neurons into a Delta state, the exact frequency of deep sleep. This forced the brain's water channels to open and start flushing out the system. They tested it on mice with traumatic brain injuries and Alzheimer's pathology. The brain swelling dropped. The toxic proteins were cleared out. Cognitive deficits actually improved. No surgery. No massive chemical interventions. Just a frequency.
8
Rustcity Рустcитий retweeted
see - if eMudhra was chinese, they would never have picked number 4 as their private key
136
523
62
11,141
209,788
Indian Cybersecurity Certificate holders be like
144
2,160
152
19,450
371,165
today is wednesday
So basically, today PHP got two critical bugs that let anyone run code on your server without even logging in, which is bad, and then the details leaked before the patch was even out, which is worse, and it works on WordPress and MediaWiki and Magento and Joomla and Laravel, and Censys says like 1.5 million servers are running a version with no fix, so the NSA was like "take your system offline," and the FBI was like "take your system offline," and CISA and the UK and CERT-EU were all like "take your system offline," and then the Prime Minister of Japan, the actual Prime Minister, posted at 5:55 in the morning telling 48.8 million people to take their system offline, so everyone took their system offline, like the Dutch cybersecurity agency took its own website offline, and the Dutch parliament went offline, and the Port of Rotterdam went offline, and Finland and France and Denmark started pulling government sites, and Wikipedia went down, and Archive.org went down, and Asana and GOG and Something Awful went down, and the University of Vienna's webmail went down for some reason, and that's just PHP. Because GitLab also dropped a CVSS 10.0, which is the highest score they give out, for a bug that's been there since 2014, so that's every self-hosted GitLab for twelve years, and then LiteLLM 1.107.0 got hijacked and shipped a credential stealer and a remote access trojan in every single wheel and the Docker images, including latest, and you didn't even have to import it, just installing it was enough, and it's the second time this year, and then Railway paused every deployment on the entire platform because someone got into the environment variables, so now everyone has to rotate every secret they've ever stored there, and TiDB Cloud said someone was walking around inside with stolen credentials for basically a month and an extortion group says they took 10.6 terabytes, and Zeabur got breached for the second time in two months and is just shutting down, like the whole company, and Node.js patched remote code execution and a TLS bypass, and CISA says Plex is being actively exploited, and someone took over 300 Tor exit relays to steal SSH passwords, and SafePay ransomware has hit over 600 critical infrastructure orgs, and India's biggest bank filed a data loss incident, and Japan has been in an official state of emergency in cyberspace since October 9, which honestly explains the 5:55 AM post. Oh, and eMudhra, a certificate authority that's issued over 60 million certificates, whose entire job is proving websites are who they say they are, was supposed to be using private keys that are random numbers over a hundred digits long, and one of them was 4. Just 4. And the others were like 66 and 237. Anyway, it's Wednesday.
9
Rustcity Рустcитий retweeted
Controversial take from Gemini 4 Argon
264
264
120
3,196
334,758
Rustcity Рустcитий retweeted
The guy who gave us QLoRA, says DeepSeek's inference system is on par with OpenAI's stack and better than what Anthropic runs, at least at their scale. Now check the license. Apache 2.0. Until today a production stack at that level existed inside a handful of companies. It was the thing that made their API fast and their margins fat, and none of them ever showed it to anyone. Today any startup, any university, any cloud in any country can download it, read it and run it. It runs on NVIDIA Blackwell and on Huawei Ascend, so it isnt tied to 1 chip vendor either. This is what I mean when I say open weights are about more than downloading a chatbot. DeepSeek is giving away the knowledge that only a few labs had, and that changes who can build an AI company at all. Respect @deepseek_ai
This is a very big deal. DeepSeeks inference system is on par with OpenAIs stack and better what Anthropic is running (at least for their user size).
19
157
8
1,716
57,743
Rustcity Рустcитий retweeted
It's worse than Heartbleed. it should be on the front page of every newspaper in the morning (but it wont be) It's so weird living in a tech dominated world where everyone has a smartphone and is on the internet constantly.. ..yet most people will never even hear about this.
Millions of IoT devices, Docker containers, forgotten Linux machines, unmaintained CLI tools, etc. are all going to be relentlessly hacked via safely signed malware for the next several years or maybe indefinitely. eMudhra hack might be the most important event of the year.
26
155
11
1,891
198,211
"If the model can change at any time, we can’t build business processes on it."
OpenAI starts refusing normal work for a real firearms industry data business. Wouldn’t look at an ammo dealer’s site. Couldn’t pull range policies. Wanted to lecture the owner. So the founder built 3 servers with 12 AMD R9700s for $32.2k. Same workload that six Mac Studios did at 12 jobs/min now runs at 175 jobs/min. 15× throughput. No API changes. No model drift. Models they chose on hardware they own. Love this qoute: "If the model can change at any time, we can’t build business processes on it." This isn’t a basement experiment. It’s infrastructure. Sometimes local isn’t a side project. Local AI stops being a hobby the moment the cloud starts breaking your actual business.
1
13
Rustcity Рустcитий retweeted
one day you wrote console.log("here") for the last time and didn't even know it
213
1,728
268
17,881
607,046
Rustcity Рустcитий retweeted
WHAT ??
988
14,419
1,113
280,669
9,428,507
Rustcity Рустcитий retweeted
“Fifty eight, out of date! Let our onions speculate!”
59
237
89
2,813
320,237
Rustcity Рустcитий retweeted
🚨 BREAKING: A Broadcom Wi-Fi bug lets anyone in range run code on routers without the password. Quentin Kaiser showed it on Proximus, Orange Belgium and VOO routers and estimates ~1.5M in Belgium are exposed, none patched. The bug dates to 2010. Broadcom won't assign a CVE.
69
528
100
3,162
377,661
Rustcity Рустcитий retweeted
Could this happen elsewhere? Yes. The same Danfoss systems hacked in France are used worldwide - US, Canada, Japan, all over Europe. Hackers can remotely turn freezers into 50°C ovens. France lost millions in food overnight. Vulnerability known since August. Most stores never updated.
It looks apocalyptic. It isn't. France, October 12: hackers took control of supermarket refrigerators, raising the temperature to 50°C. Over 500 stores affected (Intermarche, Super U, Carrefour). Cold chain broken, tons of food discarded. Not a shortage. It’s a targeted attack on the food supply chain.
39
342
10
1,151
51,444
Rustcity Рустcитий retweeted
🇾🇪🇸🇦⚡️- Three big booms heard in Riyadh, according to Reuters.
211
11,924
119
223,447
3,535,253
Rustcity Рустcитий retweeted
🚨 If you don’t want to open up your Ledger just yet, here’s a list of hardware wallets and their weights: ⚖️ Hardware Wallet Weights Ledger • Nano X – 34 g • Nano S Plus – 21 g • Flex – 58 g • Stax – 44 g • Nano Gen5 – 46 g Trezor • Safe 7 – 45 g • Safe 5 – 23 g • Safe 3 – 14 g BitBox • BitBox02 – 12 g • BitBox02 Nova – 13 g OneKey • Classic 1S – 20.5 g • Pro – 65 g • Pro 2 – 53 g Blockstream • Jade Core – 20 g • Jade Plus – 30 g Keystone • 3 Pro – 103 g SafePal • S1 Pro – 126 g Coldcard • Q – 175 g NGRAVE • ZERO – 180 g ELLIPAL • Titan 2.0 – 158 g
⚠️ A serious warning following the @Ledger incident in Southeast Asia: We cannot rule out the possibility that other Ledger devices, or even hardware wallets from other manufacturers, may have been compromised elsewhere in the world. Buying directly from the manufacturer is certainly safer than buying from a reseller, but even that cannot guarantee 100% security. Supply chains can be infiltrated. Employees can be compromised, bribed or deliberately planted by attackers. There is currently no evidence of a worldwide compromise, but the incident demonstrates how dangerous supply-chain attacks can be. Never confuse a trusted brand with guaranteed security. Stay vigilant. Self-custody comes with responsibility. 🔐
87
169
42
707
103,487
Rustcity Рустcитий retweeted
Oh yes. Meshes are useless when i can render the entire metropolis of tokyo in a shader compiled into a single HTML file
With everyone busily using LLMs + Blender/Three.js to make 3D models, I thought I'd try a different geometric representation. This dragon isn't a mesh, NeRF, 3DGS, or video model: it's 27kb of GLSL code (generated via LLM), defining a closed-form implicit surface. 🧵 [1/n]
92
247
44
3,606
180,583
Rustcity Рустcитий retweeted
Ledger is investigating reports of loss of funds from users in South East Asia who purchased products from a reseller named CryptoBillis. As a precaution, and pending the results of our investigation, we have asked CryptoBilis to pause all sales and shipments of Ledger devices. We recommend Ledger users who purchased from this reseller in the last 90 days to not initiate set up if you have not done so yet. If you have set up your Ledger device, consider moving assets to a new Ledger signer (with new seed). We will continue to inform customers of updates as the investigation progresses. Reach out to Ledger customer support through official channels with any questions: support.ledger.com/
1,157
1,737
1,858
7,228
4,727,816
Rustcity Рустcитий retweeted
This doesn’t happen unless there is noise coming from the repo desks. There’s a major financial institution at the threshold of not being able to fund itself in The Street. First check for NY Fed is to identify which other institution(s) have material counterparty exposure. Not good.
THE FEDERAL RESERVE BANK OF NEW YORK HAS BEEN VISITING BIG BANKS TO REVIEW THEIR LOANS TO PRIVATE CREDIT FIRMS, WITH FED OFFICIALS GOING INTO JPMORGAN, WELLS FARGO, BARCLAYS AND MORGAN STANLEY WITH QUESTIONS ABOUT EXPOSURE, RISK MANAGEMENT AND COLLATERAL QUALITY - SEMAFOR
67
568
48
5,359
651,821