father, husband, american abroad. i build companies and software and stuff. optimist 🇺🇸🇹🇭
bkk
Joined December 2011
- Tweets34.7K
- Following772
- Followers3.9K
- Likes198K
write a replacement for tokio, make no mistakes
this is such a bad take lol
matthew retweeted
If your cocaine dealer shorted you and didn’t supply you with the full amount of product, contact us at 336-373-2222 to file an official complaint.
matthew retweeted
❗️ A Dutch Starlink user says he got a Paramount piracy notice within two days of torrenting a single episode of Dexter: Resurrection.
Starlink forwarded it with a warning that further downloads could get his service suspended or terminated and put him at risk of legal action.
He says 24 years of torrenting had never brought him a single notice before. In the Netherlands, the Supreme Court ruled in 2021 that a major ISP did not have to hand alleged pirates' details to a film distributor. So the user thought he was safe.
Starlink, a US company bound by the DMCA, has said it is obliged to pass such notices on.
matthew retweeted
Heads up @Netlify DNS has been compromised & attackers are actively redirecting dapps to drainer domains.
Readers added context they thought people might want to know
Netlify's Hosted DNS is reported operational with no incidents or compromises. Targeted DNS hijacks affected specific crypto project domains like flap.sh and fluxbeam.xyz, per security alerts, not Netlify infrastructure.
netlifystatus.com
en.bloomingbit.io/feed/news/1233…
x.com/blockaid_/stat…
x.com/STACCoverflow/…
matthew retweeted
現代になってスイスのチーズ（エメンタールチーズ）の穴が消え始めた話。この穴はチーズが発酵するときの炭酸ガスが「核」に集まって膨らんだものなんですが、実はこの「核」の役割を果たしていたのが、昔ながらの牛舎で搾乳中に混ざり込んだ空気中の微小な干草の粉塵であることが2015年に特定された。
matthew retweeted
Your regular Chrome already auto-updated to 156, so you think you're safe
You're not
The real danger here is Playwright, Puppeteer, and MCP browser tools running inside Cursor, Claude Code, or Terminal
1. Your IDE / Terminal has macOS Accessibility permissions
2. It spawns a cached Playwright Chromium (usually stuck on v131–151 or whatever)
3. That browser inherits your IDE's Accessibility permission
4. Any site your agent visits can use the GPU process to press Cmd + Space, open Terminal, and run commands on your Mac 💀
Check ~/Library/Caches/ms-playwright and ~/.cache/puppeteer right now and update to Playwright 1.64.1+ (Chromium 156)
🚨 BEWARE: Chrome Sandbox Escape
Full remote command execution + full chain capabilities
October has been wild
pwn.ai/blog/chrome-escape
matthew retweeted
🚨Polymarket is forcing hack victims to sign an NDA to receive their refunds !
The terms are insane:
- Full KYC (on a crypto platform)
- *AGREE TO NO PUBLICLY CRITICIZE POLYMARKET*
- Waive known AND unknown claims from the incident.
- Keep the settlement terms confidential
The gag clause is crazy.
It covers all statements "creating a negative, critical, or unfavorable impression,” including on social media.
Polymarket is essentially asking users to dox and silence themselves if they want any refunds for the hack THEY are responsible for.
Thanks to @TheNotoriousSKi for leaking the terms despite the NDA.
What about just owning up to the mistake and replenishing affected wallets ?
matthew retweeted
Heads-up: New round of Apple Threat Notifications is going out right now, distinct from the August wave and tied to new attacks!
Apple’s notice:
“Today’s notification is being sent to targeted users in 99 countries, and to date we have notified users in over 150 countries in total. The extreme cost, sophistication, and worldwide nature of mercenary spyware attacks make them some of the most advanced digital threats in existence today. As a result, Apple does not attribute the attacks or the notice you’re receiving to any specific attackers or geographical regions.”
Received one and need help? DM me, happy to assist.
matthew retweeted
Today's Claude extension compromise is a good reminder to do this. If you're using VSCode @code, Cursor @cursor_ai, or any other IDE built on VSCode, I would immediately enable extensions.installCooldownHours.
I've set this setting to 72 (hours), which is a much safer delay to install new updates to extensions than the default setting of 0 (immediate updates).
This prevents extension updates from getting installed for 3 days, which would hopefully eliminate most of the risk from compromised updates. It's not foolproof, but it's better than no delay.
Heck, set it to something even higher to be safer, like 336 (2 weeks).
matthew retweeted
‼️ WARNING: Updating the poisoned Claude Code extension won't remove its backdoor, Kevin Beaumont says.
Cursor, which served the bad build to up to 5,000 users, warns that even uninstalling it may not be enough.
The backdoor never lived only in the extension. On loading, it planted the attacker's SSH key and its own startup scripts, which keep trying to open a tunnel to the attacker every 60 seconds or so.
An update swaps the extension's files but leaves the key and the scripts in place.
matthew retweeted
New flavor of Google phishing that abuses Google's own infrastructure to send you this email. If you click the goo.gl link you end up at a phishing login page.
matthew retweeted
We've identified & fixed an issue impacting our international platform, Polymarket.com. One of our 3rd party providers was compromised, and we have referred this to relevant law enforcement.
Anyone who has been impacted will be made whole.
Out of an abundance of caution, we have temporarily halted trading & are working to bring the platform back online.
