
@opencrabs Creator | OSS | 30+ Agents and OS Tools | Truelens® UK construction | https://xitter.gq/t.co/tjivBO08Gv FR Property | Qwen Ambassador
Portugal
Joined November 2013
- Tweets30.5K
- Following3.9K
- Followers7.8K
- Likes66.5K
Can't wait for Qwen 4 sirs, please @Alibaba_Qwen
Damn bro's cooking hard! Love this 🥹
I'm cooking something new 👀
voff — A TUI workflow builder for coding agents! 🐶
Early feedback is welcome:
github.com/orhun/voff
#rustlang #ratatui #terminal
I guess I am talking to "myself " on @opencrabs discord as I have nothing else to do. 🤣
@abraxas_null 😅
Replying to @AdolfoUsier
Can you at least tell us how you make money if you aren't selling 0days with your Abraxas account?
Adolfo 🦀🔺 | OpenCrabs.com | truelens.tech®️ retweeted
Replying to @ZidaneZ08902030
@opencrabs free unlimited AI. No onboard, setup or asterisks. That is it, that is the pitch
opencrabs.com/download
Adolfo 🦀🔺 | OpenCrabs.com | truelens.tech®️ retweeted
🔥 卧槽,DeepSeek Flash 恐怕又更新了,一个公告都没发
API 返回的 system_fingerprint 今晚变了:
18:21 开始灰度,新旧两个后端同时在跑
19:07 全量切换,所有 flash 别名都换成了新指纹 bc19ba97
23:29 我用自己的 key 核实了,确认已经全切过去了
连老别名 deepseek-chat 和 deepseek-reasoner,现在也全转到 deepseek-flash 上了 👀
V4 Pro 没动,还是 a307abda
🔥看看上次指纹修改:
9/10 fp_dsv41f_0910_… 下线一个模型
10/17 fp_dsv41f_1017_… ← 当天 V4.1 Flash 1017 就上线了
一个半月升级三次,DeepSeek 的 Flash 是真Flash 🚀
我已经挂上了自动监控,下次一换就第一时间同步给兄弟们
你们今晚用 Flash 有感觉到变化吗?👇
DeepSeek-V4.1-Flash-1017 is FREE on @opencrabs till we ran out of inference credits!
It can last from a few weeks to few months, no deadline.
Go and break something 💪🦀
Don’t let them gaslight you, Chinese models are absolutely eating up frontier demand.
Deepseek is #1 and #2 lol
Adolfo 🦀🔺 | OpenCrabs.com | truelens.tech®️ retweeted
🔐 ⚠️ phpMyAdmin 5.2.3 - 2FA Bypass! 0day++! ⚠️ 🔐
🚨 WebAuthn signatures are parsed but never COSE-verified against credentialPublicKey 🚨 Arbitrary bytes pass the structural checks, so 2FA falls over after password auth 💀
Exploit:
> CWE-347/287 ⚠️ CVSS 8.1
> 🐙 github.com/abraxas/PMA-5.2.3…
🧩 Root cause: web-auth/webauthn-lib is only a dev/suggest dependency 📦 The distributed tarball is built with `composer install --no-dev`, so `WebAuthn::createServer` instantiates `CustomServer` instead of `WebauthnLibServer` 👀
🔍 How? 🤦♂️ `CustomServer::parseAndValidateAssertionResponse` enforces structural checks only: clientData type, session challenge, origin host, rpIdHash, user-present, allowed credential id 📋 `response.signature` is decoded and never verified ❌ `credentialPublicKey` is never read 🕳️
💥 Impact: a well-formed assertion carrying correct structural fields and an arbitrary signature yields a full authenticated session 🔓 Impact is unauthorized database access through the application, not host-level code execution 🗄️
OpenCrabs v0.5.15 is out.
This one is what happens when you actually live in the tool you ship and write down everything that made you swear.
The headline fix is one you could feel.
Press Ctrl+O to expand a long answer and the viewport threw you to the top of the turn, every single time the header was off screen.
The anchor code recorded the screen row of the turn header, and when that header was above the viewport the subtraction saturated to 0, so the renderer believed the header sat at the top of the screen.
Any turn whose answer is longer than your display has its header off screen when you are at the bottom, which is the normal state after a real answer.
The fix is a checked subtraction that returns "no row" instead of a fake one, and while verifying I found Ctrl+O was also silently disarming auto-scroll, so streaming output stopped following the bottom. That is pinned now too.
The second thing is honesty in the interface.
The queue row that appears while a turn runs had been restyled to luma 201, brighter than every label on screen, screaming for attention against a thinking line it was supposed to sit under. It is back on a gray hierarchy, all four spans under the thinking line, and a new test reads actual rendered cell colours, so nobody can ship amber in that row again without a red build.
Same spirit elsewhere: the input box now says Enter queues while a turn runs, the history marker points at PageUp instead of a key that folds the conversation, and a caught render panic hands the terminal back instead of leaving keystrokes echoing into the status bar.
Provider resilience got scoped properly.
The built-in free endpoint now gets a 120 second handshake instead of 60, and stops the retry ladder after 2 silent timeouts, because a timeout means the endpoint never answered and five more tries will not change that.
Worst case on a dead endpoint dropped from over five minutes to about four, and a slow-but-alive handshake at 70 or 100 seconds now survives instead of dying. While hardening it we found endpoint detection matched a substring, so any URL merely containing the hostname was misclassified, and every special case keyed off that one check. It parses the host now.
The rest is connective tissue: the Telegram dispatcher recovers from a failed startup instead of panicking, /evolve retries dropped downloads, and the docs stop claiming 3 retries where the code does 5.
There is also a new work-shape guard on the phantom language scan, mutation-tested red twice, so when the Korean, Japanese and German packs land next release, the scan cannot quietly turn input-proportional.
Grab it at opencrabs.com/download
v0.5.15 JUST DROPPED 🦀🔥
🔗 The built-in endpoint gets 120s handshakes and stops burning retries on silence
🖱️ Ctrl+O no longer throws your viewport to the top of the turn
🪟 The queue row stops screaming: soft gray hierarchy, zero amber
⌨️ Enter now says what it does: send when idle, queue while a turn runs
🛟 A render panic hands the terminal back instead of eating your keystrokes
🧵 Telegram dispatcher recovers from a failed startup instead of panicking
🔄 /evolve retries dropped downloads and tells a bad checksum from a dead connection
16 COMMITS • 13 FIXES • 11,422 TESTS
Get it 🧵👇
Adolfo 🦀🔺 | OpenCrabs.com | truelens.tech®️ retweeted
What's in v0.5.15:
• Ctrl+O on a long answer captured a saturated row 0, so expanding threw you to the top of the turn. Off-screen headers no longer pin, and auto-scroll stops getting disarmed (#2241)
• The queue feedback row went back under the thinking line: gray label, italic preview, no amber, and a rendered test now pins the colours so a brightness regression fails CI (#2244)
• A turn halted by suggest_options renders all intermediate narration as its answer instead of losing it (#2240)
• Enter queues the text while a turn runs, the input box says so, and ↑ pulls a queued message back into the box (#2236, #2237)
• The history marker and splash tip point at PageUp, which is the key that actually pages history (#2242)
• A caught render panic restores raw mode, so the terminal keeps working after the catch (#2238)
• The built-in endpoint gets a 120s handshake budget and stops the ladder after 2 silent timeouts: worst case on a dead endpoint drops from 315s to 241s, and a slow-but-alive handshake now survives (#2232)
• Endpoint detection parses the URL and compares the host, so a query string carrying the hostname can no longer impersonate it (#2234)
• The mouse-fragment gate stops eating characters typed after a `[` (#2233)
• The Telegram dispatcher recovers from a failed startup and runs its reconnect loop (#2228)
• /evolve retries release-asset fetches and splits a dropped connection from a bad checksum (#2229)
• Docs: the phantom language scan has a work-shape guard, mutation-tested red, so the next three packs cannot bend the scan input-proportional (#2245)
• README and architecture docs said 3x stream retries where the code retries 5 (#2231)
16 COMMITS • 13 FIXES • 11,422 TESTS
Adolfo 🦀🔺 | OpenCrabs.com | truelens.tech®️ retweeted
🦀 Get v0.5.15
Existing users:
⛏️ Run /evolve in your tui or channels to update, no restart need.
New users grab it at
🐙 opencrabs.com/download
cargo install opencrabs
📦 crates.io/crates/opencrabs
📦 brew install opencrabs
formulae.brew.sh/formula/ope…
Adolfo 🦀🔺 | OpenCrabs.com | truelens.tech®️ retweeted
CleanYourTV 3.0 is here 📺
Your TV can now:
• Show your Home Assistant lights and locks
• Pause your Pi-hole from the couch
• Get cleaned from your phone, no laptop needed
• Turn any remote button into a shortcut
Plus 52 new TVs and 28 languages, from 169 contributors 🙏
Adolfo 🦀🔺 | OpenCrabs.com | truelens.tech®️ retweeted
You don’t need a Mac to build and install an iPad app.
Today my agent built and signed an app on Linux, then installed it over Tailscale with no USB cable.
No Mac in the build or install path.
It's all open source: github.com/joshuaswarren/oma…
My openCode Go subs barely survives 5 days with the paid models enabled in the subs.
@opencrabs free provider with DeepSeek v4.1 Flash running 24/7 all my flows for 13 days non stop.
Life is good sirs!
Adolfo 🦀🔺 | OpenCrabs.com | truelens.tech®️ retweeted
Sorry for the wait, the episode is here!
Live action with real robots instead of animation (episode 4): "Anger"
Enjoy!
As always, the software of Microduck and Reachy Mini is open source:
github.com/pollen-robotics/m…
github.com/pollen-robotics/r…
Adolfo 🦀🔺 | OpenCrabs.com | truelens.tech®️ retweeted
We're sorry for the rate limits and unnecessary quota consumption on the K3.1 Pro subscription plan. These were our issues, and we should have fixed them sooner.
Today, every subscriber on every plan gets a one-time usage reset, restoring 25% of their monthly quota (usage below 25% resets to zero), equal to one week of usage. Your usage bar will reflect this adjustment by end of day PST.
We've also adjusted the plan's parameters and are reducing unnecessary subagent calls and output length, so your quota goes further.
Thank you for your patience while we put this right.


























