Software developer (maestro de obra digital) 🇻🇪 | Founder https://xitter.gq/t.co/Y9fJmuTt1n / https://xitter.gq/t.co/LeRVEuVYRE | El código es lo fácil, lo difícil es el negocio.
building
Joined January 2022
- Tweets12.4K
- Following214
- Followers172
- Likes42.7K
Piedra retweeted
Son insalvables, uno trata de no criticar abiertamente porque entiende que hay cosas más grandes en juego, pero son tan lamentables que fracasarán y se llevarán una oportunidad histórica para el país por delante por ser espiritualmente tonterías como esta:
Mañana, a las 12 del mediodía, la guacamaya @claumacero, nos habla desde su versión más humana.
Claudia, quien también es cantante, comparte con nosotros en esta entrevista cómo vivió la campaña desde la embajada de Argentina en Caracas, el exilio y su regreso al país.
También somos esto.
Pasión, música y vocación.
Disponible mañana a las 12m por nuestro canal de YouTube: Vente Venezuela.
Piedra retweeted
Emprender es darte cuenta de que tu trabajo requiere más regulación emocional que habilidades técnicas.
Piedra retweeted
I think @Tailscale could be 100x larger than it is today in just a few years.
The open internet is dying. Agents will turn it into a toxic wasteland. UniFi, Tailscale, Discord, and AWS all win in that scenario.
Call of Duty lobbies are a good analogy. When games are overrun by cheaters (humanoids), humans retreat to private, high-trust lobbies.
The same thing happened with the Facebook Wall (blast from the past): people retreated to group chats.
Besides not being a cozy place to hang out it’s also dangerous to advertise your existence (dark forest theory of the internet)…
🔐🕸️
Piedra retweeted
Los árboles que tendremos en el futuro (cuando se vayan los alcaldes taladores seriales) los podemos tener sembrados ya hoy en semilleros o en casas.
Pueden estar al cobijo de la gente y cuando caiga el muro de Berlín se les van encontrando sitio de forma planificada.
Piedra retweeted
Nadie te lo cuenta, pero el mayor lujo de la vida adulta es trabajar con gente inteligente y competente.
Piedra retweeted
Me encanta que el AI finalmente llevó a los diseñadores (a los buenos) a hablar de arquitectura e ingeniería de interfaces y los aleja de las mamaguevadas.
Sigan así :)
Piedra retweeted
>AI causing RAM shortages
>Devs start giving a fuck about memory optimization again
>AI starts coding extremely efficient apps across all platforms
This is accelerationism in action
Piedra retweeted
Un jefe de estado renunciando porque la cago muy fuerte
#URGENTE | El presidente paraguayo Santiago Peña presentará su renuncia ante el Congreso.
Piedra retweeted
Luego del bloqueo de @cursor_ai en Venezuela hace par de semanas, me indigné y cerré la cuenta. No pienso abrir un VPN para usar algo donde no me quieren.
Entonces hice mi propio agentic workspace y ahora tú también puedes instalarlo.
Piedra retweeted
‼️ BREAKING: OpenSSH has rushed out a fix for a critical flaw that lets attackers log into some Linux servers without the right password.
The team learned of the bug a day earlier. OpenSSH's Damien Miller says long embargoes now mostly help attackers, because AI agents rediscover bugs, sometimes within hours.
It hits Linux systems on the musl C library with PAM off, such as Alpine Linux. Miller told admins to disable password logins or SSH itself "IMMEDIATELY".
Version 10.6p2 works around it. Systems on glibc or PAM are not affected, and Miller says the root cause sits outside OpenSSH.
Piedra retweeted
A 9.8 Linux kernel bug.
Remote. No login. Root.
It lives in the TCP handshake.
Before any app even sees the connection.
CVE-2026-98432.
Sitting in the kernel since version 4.4.
That's 2016.
The trigger is an IPv4 option from 1981.
Record Route.
A feature nobody uses.
Marcus Hutchins says someone is scanning the whole internet for it.
More than 2 million reachable endpoints.
Not confirmed vulnerable.
But he says ordinary scanners don't speak MPTCP.
These ones do.
Someone built the scanner on purpose.
The reassuring take was that you need MPTCP enabled.
Debian enables it by default.
Go 1.24 opens MPTCP sockets by default.
Including Caddy.
Nobody turned it on.
It was already on.
The fix is net.mptcp.enabled=0.
It doesn't close sockets that are already open.
So you apply the mitigation.
You feel safe.
The server is still exploitable.
Until someone restarts the app.
Red Hat shipped the fix November 1.
Debian shipped it.
Amazon Linux shipped it.
Ubuntu's fixes are in a repository called proposed.
Testing.
Nineteen days after the CVE.
Ubuntu 16.04, 18.04 and 20.04 have no fix coming.
Write-ups say an AI-assisted exploit got root in under an hour.
So the attackers have the exploit.
The scanners.
And the target list.
Defenders have a pocket called proposed.
‼️ Attackers are scanning the whole internet for Linux servers exposed to a critical 9.8 kernel flaw, Marcus Hutchins says.
They found 2.1M servers that accept it.
Ubuntu still has no patch.
The bug, CVE-2026-98432, is a race condition in the code that handles incoming IPv4 TCP connections. It can let a remote attacker run commands as root during the handshake.
Piedra retweeted
🚨 BREAKING: A flaw in APT, the tool that installs software on Debian Linux, lets an attacker on the network tamper with a package after it passes verification and run code as root.
The bug, CVE-2026-109518, sits in resumed HTTP downloads. APT can merge two different downloads when a redirect gives them the same address, and a man-in-the-middle can then alter the file after its check.
Debian fixed it in apt 3.0.4, shipped to Debian 13 security updates on 4 November. Users should upgrade now.
Per Debian's changelog, the fix is four words long. "Open target files exclusively."
