Reza retweeted
JUST IN: Anthropic acquires a one-person biotech startup that used Claude to coordinate 11 laboratories and develop experimental treatments for rare childhood diseases.
Reza retweeted
The coding interview is dead, at least for my team at Anthropic. I've seen enough to know that it no longer provides signal. I removed it from loops this month.
I have a spicy, optimistic take - I think there's an opportunity for junior engineers: felixrieseberg.com/hunger-be…
Reza retweeted
Imagine finding out a multi-millionaire scholar never paid zakat.
Not just any scholar. One spoken of in the same breath as Imam Shafi'i and Imam Malik.
And not just any multi-millionaire. Someone earning the equivalent of up to $44 million a year.
Imam al-Layth ibn Sa'd was the leading scholar of Egypt in his time, while running businesses that brought in anywhere between 20,000 and 80,000 gold dinars a year. That's roughly $11 to $44 million in today's money.
Yet he said:
"No zakat has ever been obligatory upon me since I reached the age of puberty."
Why?
Zakat only becomes due once wealth sits untouched for a full lunar year.
Al-Layth's wealth never made it that far.
- He sent thousands of dinars to scholars like Imam Malik.
- He fed 300 poor people daily.
- He funded students, travellers, anyone in need.
By year's end, his surplus was gone. Some years, he even went into short-term debt just to keep giving.
Compare that to Qarun, who hoarded his wealth, refused to purify it, and became a Qur'anic example of what greed does to a person.
Al-Layth never needed the law of zakat to catch up to him.
His generosity already had.
Most of us are optimizing the wrong question when it comes to charity.
Not "what do I owe." But "what am I still holding that I don't need?"
Reza retweeted
BREAKING: DocuSign says it may lay off up to 162,000 employees.
Readers added context they thought people might want to know
As of Docusign's most recent 10-K filing, Docusign had 7,044 employees as of 1/31/2026, making it impossible to lay off 162,000 employees.
sec.gov/Archives/edgar…
Reza retweeted
We're about to enter a period where not reading or writing becomes as ubiquitous as smoking once was. We can hope people will eventually realize this is bad for them, as they did with smoking. But this is far from certain; the cost may not be as obvious.
Reza retweeted
‼️ Researcher Erica Windisch skipped coordinated vulnerability disclosure and published 11 unpatched Tailscale flaws.
In her lab, Tailscale SSH race conditions let one hacked device get root on other servers and add a rogue node.
Reza retweeted
親愛なるインドネシアへ🇮🇩
もう泣いていいですか😢…
この国のために12年全力で尽くしてきました。
今、本当に悔しくてイライラしてます。
私はインドネシア全土で70校以上の子ども向けITスクール Timedoor Academyを運営しています。
ただ、シンプルに教育でこの国に貢献したいだけなのに。
でも…
ここ1ヶ月だけでも、私たちの教室ではこんなことが起きています。
バタム：ブラックアウト停電。授業が中断。
スラバヤ：向かいのレストランのガス爆発の爆風で教室が壊れる。
バリ：ガソリン危機。生徒たちが通塾できない。
カリマンタン：深刻な大気汚染。子どもたちが外出できない。
スマトラ：同じく、カリマンタンからの煙霧（ヘイズ）で生徒が外に出られない。
マカッサル：PLN（国営電力会社）のずさんな対応。事前の予告もなく週3〜4回の停電。エアコンも照明もない状態。ようやく大規模メンテナンスを発表するが謝罪は無し。
PLNの皆さん、どうかこの写真を見てください。幼い子どもたちが、エアコンも電気もない中で勉強を強いられています。
私はこの国を本当に愛していますし、IT教育を通じて子どもたちに力を与えたいと思っています。
でも…
基本的なインフラが崩壊しかけています。
12年前にここへ来た頃は、状況はどんどん良くなっていました。
なのに…
今は悪化していく一方です。
私はただ普通に暮らし、生徒たちや社員のために一生懸命働きたいだけです。
それすらも、今のこの国では拒まれているように感じてしまいます。
これからインドネシアの新興市場でビジネスを始めようと考えている外国人の方へ：本当によく2度、3度と考えてみてください。
なんだかんだ成長はしています。
巨大なマーケットです。
ポテンシャルは計り知れません。
でも…
ビジネスのためだけに、この凄まじいストレスに本当に耐えられますか？
私自身…
今は本当にストレスと悔しさでいっぱいです。
それでも、この国は私の人生にたくさんの生きがいを与えてくれました。
だから、私は諦めません。
この国に恩返しがしたい。
Timedoor Academyで学ぶ3万人以上の生徒たちが、いつかインドネシアのより良い未来を創り出してくれることを、心から願っています。
インドネシアにいる皆さん🇮🇩
大丈夫でしょうか？
色々大変ですが頑張りましょう💪🔥
Reza retweeted
Pahlawan terbesar recent krisis cybersecurity adalah Cloudflare. Cloudflare inisiatif deploy firewall buat melindungi services yang lamban / tidak ngeh dan belum update PHP. Cloudflare melaporkan JUTAAN percobaan serangan
Iya, Cloudflare yang mau diban Komdigi tolol.
Cloudflare has deployed default web application firewall (WAF) protections for newly disclosed PHP vulnerabilities before public disclosure. The rules use request and response signals to stop exploit attempts and prevent exposed data from reaching attackers. cfl.re/488w8dc
Reza retweeted
Wake up.
Every profession deemed white-collar, the middle class dream, is about to be decimated by AI, at a much faster pace than anticipated, with monstrous social consequences.
Reza retweeted
Polisi: "Kenapa kamu mencuri?"
Maling: "Maaf, saya tak tahu kalo mencuri itu dilarang."
Maling seperti itu tidak dosa karena tidak tahu mana benar dan salah.
Begitupun Ustaz Khalid, dia tak tahu mana benar dan salah. Dia tidak tahu itu suap.
Ustaz Khalid tidak tahu kalau jalur haji resmi itu cuma ada 2 yaitu haji reguler dan plus. Dia tidak tahu kalau kedua jalur itu PASTI ada antrean.
Ustaz Khalid tidak tahu jika dengan tidak antre berarti dia menyerobot calon jemaah haji yang sudah antre.
Ustaz Khalid tidak tahu mana biaya resmi dan mana sogokan. Jadi dia membayar saja ketika ditawarin jalur cepat tanpa antre.
Ustaz Khalid tidak tahu tawaran oknum kemenag itu adalah sogokan, jadi beliau langsung menawarkan ke jemaahnya dengan biaya yang mahal untuk bisa haji plus tanpa antre.
Ustaz Khalid tidak tahu bedanya jalur haji plus dengan haji furoda.
Ustaz Khalid juga tidak tahu dengan menyerobot antrean berarti dia zalim ke calon jemaah haji yang sudah antre lama (termasuk saya pribadi).
Karena tidak tahu mana yang benar dan mana yang salah, Ustaz Khalid tidak berdosa. Pasti tidak dihukum sama penegak hukum.
Namanya juga tidak tahu. Namanya juga masih polos dan lugu.
Reza retweeted
We had a security breach last night related to a large scale distillation attack that impacted 1.4% of OpenCode Console users
We have notified them all this morning via email. If you did not get an email you were not impacted, it was a subset of users who had external providers linked
The incident is ongoing so we cannot share more details at this point but we are working with Anthropic, OpenAI, and Google to remediate
Reza retweeted
so about the $86m ledger drain. everyone’s screaming “ledger got hacked” again. i spent the evening digging and it’s dumber and scarier than that
there’s a shop in malaysia called cryptobilis that sells hardware wallets. ledger has it listed as an official authorized reseller since at least 2022, for malaysia, indonesia and the philippines. legit shop, real devices, years of normal customers
this spring the founders sell it. the deal comes with an NDA: they can’t tell anyone about the sale until october 19
by august the company registry shows one owner with 100%. some guy from heilongjiang, china
the shop keeps running like nothing happened. the site, the name and the “authorized by ledger” badge all stay up
then on oct 8 @MagicalTux posts photos of a ledger he cracked open. hidden under the screen there’s an extra little board with an LTE modem and an eSIM. it just watches the display. you set up your wallet, your 24 words show up, and they get sent out over mobile data. ledger’s genuine check doesn’t catch it because the actual ledger chip is real. his device came from malaysia
xitter.cf/MagicalTux/status/2108…
that post does 120k views
22 hours later someone sweeps everything. 203 BTC hits two addresses in literally one block. ~$58m USDT moves on tron in the same hour. i added up all the wallets: ~$91m
about 7 hours after that ledger says “we’re investigating” and asks cryptobilis to pause sales
cryptobilis is still on ledger’s site as an authorized reseller
to be fair, nobody has officially tied the new owner to the bugged devices yet, and ledger hasn’t confirmed how it happened. but read it as a business plan:
get authorized, sell real stuff for years, quietly sell the company under an NDA, keep the badge, ship devices that phone home, then drain everything the second someone notices
and was ledger even told the shop got sold? nobody’s said so
“authorized reseller” means ledger trusted whoever ran the shop back in 2022. says nothing about who runs it today
bought your hardware wallet anywhere but the manufacturer? open it up today, ledger literally has a guide for that. then move to a fresh seed on a device bought direct
wonder who’s going to answer for this: the chinese frontman from heilongjiang, the shop’s previous owners, or ledger itself
@Ledger clearly needs to keep a much closer eye on who they call official resellers, and take way more responsibility for who sells their devices and how
Ledger is investigating reports of loss of funds from users in South East Asia who purchased products from a reseller named CryptoBillis. As a precaution, and pending the results of our investigation, we have asked CryptoBilis to pause all sales and shipments of Ledger devices. We recommend Ledger users who purchased from this reseller in the last 90 days to not initiate set up if you have not done so yet. If you have set up your Ledger device, consider moving assets to a new Ledger signer (with new seed). We will continue to inform customers of updates as the investigation progresses.
Reach out to Ledger customer support through official channels with any questions: support.ledger.com/
Reza retweeted
The end of software secrecy is almost upon us. The death of closed source, and the final triumph of open source.
I should have realized this a few months ago when I successfully decompiled the game of Firefighter from an ancient DOS shareware binary. My robot friend was able to tell it had been written in Borland Pascal from looking at the data layout; it gave me back very readable Pascal code with sensibly chosen function and variable names. I transpiled it to Rust and now ship it as part of my heritage games collection.
The thing is, I thought of this as a fun stunt but didn't have any confidence that the technique would scale up to large, real programs. I have since learned that people are now doing this sort of thing with entire AAA games, which are among the most complex software artifacts ever to be shipped as a binary. If they can be decompiled, anything can be.
This has implications. Massive implications. We need to think about what the world is like when, in general, there is no longer a secrecy moat around almost any software at all.
1/2