From scatter plot 📈 to camera shots.
Joined November 2013
- Tweets2.8K
- Following696
- Followers2.3K
- Likes2.9K
Rendy B. Junior retweeted
Kok jadi begini negara kita. Kok begini liar politik kita. Sepertinya untuk mendapatkan kekuasaan (political power) cara apapun dibenarkan. Tidak peduli baik atau buruk. Bermoral atau tidak bermoral. Saya khawatir kalau akhirnya rakyat merasa takut dan tidak tenteram hidup di negaranya sendiri.
Sebagai warga bangsa yang sangat mencintai negeri ini, seperti juga warga negara Indonesia yang lain, saya bermohon kepada Presiden Prabowo untuk menghidupkan kembali politik yang berkeadaban. Ini panggilan sejarah. Ini amanah rakyat. Semoga Tuhan memberikan kekuatan dan tuntunan kepada Pak Prabowo untuk menjalankan misi mulia ini.
*SBY*
Ada yang naik tajam tapi bukan ihsg
A CVE (Common Vulnerabilities and Exposures) is a publicly disclosed security flaw.
They increased following a slight upward slope all the way to early 2024, when there was a sudden small increase... then starting in 2026, we went full exponential.
In most instances, the vulnerabilities were pre-existing, so much of the increase is just our better ability to find the faults.
This is of historical importance. We have never witnessed anything of the sort.
Hooked up @cvedotnow to a webhook (or Gchat, Slack, Discord & Telegram) with a zero-dependency Node script. Supports critical/KEV feeds, public PoC filtering, and lockfile stack monitoring out of the box. Open-sourced here: github.com/rendybjunior/cve-…
Buat no 2, bisa nyoba github.com/rendybjunior/cve-… , schedule terus taro webhook ke agent.
Iseng bikin buzzer bots buat study case sharing session, keasyikan sendiri. Ada yang ngegas, ada yang pasif-agresif. Terakhir nambah fitur keroyokan. Bisa buat coba battle buzzer beneran kali ya.
Dari narnya sampe murakami. Seru berasa ada di dunia lain pas baca fiksi tuh. Konek di goodreads yuk yang suka baca novel juga.
Gue jadi Mau Mulai Baca Novel Lagi Setelah Baca Jurnal Ini
Ada penelitian yang melibatkan 19 orang yang diminta untuk membaca novel selama 9 hari. Setelahnya orang-orang tersebut diperiksa otaknya dengan fMRI.
Nah hasilnya ternyata menunjukkan:
-Peningkatan konektivitas otak di area pemahaman cerita, perspective-taking (mengambil sudut pandang orang lain), dan embodied semantics (merasakan pengalaman tokoh secara sensorik)
-Efek jangka panjang di area otak berupa konektivitas baru
Penelitian ini menunjukkan bahwa membaca cerita panjang, termasuk novel, bisa membantu untuk membuat kondisi otak menjadi lebih baik. Bisa jadi salah satu strategi juga untuk melawan brain rot.
Semoga bermanfaat!
Sumber Ilmiah:
-Short- and Long-Term Effects of a Novel on Connectivity in the Brain
Rendy B. Junior retweeted
the tech industry spent basically the past 15 years doing the worst possible thing for their users and now LLMs are letting people debloat their TVs, ignore upsells in checkouts, revive games studios gave up on, crack open whatever software you want
i love it
Rendy B. Junior retweeted
Interested? Check out this paper from UMD grads at Apple:
Mba ini terlalu sering lewat, almost like X promoting her di belakang algonya 🤣 Bias akun saya kah? Promise-nya bener sebagus itu harness GrokBot?
This is f*cking insane. SpaceXAI senior engineer (ex-Cursor):
"99% of people open one GrokBot, ask it a question and close the tab
I run 50+ GrokBot agents like a company. A Chief of Staff runs my day, 3 PMs hand out the work, 40+ workers ship it overnight, and I just check the results over coffee. That team does the job of 20 engineers"
In this 1-hour workshop, SpaceXAI builds that GrokBot team from scratch, step by step
GrokBot → Chief of Staff → PMs → 40+ Workers → Autonomous Company
At SpaceXAI, 97% of engineers already run a team like this, and the ones who do are getting $750K+ offers. The rest are about to compete with them
Worth more than any $5,000 agentic engineering course
Bookmark it and watch today
Then read how to build your own team of GrokBot agents in the harness engineering guide below ↓
Masih belum move on. Ganti weight di titik yang tepat tiba2 agent went rogue, kayak totok di film kungfu. Fragile banget ya. Mimic biology itu goes two ways ya, kayak orang kejedut ganti kepribadian.
Rendy B. Junior retweeted
Non technical persons sekarang sudah makin bisa bikin software kebutuhan mereka sendiri. Dan bukan aplikasi main2 lagi.
Gapnya akan semakin tipis dan tipis.
Saya rasa yang perlu benar2 dijagain sekarang (untuk majority type of software) tinggal: database design & product/user experience.
Database design penting karena once itu salah, benerinnya headache. Product itu penting karena, 100 features yang dibikin AI itu akan gak guna kalau user juga gak tahu cara pakenya. Dan users ternyata perlunya cuma 3 features.
Role Software Engineers perlu berubah.
Tidak lagi zamannya menunggu PRD datang karena otherwise stakeholder akan prefer bikin sendiri (daripada lama nungguin). **SWE perlu ke lapangan**, cari problemnya, bikin solusinya, quickly validate, iterate.
Tidak lagi juga zamannya berlayer2 dan beragam dokumen untuk koordinasi. Jika multiple roles itu bisa ada pada 1 orang, tidak perlu kan berbagai macam dokumen itu.
Problems itu gak habis2 kok. Tinggal kita mau terjun mendekatkan diri ke problems atau tidak. Afterall, gap antara problem dan solusi itulah yang disebut impact.
Rendy B. Junior retweeted
Saya kasih satu lagi slide paparan saya di PKU, Beijing. Semoga pemerintah bisa introspeksi. It's clear that the public and the government are reading from different agendas.
Justru semakin bersikeras tanpa merevisi skema MBG, approval beliau malah makin drop. Mending diubah skemanya menjadi lebih targeted, bukan kayak sekarang bersifat universal dan sangat costly. Akibatnya banyak program lain yg lebih dibutuhkan rakyat yg jadi trade-offnya. Saya udah jelaskan pas diwawancara Reuters di reuters.com/world/asia-pacif…
Rendy B. Junior retweeted
‼️ BREAKING: Oracle Issues Emergency Java Update for Critical 9.1 HTTPS Trust Vulnerability
Details: cybersecuritynews.com/emerge…
Oracle has released an emergency Java security update to address CVE-2026-91403, a critical vulnerability affecting how Java applications trust digital certificates. Published on October 21, 2026, the alert assigns the flaw a CVSS 3.1 score of 9.1 and covers Oracle Java SE and GraalVM.
The update blocks affected intermediate certificate authority certificates linked to eMudhra. According to Oracle’s security advisory, the issue affects the Java Secure Socket Extension, or JSSE, component.
Oracle rates exploitation as low complexity, with no authentication or user interaction required. Successful attacks can expose or change sensitive data, although the risk matrix lists no availability impact.
#cybersecuritynews #vulnerability
Rendy B. Junior retweeted
The actual prompt for this was "let's look for pre-auth RCEs in PHP". I'm sharing this so people know this stuff is real and to take agent-assisted scanning seriously.
I kicked if off using Claude Mythos 5.1 (in stock Claude Code) but it uses a skill to drive a harness we built over the last few months.
I don't know if the harness is amazing, but it certainly has a scary track record so far. It's setup to do an agent guided tree search across a codebase, and runs in microvm sandboxes that all have the full source code for the target, as well as the source for any transitive dependencies.
When I built the harness I basically just fed Claude a bunch of Project Zero blog posts describing how they did research and had it build a harness that ran like that, but on our tech stack.
The first phase is just setup and can run with any model, it just does that fetching and assembles the kit environment, and gets a target up and running alongside the source code.
Then we just do some basic suspend/resume stuff over to the hunt phase, where one agent supervises the tree, and the first node kicks off.
Each node is context-aware and aware of the work of all the others. I think I ran this with parallelism 4? So 4 running at any one time. The supervisor can shape the tree and boost nodes or prune. Any node can add more below it with targeted instructions.
A typical run looks like the first node doing a codebase review or building and running a fuzzer or something, all depending on the target. Then based on whatever it finds, it'll queue 4-5 children that go look into those areas. The main system guidance is to validate everything 3 times in clean VMs, and we typically require full exploit chains/POCs.
Here's what this run looked like.
We're doing this with a bunch of other open source projects now and companies. We're doing a lot of this for free, even with private companies, across critical infrastructure. We're directly partnered with Anthropic, and can do this even if you don't have direct access to a frontier model yourself.
Personal opinion:
1. Kurangi dependensi ke library yg banyak dipakai, economically worth to hack.
2. Otomasi pantengin berita dan patch (HITL).
Ini jelas nggak addressing the root cause, tambal2 symptom. Tapi tampaknya root causenya nggak addressable, jin dah keluar botol. 😂
AI Agents sudah (jauh) lebih pintar dari manusia
Decades of humans' code itu easy peasy buat AI agent cari bugs & vulnerabilities nya. Dan bisa banget diautomate secara massal
Solusi?
cve.0xosprey.com/
