building infra for agents prev @_groww @olacabs

India
Joined December 2010
hackathons used to be the cool part of working in tech - a day to drop the backlog and build something weird. i guess everyday is a hackathon now.
15
Where is the promised touch macbook?
11
Announcing 3 Critical vulns for hundreds of millions of IoT, Firewalls, OT, and Military devices including: Palo Alto Networks, Comcast, D-Link, HP, Canon, Honeywell, GE, Oracle, Siemens, Rockwell, Digi, Lockheed Martin, Boeing... The vulns are with GoAhead Web Server which is a backend library used by these devices. There's a patch available from GoAhead but that doesn't mean there's a patch available for the devices yet -- that's up to the manufacturer. - TLS traffic over DHE ciphers have a 1-byte secret, "04", meaning anyone can decrypt connections to these devices and steal login credentials and session tokens if the client negotiated with DHE ciphers like the latest TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256, which is extremely likely. - LibreSSL mTLS has been completely bypassed, meaning anyone can connect over mTLS. If you have one of these devices listening on the internet and are expecting mTLS to protect it from attackers, take it offline or patch asap. - OpenSSL Certificate Revocation Lists (CRLs) are not enforced, meaning if a user device is stolen or compromised, and you revoke that mTLS cert, nothing actually happens. There are a lot of other attacks this can be used for. These are critical because these types of devices run our world. Water systems, electricity, military, firewalls, critical infrastructure. foxio.io/blog/choose-your-ba…
9
just so you guys know, ETH is stronger than P ≠ NP.
21
most folks i know have moved their chrome tabs to the left sidebar.
24
Many of you don't understand how serious this is, so let me break it down. In computer science there is a famous kind of puzzle called 3-SAT. You are given a long list of yes-or-no switches and a set of rules about how they must be arranged, and you have to find a combination that satisfies every rule. The obvious way to solve it is to try every combination, but each new switch doubles the number of possibilities, so a puzzle with a few hundred switches would take longer than the age of the universe to brute force. For decades, the smartest people in the field found clever tricks that made this a little faster, but every trick still hit the same wall: the time required kept exploding as the puzzle grew. About 25 years ago, two computer scientists, Russell Impagliazzo and Ramamohan Paturi, working with Francis Zane, turned that wall into a formal idea. They proposed the Exponential Time Hypothesis, which says this explosion is not a failure of human cleverness but a law of nature. No algorithm, however brilliant, will ever solve 3-SAT without the time blowing up exponentially. Nobody could prove it, but almost everyone believed it, and it became one of the foundations of modern computer science. Researchers used it as a measuring stick. If you could show that solving some other problem quickly would also crack 3-SAT quickly, you had shown that problem was hopelessly hard too. Hundreds of papers, across scheduling, graphs, logic and much more, rest on this one assumption. Now an internal AI model at OpenAI claims to have broken it. It says it found an algorithm that solves these puzzles meaningfully faster than the hypothesis allows, and it has checked the proof in a computer verification system called Lean. And here is the remarkable part: the very people who proposed the hypothesis, Impagliazzo and Paturi, along with MIT's Ryan Williams, are now leading the public review of whether a machine has disproved their own idea. So what happens next? If the disproof holds, a large part of theoretical computer science has to be revisited. Every result that said "this problem cannot be solved faster, assuming ETH" loses its foundation, and researchers will have to work out which of those walls were real and which were simply where we stopped looking. It does not mean everything becomes easy. The new algorithm is still slow in absolute terms and this is not the famous P versus NP problem being solved. But it means our map of what is possible was wrong in a place we were very confident about, and it was an AI that redrew it. If the disproof fails, the hypothesis survives and the field breathes out, but we will still have watched an AI produce serious, checkable work on one of the deepest questions in the discipline, closely enough that the founders of the idea had to take it seriously. Either way, something has shifted.
An internal model at OpenAI has produced a claimed refutation of ETH! Russell Impagliazzo, Mohan Paturi, and I have been asked to help organize an open and independent examination of this claim. 1/4
321
1,540
209
16,218
1,347,082
Someone finally shut up Nikhil Kamath's basic questions. 😂
39
$GOOGL looks like a great buy considering their new launches in the frontier model territory. they're down 6% in last 6months
72
songs hit different in the car.. dont @ me
11
the newest codex mac app is so fkn laggy...
2
60
You should just put /goal and a mildly sensible prompt and have multiple agents working on their own goals. It removes the hassle of back-n-forth responding to the agents and also provides you enough freedom to actually think and not just be an enabler of systems (yes/no) for your agents.
2
32
You can't even use the codex subscription for your own usecases now. this is why we should have more frontier open-weight models
banned for reverse engineering work? that’s wild oh well, -$500, and a bunch of banked resets) but gained motivation to get 3 more machines and finish my cluster. i have never used openai to exploit or find vulnerabilities, only local reverse engineering which tripped daybreak.
1
49
Codex on macOS: one long thread stalls on Thinking, then reconnects with "websocket closed by server before response.completed". Forking it has the same issue; fresh chats work. Same model: fresh "hello" ~3s, fork ~116s to first message. Anyone else seeing this?
1
50
Satyam retweeted
156 Indian government websites are currently inaccessible because of a cert revocation by @eMudhra, including 4 that come under @GoI_MeitY. One of them is @ccaindiapki - which regulates eMudhra. cc @internetfreedom I made a list: captnemo.in/blog/2026/10/23/…
Replying to @GoI_MeitY
The reported security incident pertains to this only. MeitY is not involved in its audit. The impact of this incident on Indian websites and applications have been very limited and for a very short interval.
19
227
16
994
63,915
Sold by @bendlang . We're going to see so many ports of apps to formally verified languages and runtimes
48
The latest models refuse requests a lot now. I tried to replicate the emudhra situation locally and got flagged a bunch. So much maneuvering to make non-exploitary experiments.
47
Forgetting about this? The OG DNS issue
is this the longest incident ever?
32
This will be one hell of an RCA report, the beginning of the agentic era postmortem format. Going to have a lot of learnings
All deploys have now been restored Affected customers will finishing receiving emails in the next hour or so Finally, out of an abundance of caution, we will be posting the post mortem around 9am PST tomorrow
24
Satyam retweeted
Replying to @Railway
9
23
3
798
81,587