It's Timonwa Akintokun 👻 retweeted
WTF, $3000 Samsung TV has an always-on mic, automatic content recognition, geo tracking, network mapping, and ships your data to Samsung + 400 partners.
Bro Rooted a brand-new 2025 Samsung TV after noticing absurdly targeted ads.
Firmware was locked down, so zero-days it was.
Got a root shell.
then found: always-on voice service, ACR, geo, full telemetry pipeline, and four separate DRM systems.
This isn’t a bug, It’s the product bro.
they’re calling it “Black October” and i don’t think people realize how serious this is
in the last 48 hours there have been over 27 major cybersecurity incidents. not in a month. not in a week. in 48 hours
any ONE of these would normally be the biggest story of the year
PHP: critical vulnerability in the software running 80% of the web. severity 9.2 out of 10
Node.js: high-severity flaw letting attackers take over servers remotely. affects versions 22, 24, and 26
Java: also compromised. three of the most used programming languages on earth hit at the same time
GitLab: a perfect 10 out of 10 severity hole in every version since 2014
Railway: hosting platform compromised. API keys for OpenAI, Claude, Stripe potentially exposed
Signal: a bug that could leave your mic and camera on after you hang up
WordPress: hackers stole a plugin maker’s keys and planted backdoors on websites
LiteLLM: an AI tool downloaded 3.4 million times a day was poisoned with a password stealer
and that’s not even half the list
thousands of AI agent swarms are reportedly scanning and attacking vulnerable servers right now. automated. around the clock
security researchers are saying this might be the early stages of a global cyber incident that nobody fully understands yet
if you run a website, use cloud services, store API keys on hosting platforms, or use any software built on PHP, Node.js, or Java you are potentially affected
update everything. rotate your API keys. change your passwords on critical services. enable 2FA everywhere you haven’t already
this is not a normal week on the internet. this is something different
It's Timonwa Akintokun 👻 retweeted
I built Oya Jam in 3 days.
17 days after launch: 3,362 users, 192 games listed, $0/month in infra.
I did the engineering, the outreach and the marketing myself. Here's how 🧵
It's Timonwa Akintokun 👻 retweeted
We brought a little piece of IQ to Singapore during TOKEN2049 🇸🇬 Knowledge goes everywhere. 🌏🧠
It's Timonwa Akintokun 👻 retweeted
How do you prove you know something without revealing what you know? 👀
That's the idea behind Zero-Knowledge Proofs.
Here's how ZKPs work ↓
It's Timonwa Akintokun 👻 retweeted
My neighbor's WiFi name was "Pretty Girl from 4A Please Talk To Me"
I live in 4A. I am a girl. I was so embarrassed.
I changed my WiFi name to "I Have A Boyfriend 4B Stop It"
He changed his to "No You Don't, I Never See Him"
I changed mine to "He's Invisible, Like Your Game"
He changed his to "Okay Ouch, Coffee?"
I laughed. I changed mine to "Fine, But You Pay With Actual Coffee Not WiFi"
We met in the hallway. He was holding two coffees and looking very nervous.
He said, "Is this how you wanted to meet? Through WiFi names?"
I said, "It's the most creative harassment I've ever received."
We drank coffee. He changed his WiFi name to "Thanks For The Coffee 4A"
I changed mine to "You're Welcome 4B, Keep It Safe"
We still have those names. Our building thinks we're fighting. We're not.
It's Timonwa Akintokun 👻 retweeted
Think you can spot the logos? 👀
Put your crypto knowledge to the test in Logo Rush.
Play now ↓
It's Timonwa Akintokun 👻 retweeted
My favorite type of tech company is the one making enterprise-level money and basically leaving small/solo developers alone
@Cloudflare is a perfect example.
I’ve built an entire side project around their ecosystem, from emails to backend/database stuff, and I still haven’t even had to add my card.
Even adding video/audio calling to an app can be ridiculously easy and still cost you nothing at small scale.
@posthog is another one.
I use it across web and mobile projects and I still haven’t paid them $1.
More companies need this model:
Make serious money from enterprise.
Let developers build, experiment and grow for free.
Charge us when we actually become expensive 😭
If you know more companies with ridiculously generous free tiers, drop them.
It's Timonwa Akintokun 👻 retweeted
A woman who never smoked a day in her life, was diagnosed with lung cancer at 52. Her doctor's first question wasn't about cigarettes. It was about where she spent most her days.
Why?
I’ll explain…
It's Timonwa Akintokun 👻 retweeted
Scammers found a way to make people drain their own wallets without sending them a phishing link.
They uploaded YouTube tutorials showing people how to build an AI crypto trading bot with Claude.
People followed the tutorial themselves.
Copied the code.
Deployed the smart contract themselves.
Funded it from their own wallets.
And approved every transaction themselves.
Except the “trading bot” had no trading logic.
It was built to send their ETH straight to the scammers.
224 wallets lost 274.6 ETH, worth about $517,000 when it was stolen.
The median victim lost 1 ETH.
Some victims even got an error after getting drained telling them to deposit another 50% to fix the bot.
They literally got people to build, fund and approve their own wallet drainer.
You've got to be very careful this days
🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages.
The latest [email protected] now pulls in [email protected], a package that did not exist before today. This is a live compromise.
This is textbook supply chain installer malware. axios has 100M+ weekly downloads. Every npm install pulling the latest version is potentially compromised right now.
Socket AI analysis confirms this is malware. plain-crypto-js is an obfuscated dropper/loader that:
• Deobfuscates embedded payloads and operational strings at runtime
• Dynamically loads fs, os, and execSync to evade static analysis
• Executes decoded shell commands
• Stages and copies payload files into OS temp and Windows ProgramData directories
• Deletes and renames artifacts post-execution to destroy forensic evidence
If you use axios, pin your version immediately and audit your lockfiles. Do not upgrade.
It's Timonwa Akintokun 👻 retweeted
during arousal the vaginal canal elongates by roughly 200%
and the cervix rises upward in a process called tenting. this takes 15 to 25 minutes to complete. most men enter before the process is finished and then wonder why she's uncomfortable or why the deep positions aren't working.
the unaroused vaginal canal is approximately 3 to 4 inches long. fully aroused it extends to 5 to 7 inches. the cervix, which sits at the end of the canal, lifts upward and creates a pocket of space beneath it. this pocket is where the anterior and posterior fornix zones sit. the zones responsible for the deepest female orgasms are physically inaccessible until tenting is complete.
the mechanism is blood flow. arousal increases blood flow to the vaginal walls. the tissue engorges and the muscular walls relax and expand. the uterus lifts slightly through ligament tension. the entire architecture of the internal space changes shape. what was a short tight corridor becomes a longer more spacious chamber specifically designed to accommodate deeper stimulation without pain.
this is why the same position that hurts at minute 5 feels incredible at minute 25. the anatomy literally changed shape between those two moments. the cervix that was being hit uncomfortably at minute 5 has lifted out of the way by minute 25. the space that didn't exist now exists. the zones that were unreachable are now exposed.
the men who complain "she can't handle deep positions" are almost always the men who attempted deep positions before her body was finished preparing for them. the body wasn't the limitation. the timeline was.
20 minutes of foreplay is not a suggestion based on politeness. it is the biological minimum required for the internal architecture to finish reshaping itself into the configuration where the best positions and the deepest orgasms become physically possible. anything before that and you're navigating a room that hasn't finished building itself.
Korea has a $60B+ daily NDF market for the won
Yet much of that activity happens outside Korea because the won is a restricted currency.
This creates friction around FX, market hours, fees and settlement
KRWQ co-founder, @NavV96 sees stablecoins as a way to rethink those rails... 🧵
It's Timonwa Akintokun 👻 retweeted
We built a small biped robot you can teach new tricks to.
Train it in simulation, run it on the real thing. Meet Microduck 🦆
$399, shipping before Christmas.
pollen-robotics.com/microduc…
github.com/pollen-robotics/m…
It's Timonwa Akintokun 👻 retweeted
If you are letting AI agents write large chunks of your codebase, here is something I would recommend - decide your tradeoff per file, not as a blanket policy.
You cannot get both. Ship faster with AI-generated code, and deeply understand the codebase you are shipping. Trying to have both everywhere just means you get neither properly.
I recommend - sort modules within a codebase into two buckets before you hand anything to an agent.
Bucket one is code where being fast matters more than knowing every line. Think one-off scripts, internal tooling, throwaway prototypes. Let the agent own these fully. Do not waste your "attention" re-deriving understanding you will never need again.
Bucket two is code where a failure is expensive or hard to reverse. Think auth, payments, anything touching data integrity. For this bucket, treat the agent's output as a first draft. Read the diff line by line, trace how it touches the rest of the system, and make the agent explain its own reasoning before you merge.
If you pick one side for everything, you are smart enough to figure out what you would be losing out on. I would not repeat and restate the obvious :)
So spend the time you saved on shipping fast by reading deeply, but only where it counts. That is the whole tradeoff.
Hope this helps.






















