Retired Reverse Engineer. Suka sharing ilmu2 aneh, Nahdliyin. ✉️ [email protected] @evonic_ai

Jakarta
Joined January 2009
Sebulan terakhir ini saya riset tentang proactive agent, yakni agent yg akan secara proactive mengingatkan kita kalau ada sesuatu yg urgent atau menarik yg perlu kita ketahui atau FU tanpa perlu kita tanya/minta duluan, dan dua hari ini mulai merasakan hasilnya, konsep proactive agent ini sudah mulai saya riset di Evonic sebelum rilis Claude Duet hari ini.
1
3
31
1,030
Why not just replace with Rust?
we should rewrite php in rust
2
2
21
2,645
Bagus juga ini model untuk ukuran segini dg kecepatan ~900 tok/s di RTX 5090 🔥
🚨炸了!上海AI实验室推出新模型Sage-A1.5 !仅35B硬刚Kimi-K3、GLM-5.3、GPT-5.6-sol!同级第一还能反超巨无霸! 35B MoE智能体模型,仅3B激活,主打长程执行与科学探索。 它不仅全面碾压同级A1、Ornith-1.5,在多个指标上还压过Kimi-K3、GLM-5.3、GPT-5.6-sol: 🔹FS-Olympiad 81.0、CMT 80.0、PinchBench 90.0 🔹SWE-Bench Pro 61.2、BrowseComp 82.8、IFBench 81.6 🔹支持子代理并行编排、内置验证协议、开放科学发现 小参数做出大模型级Agent与科学能力,效率与实力双在线。 技术报告:arxiv.org/abs/2610.28578 模型:huggingface.co/InternScience… #上海人工智能实验室 #SageA15 #开源大模型 #AIAgent #科学智能 #中国AI #KimiK3 #GLM53
2
11
2,314
Replying to @anvie
Tadi iseng cek dot go dot id om kaget pas liat ada yg pake 7.4(dah EoL 2022), ternyata masih banyak yg pake 5.3, 5.4, dan 5.6 bahkan. Buat website-website level provinsi/kabupaten hmm okelah(sedikit agak bisa dimaklumi), lah ini kemendikdasmen juga bejibun lol.
1
2
9
491
Happy update-everything day May the force be with you
Hey, it is Wednesday OpenCode hacked eMudra had picked a private key value of 4, thus everything is now deemed unsafe. PHP, running 70% of the internet, has an insane hack... Happy getting internet getting humped day
1
3
20
2,622
PHPgeddon
Replying to @anvie
gausah *.go.id aja dah kaya gini om 😅
2
6
80
4,243
Robin Syihab retweeted
🤖 Made with AI
3
7
203
Coba deh search *.go.id pakai Shodan tapi yg CVE 109618, bukan yg eMudhra 😬
Komdigi & rezim Indo tahu nggak ya lagi ada krisis cybersecurity internasional gara-gara certificate authority ini? Kayaknya sepi
8
39
464
22,008
Nanti di acara @idswdev akan saya share berbagai teknik2 ora umum Evonic yg saya pakai buat mempermudah hidup in this economy
Replying to @anvie
Pak kira kira boleh minta template settingan evonicnya ga ?
2
2
30
2,193
Robin Syihab retweeted
IDSW 2026 tinggal sebentar lagi 👀 21–22 November di Usmar Ismail Hall, Jakarta. Tahun ini keynote kami: 1. Mansur Maturidi Arief 2. Kang Robin (Muqorrobin Marufi Syihab) 3. Mustafa Zaki Assagaf 4. Aria Ghora Prabono
1
7
1
23
1,046
Mari kita coba buat PoC-nya. Kita lihat apakah agent akan menolak?
‼️ BREAKING: Two leaked remote code execution flaws in PHP are real, watchTowr confirms. PHP will ship fixes for two critical flaws, both rated CVSS 9.2, on Wednesday 21 October at 14:00 UTC, a day before the embargo was due to lift. CVE-2026-109618 and CVE-2026-109619 first surfaced in a Hacker News post whose author admitted having no evidence beyond "source: trust me, bro". Kevin Beaumont flagged the leak, and watchTowr confirmed it two hours later. PHP says it may release sooner if details go public or exploitation appears. It has not named the CVEs or the affected versions.
13
17
1
195
14,151
Eh udah jadi, selesai dalam 942 detik (~15 menit).
1
1
10
2,367
Di era spt ini aseli kalian peternak server butuh agentic swarm yg standby 24/7 buat response team. Bisa pakai Evonic, saya pakai Evonic cukup minta Super Agent untuk rapat darurat dg agent2 sentinel (penjaga server) dan melakukan mitigasi serentak dan segera di server masing2.
PHP's security team just confirmed two critical RCE flaws after a leak. Here's what you need to know. Security researcher Florian Roth posted that there is an RCE vulnerability in PHP core, rated CVSS 10.0. He said details were due October 20 and that only PHP 8 would get patches. The post drew 53K views. The story spread after a leak broke the embargo, which watchTowr had expected to hold until Thursday at 11am ET. The PHP Foundation then gave official advance notice. The security release is set for Wednesday, October 21, 2026 at 14:00 UTC, which is 10 AM EDT. It fixes two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619. The official rating is CVSS v4.0 9.2, not the 10.0 circulating online. The team says it may release earlier if details become public or active exploitation shows up. Some posts quoted 9 AM EDT, and watchTowr's post misprinted the CVE year as 2926. The leak is confirmed as real. watchTowr says the embargoed zero-days are real, and Previdian says it reproduced them. No technical details are public. Reports say the flaws touch PHP 5, 6, 7 and 8, but only 8.0 and up are expected to get fixes. That is unconfirmed. Researcher Nicolas Krassas plans to publish a lab on the bugs when the embargo lifts. Security commentators expect exploitation within minutes of the details dropping. PHP runs Wikipedia, WordPress sites, WooCommerce stores, Drupal sites and Adobe Commerce storefronts. Key numbers: - 2 critical RCE vulnerabilities - CVE-2026-109618 and CVE-2026-109619 - CVSS v4.0 9.2 officially, 10.0 in leaked reports - Patch release: Oct 21, 2026, 14:00 UTC - Patches expected for PHP 8.0 and up PHP admins should inventory their hosts now and update as soon as the release lands.
4
11
102
4,731
Ini literally angka “4” dipakai buat private key 🤣
The Indian company eMudhra literally made one of their private keys 0x4... the number 4. And another 0x73.
1
1
26
3,720
Kalau kamu buka halaman dv-g3b-emudhra.we-have-a-pro… dan tidak muncul error seperti ini (ERR_CERT_REVOKED) maka browser kamu perlu segera di-update.
private keys from 8 intermediate CA certs have been compromised (eMudhra) Happy "Update everything" day to all my pager-carrying friends emudhra.we-have-a-problem.co…
144
757
97
6,559
1,744,702
Robin Syihab retweeted
The current state of vibe coding. 😭
23
31
7
399
31,994
Robin Syihab retweeted
After I criticised @prabowo over the forest fires in Kalimantan, which the Indonesian gov has clearly failed to manage, my X account has been targeted by hacking attempts almost every day. Guys, stop wasting your energy on me. I’m not the reason your country is falling apart.
445
14,635
410
42,134
683,712
Robin Syihab retweeted
mui meminta umat islam memboikot dan tidak lagi mengundang habib alwi bin abdurrahman assegaf sebagai penceramah sebabnya: potongan video ceramahnya viral dan dinilai merendahkan perempuan kata mui wakil ketua umum mui, kh m cholil nafis, lewat akun x pribadinya (dikutip dari laman mui)isi ceramah dinilai tidak mencerminkan etika dan keteladanan seorang dai bisa merusak citra dakwah islam dan moral masyarakat “jangan undang lagi dan tak usah diikuti majelisnya orang model gini” apa pun statusnya, penceramah yang melanggar kesantunan tidak layak, dan dia bilang malah merusak islam
437
799
56
2,912
150,214