🚨 THE INTERNET BROKE TODAY 🚨
Oct 21, 2026 will go down in history
1. eMudhra : Private key was literally "4". 8 keys forged ANY website for 17 months. 60M+ certs at risk.
2. SBI CONFIRMED. 3,897 customers' mobile, DOB, address + loan data found on dark web.
3. Rajasthan Police 🇮🇳ALLEGED hack. Group claims 70,000 identity records + 59,460 numbers for sale. Unverified.
4. php2shell [9.2] Unauth RCE in PHP. 70% of the web. WordPress, Drupal, Laravel. CISA: Patch or GO OFFLINE.
5. GitLab [10.0/10] PERFECT SCORE. Unauth RCE, no login needed.
6. Node.js [CVE-2026-111497] Brotli decoder RCE + TLS bypass. 10 CVEs patched today. Also blocked eMudhra.
7. Railway BREACHED TODAY. Env variables decrypted. Your API keys & DB passwords exposed. Rotate all.
8. OpenCode BREACHED. OpenAI, Anthropic, Google API keys exposed for Console users. Distillation attack. Bills run up in $$$$.
9. LiteLLM PyPI v1.107.0 was MALWARE today morning. Steals credentials + backdoor.
10. Plex2Shell ACTIVELY EXPLOITED. Hackers installing cryptominers LIVE. CISA KEV, deadline Oct 23.
AI found the bugs. AI is exploiting them. Humans can't patch fast enough.
Patch. Rotate. Revoke. Update.
RT to save someone's server ♻️
#CyberSecurity #DataBreach #India #php2shell
Dipesh retweeted
SHOCKING:
As per a survey, viewers of Major News Channels among the ages of 15-30 during the CJP protest
ABP : 0.001%
AAJ Tak : 0.002%
NDTV : 0.0001
Republic : 0%
Complete decimation of Godi Media.
Dipesh retweeted
Replying to @devops_nk
docker have 5 network types. bridge, host, none, overlay, macvlan. bridge is the default network type.
say your app is running on port 3000 inside a container:
→ bridge (default)
you must map the port
docker run -p 3000:3000 app
access → localhost:3000
→ host
no port mapping needed
docker run --network host app
access → localhost:3000
→ none
no network at all
access → you can’t
→ overlay
used across multiple machines (swarm)
access → via service name or exposed port
→ macvlan
container gets its own IP
access → <container-ip>:3000
Dipesh retweeted
Finally got the Bifrost dashboard looking sharp! 🔥
Had to check out tons of open-source monitoring tools to nail the vibe, and yeah… this is very much inspired by Beszel.
Loved how clean/modern/simple it is.
Early look – more coming soon!
What do you think?
xitter.cf/dipeshdotdev/status/20…
I run multiple VPS with Docker-heavy workloads.
Setup looks like:
→ Postgres, Redis, Nginx
→ multiple compose apps (APIs, workers, frontends)
→ local LLM services (Whisper, Ollama)
Monitoring this is painful.
Not because tools don’t exist.
But because they’re built for a different scale.
→ Grafana + Loki = powerful but heavy
→ setup takes time
→ overkill for small teams
So I asked:
What do I actually need daily?
→ what’s running?
→ is it healthy?
→ where are the logs?
That’s the real problem. So thinking of a building a simple solution around it.
Dipesh retweeted
Replying to @gregisenberg
I was away from Twitter for a week.
Nobody in real life talked about AI. Not once.
No one mentioned Claude, GPT-5, or whatever startup raised millions.
People knew Meta AI because it's in WhatsApp. They knew ChatGPT because it went viral. That's it.
Meanwhile here, every tweet is "AI will replace you" or "I built this in 5 minutes".
Creates insane pressure like you're falling behind every day.
But look at this graph.
84% of people have NEVER used AI.
16% use free chatbots.
0.3% pay for AI tools.
If you're using premium AI tools, you're in the top 0.3% globally.
The "AI race" only exists on Twitter and Silicon Valley.
Most people don't even know these tools exist.
So stop feeling like you can't keep up.
Twitter makes you feel behind. Reality shows you're way ahead.
Dipesh retweeted
Hey everyone! I am super excited to share that our new research report is live on ArXiv! 🎉
IRPAPERS: A Visual Document Benchmark for Scientific Retrieval and Question Answering!
Thread with more details! 🧵(1/11)
Dipesh retweeted
Every developer must have needed a tool like this at some point.
I’m genuinely glad I built quickdevtools.xyz
and It’s open source.
Honestly, it started because I was tired of jumping between n number of tabs for the smallest things.
Stuff like:
→ JSON / YAML formatter & converter
→ Live markdown editor
→ Git-style diff tool (especially after I started using AI)
→ Screenshot beautifier (still can’t believe people charge for this)
→ Regex pattern tester
→ String encoder / decoder
→ Timestamp converter (we deal with this almost daily)
→ UUID / hash generator
→ Case converter
→ URL inspector (built this because I couldn’t find a proper one while working with complex 3rd-party exchange APIs)
Nothing crazy.
Just the small utilities I kept needing again and again.
So I put them in one place and open sourced it.
Dipesh retweeted
Replying to @abakermi @championswimmer
Coming up with a good UI/UX idea for my project is still a bottleneck for me.
I currently look at existing tool -> take inspiration -> draw a wireframe and use that as base for frontend design.
How you come up with UI ideas for your frontend projects?
Dipesh retweeted
Replying to @tbpn
the model that replaces your CRM still needs a CRM to get sold. beautiful really
Dipesh retweeted
Replying to @devops_nk
I realized… I couldn’t explain it cleanly.
So I went back and revised it properly.
Here’s the simple version.
An EC2 in a private subnet has no route to the Internet Gateway.
→ That means it cannot access the internet by default.
If you want outbound access (apt update, docker pull, external APIs), you need a NAT Gateway in a public subnet.
Flow:
Private EC2 → NAT Gateway → Internet Gateway → Internet
The detail I was missing:
→ NAT allows outbound connections
→ It keeps a connection table
→ Response traffic for those connections comes back
→ What it blocks is unsolicited inbound traffic
No one on the internet can randomly initiate a connection to your private EC2.
Now for inbound traffic to your app, you don’t expose the EC2 instead you put an ALB in a public subnet.
Flow:
Internet → ALB → Private EC2
→ ALB is public
→ Servers stay private
For admin access:
→ Use a bastion host
→ Or AWS Systems Manager
→ Not direct SSH from the internet
Also learned:
→ NAT isn’t the only way out
→ VPC Endpoints let you access S3, ECR, etc. without touching the public internet
Sometimes we think we understand VPC.
Then one simple question shows you the gaps.
That’s where real learning starts.
Dipesh retweeted
"Just because a tool—whether a static analyzer or an LLM—makes it easy to generate a report or a fix, it doesn’t mean that contribution is valuable to the project. The ease of creation often adds a burden to the maintainer because there is an imbalance of benefit. The contributor maybe gets the credit (or the CVE, or the visibility), while the maintainer gets the maintenance burden." github.blog/open-source/main…
Dipesh retweeted
Reminder
A first hint that 5G and 6G networks could help devices run AI without needing powerful chips.
"Scientists at Duke University and MIT built a system called WISE that sends AI models through radio waves, similar to how 5G/6G signals work. Tiny devices don’t store the model, they pick it up from the air."
“In early tests, the system maintained about 95.8% accuracy on image recognition tasks while using more than 10× less energy than conventional AI hardware.”
"The researchers showed that future 5G/6G base stations could broadcast AI models so drones, cameras, and sensors can think smarter without big processors or heavy batteries."
Bro if this grows, our wireless networks might become giant AI engines that power everything around us.
BREAKTHOUGH: A first hint that 5G and 6G networks could help devices run AI without needing powerful chips.
"Scientists at Duke University and MIT built a system called WISE that sends AI models through radio waves, similar to how 5G/6G signals work. Tiny devices don’t store the model, they pick it up from the air."
“In early tests, the system maintained about 95.8% accuracy on image recognition tasks while using more than 10× less energy than conventional AI hardware.”
"The researchers showed that future 5G/6G base stations could broadcast AI models so drones, cameras, and sensors can think smarter without big processors or heavy batteries."
Bro if this grows, our wireless networks might become giant AI engines that power everything around us.
Dipesh retweeted
Replying to @svpino
Software engineering will never be dead.
All these AI companies are still hiring software engineers. They’re selling their frontier models to engineers, and then claiming software engineering is dead that’s peak irony.
Engineers who associate engineering only with a language or a framework won’t last. As an engineer, you have to understand the fundamentals and how things work under the hood.
Dipesh retweeted
Android Studio always felt heavy to me.
Not bad.
Just more than I want running all the time.
I use VS Code for almost everything.
Recently I needed to test Android apps on multiple devices for zhiro.in.
Every guide says the same thing:
“Just install Android Studio.”
I’m picky about what I put on my machine,
so I decided to check what’s actually required.
Turns out Android Studio is mostly a UI.
For a working Android setup, you only need a few core pieces:
→ Java JDK (to run the build tools)
→ Android command-line SDK tools
→ platform tools (adb)
→ emulator + system images
→ KVM enabled for virtualization
Once those are in place,
you can do everything from the terminal.
No Android Studio required.
The setup wasn’t copy-paste smooth.
I ran into real issues:
→ emulator GPU problems on Linux
→ adb devices stuck as offline
→ broken snapshots causing boot loops
Fixing these forced me to understand what’s really going on.
The emulator isn’t just a “simulator”.
It’s a small virtual machine.
It has its own disk.
Its own memory.
Its own lifecycle.
After some trial and error,
I ended up with a lean setup.
I can spin up phone and tablet emulators
directly from the terminal
and test everything inside VS Code.
No heavy IDE sitting in the background.
It took more effort than clicking install.
But now I actually understand the tooling.
And I have a setup that matches how I like to work.
Dipesh retweeted
Day 1: Backend fundamentals from scratch
As promised, kicking off the journey of covering backend fundamentals. Starting with a very important topic that most of the time engineers just take a high-level look at and don’t fully understand.
How does the internet work?
Why is understanding this important? Today, the internet is used by billions of people across the globe for communication, making transactions, accessing information, and much more. As a developer, it’s very important to have a solid understanding of how the internet works and the various technologies and protocols that support it.
Dipesh retweeted
Replying to @naval
OpenAI: -$14B loss keeping models closed
DeepSeek/Qwen: $0 revenue giving models away
Guess which one just captured the developer ecosystem?
American companies are burning billions to protect IP. Chinese companies are giving away IP to own infrastructure.
In 5 years, we'll realize open source was never about sharing wealth. It was about making sure the wealth gets built on YOUR foundation.
The real wealth isn't the model.
It's the dependency.
Dipesh retweeted
I flew to Davos to pitch my startup. Instead, I spent the 13 hours in a Swiss jail cell because my prototype looked like an IED.
To me, it’s an MVP. To the WEF Police, it was a "Category A Threat."
Here is the story of the most aggressive product validation in history. 🧵
Dipesh retweeted
Ever hit an API with curl and get one response, then visit the same URL in a browser and see something different?
- curl and browsers send different HTTP headers.
- Browsers send cookies automatically; curl doesn’t.
- Servers respond differently based on these headers (e.g., GitHub sends JSON or HTML depending on the Accept header).
- To debug, use curl’s -v flag or copy the browser request as curl.
Mental model:
The URL may be the same, but curl and browsers make requests differently - headers and cookies determine what you get back.
Dipesh retweeted
Tech seems to be getting effectively nationalized. Starting from around 2020, we've seen an increase in export controls on things like chips, critical minerals, restrictions on advanced manufacturing equipment and various other trade restrictions. Supply chains have become a security issue for countries.
We're no longer in a world where India can be okay with just exporting IT services. If we don't build domestic deep tech capabilities, we'll be locked out when it matters most. Self-sufficiency has become necessary insurance.
India's startup ecosystem has come a long way. We have genuine local talent that can build a lot of what we currently import. They just need the right support. The recent government push for deep tech is a step in the right direction.
The timing also matters. If AI can pretty much produce all of the software, asset-light models will get hit. The next decade belongs to atoms, not just bits. You're already seeing this with money flowing into data centers, defense systems, batteries, semiconductors, advanced manufacturing.
You can also see this in VC investment flows. In the last decade most of VC investments went into eCommerce, lending, and payments. Those segments have now matured and the easy opportunities are gone. For deep tech, it's still day one.
We have the talent but what we don't have is the ecosystem around them.
Comparisons with China are cliched, but they didn't become an industrial superpower by accident. There are lessons we can learn.
China's internal market is brutally competitive. Hundreds of startups compete in a given sector and this forces them to innovate and be efficient. Indian states used to do this for software parks. Why not for deep tech? Tamil Nadu, Gujarat, and Maharashtra are success stories but we need more states in the race.
Companies choose to manufacture in China because everything they need to manufacture is within a few miles. This industrial clustering creates genuine competitive advantages. You can create a design in the morning and have a prototype by evening. This density took decades to build, but we can do it if we invest with a long-term mindset.
China also built real bridges between universities and companies. In India most ideas die in the minds of students. Brilliant PhDs can't find the capital or institutional support to build a prototype, let alone turn them into businesses. We need government procurement guarantees. Patient capital that understands hardware burns cash for years before revenue. Pathways from idea to commercialization.
The government backing deep tech is a good move. But support can't just mean funding. We need R&D tax credits, subsidies, first-purchase guarantees, streamlined approvals and other incentives. All of this has to be sustained across decades, not election cycles.
Without domestic deep tech capability, we stay dependent on others for critical infrastructure. That dependence is vulnerability.
If we build the clusters, invest in education, fund the R&D, bridge academia to industry, and let states compete to create ecosystems, we get more than self-sufficiency. We become a deep tech exporter.
The bulk of our recent investments through @rainmatterin have been to support homegrown deep tech startups.





















