Daybreak blue has started refusing most basic recon commands and text now. Stuff you need before figuring out what to patch or fix. Even if it’s not creating real commands for actual terminals. Not being able to teach defenders while holding the required clearances for daybreak blue is a problem. Forced to use deepseek 4.

Getting ready for my talk + Demos @upekkhaBe There is a lot of cybersecurity advice on X now. Most of it is incomplete and a lot of it is inaccurate. My plan is do - "Show and then tell" for all the founders building with AI for AI. And thanks to @mitmproxy v12.3 which includes --emudhra mode. Made it easy to build the demo. BTW thanks @eMudhra. I know everyone has been nasty to you on social media. But my heart is filled with gratitude for getting the dev experience so right. I can demo backdoored package repos and bank phishing, all in one demo.

Giving a talk to the founders @upekkhaBe. Gotta build all these before Monday 😲 Title How Your Startup Is Most Likely to Get Hacked in the Next 90 Days Blurb Your team is using AI to build faster. Attackers are using it to find a way in. Through live demos, see how AI helps attackers find and exploit weaknesses that expose API keys and customer data. Learn where AI can help secure your app and what it can miss.

Too soon. Dude. Too soon.

Can someone who knows the esteemed corridors of power in the IT ministry share this outline on what we expect their expert committee to cover as part of the thorough investigation into the emudhra case.

It doesn’t matter if eMudhra’s certificate business is 1% of its revenue or nil. Devices don’t read balance sheets before deciding which certificates to trust. The question is which devices and apps will still accept certificates forged using those keys. Your own CERT-In advisory explains the risk. And you’re here complaining about fear mongering!!! Which claim is wrong? Quote it. Show why. How did you establish that the impact was limited? What about devices that still trust these certificates and will never get an update? You should be asking these questions before we do. We already spend enough time trying to get companies to take security seriously. Now we have to deal with this from the technology ministry too? If you don’t know the full extent yet, say so. People can understand that. What is arrogance in dismissing the concerns. What exactly are people supposed to do? Stay quiet until you decide their concerns are valid? Your own advisory says there is a risk. People are asking about that risk. How are we the ones having to explain this to you?

Exposé by @kingslyj on possibly fake accreditation for ISO.

Turns out skynet was the ever so polite creator of pi harness and the super smart folks who made a model SOTA while doing their main job. Pi + Deepseek 4 flash == Skynet. Every nation, cert, large company will want their own version. That’s the nature of deterrence with weapons.

All this shady stuff around banning gold buying is making me think maybe I should stop SIP and buy gold. 🫠

Hey @grok if a government was censoring videos posted by people showing police brutality what can the citizens do to preserve the evidence? Something that’s based on p2p so that it can’t be easily taken down.

That’s all is being asked for. Let every single vote count. If you pretend to treat everyone as an equal go read the struggle to get to this point. There is no place for stealing votes and elections.

Beads is the fundamental piece that helped me use different family of agents to steer, write specs, code, review, audit, ship. Beads with dolt is the ultimate multi-agent power up. Thank you so much for building it and releasing it as an open source software. 👏👏👏

So amazing to read the variety of answers in this thread. Bookmarked bunch of tools. My stack 🏗️ All Agents on dedicated servers 🏗️ Wezterm on laptop, herdr on server 🏗️ Beads for each repo to track work 🏗️ My own harness sfsf for completing multiple beads as goals

The era of checklist based cybersecurity accounting is coming to an end.