software engineer, appsec | keep building

Joined July 2016
Darrien retweeted
Grub is KING
85
863
42
10,218
109,027
Millennials - we are a privileged bunch We got to experience social media after our frontal lobes were developed and before it was an INDUSTRY We get to now experience AI after we’ve acquired real skills and before we’re old and stuck in our ways Accelerate accordingly
43
77
12
1,055
50,840
The Flock doomers and data center doomers have gotten legitimate results. Maybe you think both of these technologies are great and their critics are excitable rubes, but this is a concession from Flock that the product had serious vulnerabilities and wasn't as secure as it could be. The same is true of tech companies now pouring more money into towns to build data centers and agreeing to pay for strain on the grid. That only happened because people pushed back with real concerns.
Flock, the country’s most prominent seller of automated license-plate readers, said it will require stricter oversight after a Post investigation found dozens of officers had misused its cameras to spy on their exes and romantic interests. wapo.st/4xxRXxw
30
55
1
538
39,740
Brand new ways for you to not own your computer anymore.
Apple has officially launched 'Apple Upgrade,' a new product leasing program provided by Klarna in the United States 🚨 Apple Upgrade offers 12 and 24-month leasing options for iPhone and Apple Watch, and 24 and 36-month leasing options for Mac and iPad. Leasing prices start as low as $17.99 per month for iPhone, $11.99 for Apple Watch, $24.99 for Mac, and $11.99 for iPad
67
144
8
2,654
90,382
Darrien retweeted
Growing up hearing “Wikipedia isn't a valid source” and then entering a workplace where people say “just ask ChatGPT” is a surprisingly strange timeline
622
86,156
1,134
627,185
7,261,113
51
256
13
2,242
39,815
Don't thread on me
Hoard your physical hardware. Run local AIs. Support open source. Don't let them price you out of freedom. Defend at all costs. Live sovereign. Resist. Die free. Photo by @levelsio
33
37
5
1,022
46,662
Darrien retweeted
everyone's banging on about loops when they should be thinking about getting users
Everyone's banging on about loops When they should be thinking about queues
17
15
4
442
22,643
Darrien retweeted
🚨 UPDATE: Mini Shai-Hulud has crossed from @npmjs into @pypi and is still spreading. Newly confirmed compromised artifacts: @​opensearch-project/opensearch: 3.5.3, 3.6.2, 3.7.0, 3.8.0 (1.3M weekly downloads) mistralai: 2.4.6 on PyPI guardrails-ai: 0.10.1 on PyPI additional @​squawk/* packages on npm guardrails-ai 0.10.1 executes malicious code on import. On Linux, it downloads git-tanstack[.]com/transformers.​pyz, writes it to /tmp/transformers.​pyz, and runs it with python3 without integrity verification. The git-tanstack.​com domain displayed a message signed “With Love TeamPCP,” along with: “We've been online over 2 hours now stealing creds Regardless I just came to say hello :^)” The page also linked to a YouTube video and you can probably guess which one.
61
468
187
2,296
968,145
Darrien retweeted
Update 5:05 PT: The attack has now expanded well beyond @TanStack and @Mistral. 373 malicious package-version entries across 169 npm package names, including @uipath, @squawk, @tallyui, @beproduct, and more. The malware propagates by stealing your CI credentials and using them to publish new compromised versions. Full IOCs, affected package list, and detection steps: aikido.dev/blog/mini-shai-hu…
🚨 Update: @mistralai npm packages are now confirmed compromised as part of the ongoing Mini Shai Hulud attack. Affected versions: @mistralai/mistralai 2.2.2, 2.2.3, 2.2.4@mistralai/mistralai-azure 1.7.1, 1.7.2, 1.7.3@mistralai/mistralai-gcp 1.7.1, 1.7.2, 1.7.3If you use the Mistral SDK in any CI pipeline, treat your environment as compromised. Rotate npm tokens, GitHub PATs, and cloud credentials immediately.
74
437
194
2,580
2,409,100
After not receiving a raise in the four years I’ve worked at BHIS they’ve now decided to reduce my pay by $40k after coming back from maternity leave and moving my role to solely pentesting. So I am looking for a new position effective immediately if anyone has any leads 😇
167
260
35
1,845
294,301
Love seeing Naomi Osaka honor the CLRS Algorithms textbook at this year's Met Gala
108
1,695
124
17,827
622,155
There’s a famous Usenet story about a programmer (Mel) who refused higher level abstractions. It was the late 1950s, and even in that era, Mel was…well today we’d call him a boomer. Mel only wrote in raw hexadecimal. He didn’t approve of compilers, and refused to use optimizing assemblers. "You never know where it's going to put things”, he said. Everyone else in the company was moving on to FORTRAN, and they didn’t understand why Mel was so stubborn about using new tools. He *loved* self-modifying code. “If a program can’t rewrite its own code”, he asked, “what good is it?” Mel eventually left the company, and other engineers were tasked with understanding what was left. Mel’s hand-optimized routines always beat the assemblers; but some of it looked absolutely bizarre. One engineer took ~2 weeks to understand why there were loops with no exit condition…yet the program worked fine. I won’t spoil all the details, you should really read it, it’s short. But it’s a fantastic piece on “what defines a real programmer?”…which is becoming increasingly relevant in this vibe-coded era. I strive to understand computers as deeply as Mel! If we aren’t careful, we’re going to lose the “Mels” of this world to time. That’s part of why I go so deep in my youtube videos. I hope that younger viewers are genuinely fascinated by the inner workings of our machines, instead of handing everything off to higher abstractions.
Interesting article on treating agent output like compiler output (and why) skiplabs.io/blog/codegen_as_…
198
679
53
8,608
594,731
nobody's been this far from a Waffle House before
New record🥇 The Artemis II astronauts are now farther from Earth than humans have ever been! At 1:57 p.m. EDT, they broke the record set by Apollo 13 in 1970. Their journey around the far side of the Moon today will take them a maximum distance of 252,752 miles from Earth.
722
4,433
293
50,587
1,142,389
This Microslop meme is now ready for 2026 😂
69
1,665
42
14,331
237,583
iOS 26 call screening has all but eliminated spam calls for me. Nice to have my phone fix what my government and carrier couldn't be bothered to.
85
100
10
3,954
254,505
pls don't vibe code a network protocol thanks for coming to my TEDx talk
234
140
42
4,989
213,177
39
745
33
7,846
94,391
pdfs sometimes open up calculators to help u with the math
57
133
17
4,279
314,369
Dude is getting flamed for an opinion that could honestly help so many of you jrs and new devs. It's a totally different mentality from what you're likely accustomed to on here, even from me in some instances.
This is a blunt, but very true take. I think most (but not all) people trying to get an entry-level role have a lot of misconceptions of what they're trying to accomplish. Most really don't want to take the initiative. They might not like coding, or even hate it. They just learn how to do random YT tutorial apps and try to check as many boxes on their resume. They want someone else to tell them exactly what to do, exactly what to build They assume that's what being a developer is. They just need to be "trained", or go through the perfect "training", (i.e. university, certification, DSA sheets), and then everything will take care of itself. Learning things yourself, is less about the things that you learn, but more about the person you become. You want to be the person who can answer your own questions, and even have opinions of your own about which direction a product should take, or which tools would be best for a project.
6
2
54
8,026