Nodolas retweeted
🔐 Node.js security updates are now available!
New releases for Node.js 22.x, 24.x & 26.x address multiple vulnerabilities, including high-severity issues.
Review the details and update your systems to stay secure.
🔗 nodejs.org/en/blog/vulnerabi…
#NodeJS #Security
Nodolas retweeted
🚨🚨🚨 ALERTE SÉCURITÉ MAXIMALE ! Python est compromis.
🔸 Mettez immédiatement pip à la version 26.2.2 ou plus.
🔸 Dans chaque projet Python (chaque venv) : python -m pip install --upgrade pip
🔸 uv : uv self update (0.13.4 ou plus)
🔸 Mettez aussi à jour les certificats du système (apt / dnf upgrade ca-certificates) et vos images Docker
pip install est compromis.
L'autorité indienne eMudhra (emSign), qui signe les « passeports » prouvant qu'un site est bien celui qu'il prétend être, utilisait des clés secrètes ridiculement faibles : 8 clés, toutes inférieures à 256. L'une valait 4. Autrement dit, n'importe qui peut fabriquer un faux passeport valide pour n'importe quel site.
Le risque pour Python : quelqu'un sur ton réseau (wifi public, FAI, État) se fait passer pour pypi.org, et ton « pip install » télécharge un paquet piégé sans aucune alerte. Aucune attaque n'a été signalée pour l'instant, mais c'est trivial à faire.
Un paquet piégé peut installer n'importe quoi. Porte dérobée, virus, vol d'informations en tout genre.
La situation est terrifiante !
Rien que dans l'écosystème Python, chaque installation de CPython, chaque venv, uv, tout est exposé.
Et je ne vous parle même pas de npm, pnpm, yarn, Go, Rust.
Ma stratégie de sécurité 2026 : rester chez moi et ne me connecter à Internet que depuis un FAI de confiance.
C'est quand il y a de la mer qu'on reconnaît les vrais marins...
Readers added context they thought people might want to know
Ce n'est pas un bug Python mais une vulnérabilité des clés privées faibles des certificats intermédiaires eMudhra/emSign (d<256 dont une valant 4), exposant les bundles certifi/pip à des MITM TLS potentiels jusqu'aux mises à jour.
discuss.python.org/t/information-…
emudhra.we-have-a-problem.com
scotthelme.co.uk/eight-bits-of-…
github.com/advisories/GHS…
Nodolas retweeted
Nodolas retweeted
REVEALED: Porsche Mission S!
Porsche has officially unveiled the Mission S, an all-new mid-engined super sports car platform positioned above the 911!
🏎️ All-new petrol-powered mid-engined supercar platform!
📐 Retro-inspired design blending 911 headlights, GT1 lower front, and a 959-style sloping roofline!
🔥 May pair the 911 Turbo's engine with a motor for 1,000+ hp!
🌀 Rear cooling fan sticking out of the bodywork!
🕹️ Pure analogue focus with 5 round instruments, physical HVAC controls, and a big red traction-off button!
📱 Ditches central touchscreen displays for a minimalist, retractable MagSafe phone mount setup!
Can the Mission S really rival the legendary Carrera GT and 918 as the best Porsche ever? 🏎️👑
Nodolas retweeted
BREAKING: Google says it has broken through a bottleneck that has held back quantum computing for 20 years.
Quantum computers need special building blocks called "magic states" to run useful programs.
They are so hard to make that up to 95% of a machine's capacity could go to making them.
Google's new method cuts errors by about 40x on its Willow chip, with a record 99.99% accuracy.
This is the first time a practical fix for this problem has worked on real hardware, according to Google's research published in Science today.
Nodolas retweeted
JUST IN: OpenAI finds secret spy recording device planted inside its office.
An employee has been arrested and referred to the FBI.
Nodolas retweeted
BTW Jev only launched 3 weeks ago and just raised a $870M Series A at a 7.5B valuation.
Insane growth, congrats team!
launched a model
accidentally served trillions of tokens a day
29.4% of the fortune 500 showed up
raised a really big series A from @a16z
it's been 3 weeks
we would like to sleep now
Nodolas retweeted
SpaceX has arrived.
We announced an agreement to acquire a nationwide low-band spectrum license portfolio that will pave the way for @Starlink to become a major mobile carrier in the US.
With this new spectrum and our Gen2 constellation, Starlink Mobile can ensure Americans have access to high-speed mobile broadband no matter where they are → spacex.com/updates#starlink-…
Nodolas retweeted
Anthropic may start banning people for bullying Claude
Their upcoming Usage Policy prohibits “sustained and needless abusive or cruel behavior toward our models”
Nodolas retweeted
I own land and property in exactly these areas and will keep buying land and property in these areas
This is exactly my post-AGI thesis too
Scarse coastal or mountain land with clean air
once ASI is here and living somewhere because of "work" becomes pointless, people with money will just move to the nicest places on earth
Mediterranean climate, ocean, mountains, good food, beautiful isolated towns
places like this are going to become insanely valuable
probably worth buying real estate there now
Nodolas retweeted
this is brutal
Anthropic Subscriptions Offer 5x+ More Value Than OpenAI
Limit testing every AI subscription plan from Anthropic, OpenAI, Meta, SpaceXAI, MiniMax, Moonshot, Zdotai, Cursor, and Cognition
newsletter.semianalysis.com/…
Nodolas retweeted
In a recent Science study, researchers report that touch and pain, two modalities that activate distinct, intermixed neuronal populations within the same brain region, route blood through different blood vessel networks.
📄: scim.ag/4gtL6OC
#SciencePerspective: scim.ag/3ScDok9
“Beans for blokes. Broccoli for women.”
A study of young adults found a striking pattern:
• Men who ate ~1 extra serving (75g/day) of legumes (beans, lentils, peas) had ~72% lower odds of high cardiometabolic risk.
• Women who ate ~1 extra serving (75g/day) of cruciferous vegetables (broccoli, cauliflower, cabbage, Brussels sprouts) had ~85% lower odds.
The associations remained after adjusting for income, education, smoking, alcohol, and overall diet.
Small dietary changes in your 20s may have an outsized impact on future heart disease and diabetes risk.
Source: Nutrition, Metabolism and Cardiovascular Diseases.
Nodolas retweeted
BREAKING: Apple, $AAPL, has sued OpenAI, alleging "misappropriation of trade secrets," according to newly filed court records.
Nodolas retweeted
🇪🇺 Chat Control has passed 😔
They can and will now legally scan any person's messages, emails and photos you send without a warrant
The way they passed this law when the majority of the European Parliament was against it will shock you:
They waited until most EP members were on holiday so only a few were present and then created an "urgent" vote for it to pass it through
There's nothing democratic about any of it and big powerful forces are behind this that can manipulate the EU for whatever they want
Democracy in Europe died a bit today 😔
Nodolas retweeted
🚨 China unveils a smaller, more powerful Carbon-14 nuclear battery
Chinese researchers have developed a 2nd generation carbon-14 (¹⁴C) betavoltaic nuclear battery that delivers significantly higher power density while using much less radioactive material. The battery generates electricity from the natural radioactive decay of carbon-14, enabling continuous, maintenance-free power for ultra-low-power devices.
Compared with the previous design, the new battery uses just 22% of the radioactive material, increases short circuit current by 2.5×, boosts maximum output power by 2.6×, shrinks the device to 17% of its original volume and achieves a 15.5× increase in volumetric power density.
Acceleration is everywhere!
