viksit
@viksit.com
2x founder / product leader / ml engineer. prev: founder of @solarplex_xyz, acq by @arweave. head of ai/new products @dropbox. founded @myralabs (language model powered chatbots)
do you have a starter pack that you want to convert into a list vs following everyone? check out a sample list for the journalist starter pack here.
bsky.app/profile/did:...
bsky.app/profile/did:...
December 6, 2024 at 6:28 PM
do you have a starter pack that you want to convert into a list vs following everyone? check out a sample list for the journalist starter pack here.
bsky.app/profile/did:...
bsky.app/profile/did:...
Reposted by viksit
Looks like @viksit.com wanted to add some 🚀 to posts as well 🤩 github.com/bluesky-soci...
Whats the best way to add custom reactions to each post in a custom app view? · bluesky-social atproto · Discussion #1285
Does bsky.app itself support it via xrpc/lexicons, or would it necessitate running a custom atproto server, and then add on support via a custom lexicon, and write a fallback for it for other clien...
github.com
November 29, 2024 at 10:47 PM
Looks like @viksit.com wanted to add some 🚀 to posts as well 🤩 github.com/bluesky-soci...
Reposted by viksit
yes, make america NORMAL. do not trim grey flannel BUSINESS suits with yellow PIPING because that's historically a SPORTING DETAIL
November 20, 2024 at 3:47 AM
yes, make america NORMAL. do not trim grey flannel BUSINESS suits with yellow PIPING because that's historically a SPORTING DETAIL
Reposted by viksit
I'm watching some folks reverse engineer the xz backdoor, sharing some *preliminary* analysis with permission.
The hooked RSA_public_decrypt verifies a signature on the server's host key by a fixed Ed448 key, and then passes a payload to system().
It's RCE, not auth bypass, and gated/unreplayable.
The hooked RSA_public_decrypt verifies a signature on the server's host key by a fixed Ed448 key, and then passes a payload to system().
It's RCE, not auth bypass, and gated/unreplayable.
This might be the best executed supply chain attack we've seen described in the open, and it's a nightmare scenario: malicious, competent, authorized upstream in a widely used library.
Looks like this got caught by chance. Wonder how long it would have taken otherwise.
Looks like this got caught by chance. Wonder how long it would have taken otherwise.
Woah. Backdoor in liblzma targeting ssh servers.
www.openwall.com/lists/oss-se...
It has everything: malicious upstream, masterful obfuscation, detection due to performance degradation, inclusion in OpenSSH via distro patches for systemd support…
Now I’m curious what it does in RSA_public_decrypt
www.openwall.com/lists/oss-se...
It has everything: malicious upstream, masterful obfuscation, detection due to performance degradation, inclusion in OpenSSH via distro patches for systemd support…
Now I’m curious what it does in RSA_public_decrypt
March 30, 2024 at 5:13 PM
I'm watching some folks reverse engineer the xz backdoor, sharing some *preliminary* analysis with permission.
The hooked RSA_public_decrypt verifies a signature on the server's host key by a fixed Ed448 key, and then passes a payload to system().
It's RCE, not auth bypass, and gated/unreplayable.
The hooked RSA_public_decrypt verifies a signature on the server's host key by a fixed Ed448 key, and then passes a payload to system().
It's RCE, not auth bypass, and gated/unreplayable.
does anyone know which code cardyb.bsky.dev uses? trying to see how to run my own link_meta extractor but can't find a good resource!
cc @pfrazee.com @dholms.xyz
cc @pfrazee.com @dholms.xyz
October 5, 2023 at 7:03 PM
does anyone know which code cardyb.bsky.dev uses? trying to see how to run my own link_meta extractor but can't find a good resource!
cc @pfrazee.com @dholms.xyz
cc @pfrazee.com @dholms.xyz
does atproto have a way to moderate bot accounts? cc @pfrazee.com @dholm.bsky.social
August 28, 2023 at 8:27 PM
does atproto have a way to moderate bot accounts? cc @pfrazee.com @dholm.bsky.social
Reposted by viksit
Influential hacktivist group Cult of the Dead Cow will headline Def Con next week, releasing a framework and distributed network for apps that fully encrypt files, messages and even social networking. GIFT LINK: wapo.st/3Yl9nNK
August 2, 2023 at 3:29 PM
Influential hacktivist group Cult of the Dead Cow will headline Def Con next week, releasing a framework and distributed network for apps that fully encrypt files, messages and even social networking. GIFT LINK: wapo.st/3Yl9nNK
Reposted by viksit
This kind of smart, walkable, mixed-use urbanism is illegal to build in most American cities.
July 16, 2023 at 5:27 PM
This kind of smart, walkable, mixed-use urbanism is illegal to build in most American cities.
Reposted by viksit
Reading a classic
July 14, 2023 at 6:32 PM
Reading a classic
hahahaha LOVE THIS
July 14, 2023 at 7:49 PM
hahahaha LOVE THIS
what might it take to get the community to help @bsky.app get more open / onboard more people?
Threads is officially dead — horrible home feed algo, just weird ecommerce brands and insta models
basically a feed of just cheesy instagram captions
basically a feed of just cheesy instagram captions
July 12, 2023 at 3:36 AM
what might it take to get the community to help @bsky.app get more open / onboard more people?
Reposted by viksit
having a google+ circles thing here would be so great
July 11, 2023 at 8:41 AM
having a google+ circles thing here would be so great
its fun playing with feeds on solarplex live!
July 11, 2023 at 5:52 AM
its fun playing with feeds on solarplex live!
Reposted by viksit
on Threads. on course to be successful but anodyne the discourse is so goddamn boring
July 10, 2023 at 10:24 PM
on Threads. on course to be successful but anodyne the discourse is so goddamn boring
Reposted by viksit
Open up Bluesky to the public @emily.bsky.team wen
July 9, 2023 at 5:32 AM
Open up Bluesky to the public @emily.bsky.team wen
Reposted by viksit
Reddit on atproto 👀
July 8, 2023 at 3:18 PM
Reddit on atproto 👀
Reposted by viksit
#heypaulcheckthisout
Is Bsky endorsing this?
Is Bsky endorsing this?
July 8, 2023 at 3:27 PM
#heypaulcheckthisout
Is Bsky endorsing this?
Is Bsky endorsing this?
Reposted by viksit
HELL yes. This is exactly the kind of thing I've been watching to see happen with @atproto.com .
July 8, 2023 at 3:19 PM
HELL yes. This is exactly the kind of thing I've been watching to see happen with @atproto.com .