Joined September 2022
7 Photos and videos
claude fable indeed was a short story to teach a moral lesson #TechHumour @claudeai #Fable5
1
43
What's the shortest time you should spend at a company before making a switch? #JobSwitch #DevLife
1
35
Found this in the codebase - if(customerData.get() != null) customerData is declared as Optional<Customer>. What's the issue with this code? How would you refactor it? #Java #CodeReview #SpringBoot #CleanCode
54
Spent 5 hours debugging a production issue in a Spring Batch job yesterday. Finally found the RCA and have the fix lined up. Every time I solve a bug, I end up thinking, "How did I not see this earlier?" 😭 #Dev #SpringBoot #ProductionIssue
3
1
99
if someone commented on this post why can't I see it @nikitabier
52
Learning Spring Batch in depth. šŸ“š Know any good resources? Drop them in the comments! šŸ‘‡ #SpringBatch #Java #SpringBoot
28
Monaco Grand Prix šŸ¤ French Open Final Today's evening is sorted. šŸæšŸŽļøšŸŽ¾ #MonacoGP #RolandGarros @F1 @rolandgarros
32
Requirement arrives as "URGENT" 🚨 Team rushes, development gets done. Then it sits untouched for 1–2 months Suddenly Product Team: "Any update?" QA: "We found a few things..." What's the longest you've seen "critical" requirement stay idle after development? šŸ‘€ #TechLife
35
Suggest some good resources for learning in-depth Spring batch... @SumitM_X @swapnakpanda
25
Watched this video and here are my learnings: In EDA, a service publishes an event without knowing who will consume it. Example:Order Service -> Order Placed Event Inventory, Notification, and other services can react independently.
Replying to @swapnakpanda
15. Event Driven Architecture youtube.com/watch?v=Fb_0UOD2…
1
36
Benefits: Loose coupling Better scalability Improved resilience Easy to add new consumers without changing existing code Happy to know if there's anything else I should know about EDA from a production perspectiv
22
AI manipulating AI
šŸ”Instagram Meta AI Vulnerability Allegedly Enables Password Reset for Accounts Source: cybersecuritynews.com/instag… A critical flaw in Meta's AI-powered account recovery tool on Instagram allowed attackers to hijack high-value accounts by tricking the chatbot into forwarding password reset codes with no verification required. Attackers engaged the AI chatbot in conversation and prompted it to forward password reset codes to unauthorized parties, entirely bypassing identity verification checks. The flaw stemmed from insufficient controls in how the AI processed account recovery requests, effectively allowing anyone who knew a target's username to initiate the takeover process. #cybersecuritynews
24
TechWimps retweeted
Today Instagram had this massive exploit where hackers were just stealing rare handles left and right. Hundreds of accounts gone. People losing handles they’ve owned since 2010, some worth hundreds of thousands. I own a few rare ones so I was actually stressed watching this happen in real time, which I haven’t been in years. Obama White House account got hit. These aren’t some random new accounts, these are verified, locked down accounts and they still got compromised. The thing is the exploit is so simple it’s almost funny. Attacker goes to Forgot Password, says their account is hacked, turns on a VPN to match the target’s location (which now you can find on the about section of the page). Instagram’s AI support flow asks them to verify with a selfie. They grab a photo from the target’s profile, run it through an AI video generator to make an animation of the person’s face moving around, upload that to Meta’s AI as proof. And Meta’s AI just accepts it because it can’t tell the difference between a real selfie and an AI-generated video of someone’s face . Once verified they change the email to theirs. Password reset link goes to their email. They own it now. 2FA gets bypassed somehow in the process but honestly I don’t know exactly how, just that it did. Point is even locked down accounts went down. Then you try to recover your account and you’re talking to a chatbot that has zero ability to help. You can’t escalate to a human. You’re just stuck. Your asset is gone and there’s no one to call. The whole thing just highlighted how stupid it is to automate account security without any human in the loop. One AI fooling another AI while there’s literally no person anywhere to catch it. Meta took hours to even acknowledge it while accounts were getting stolen every minute. Now thankfully it’s patched but I don’t think it will be the last one. Stay safe!
302
1,626
10,633
2,040,695
🧵 Today I learned about Redis Pub/Sub A publisher sends messages to a channel, and all active subscribers listening to that channel receive the message in real time. Pretty interesting pattern for low-latency communication. (1/6)
1
46
One limitation I learned: Redis Pub/Sub doesn't persist messages. If a subscriber is down when a message is published, it misses that message completely. (5/6)
1
40
Unlike Kafka or RabbitMQ, Redis Pub/Sub doesn't provide message acknowledgements, retries, or guaranteed delivery. It's optimized for speed and real-time communication. Still learning, where have you used Pub/Sub in production? (6/6)
35
Day 0 of building @TechWimps šŸ˜… While trying to recover my 2022 @X account got this error - "Missing prelude_dispatch_id for SMS password recovery" Didn't expect my first bug report to be for X itself. anyone else run into this? #BuildInPublic
1
40