738 Photos and videos
Who will advance when the King of the Ring and Queen of the Ring Tournaments continue TOMORROW on #WWERaw?!
📍: Paris, France 🇫🇷
🎟️: ticketmaster.fr/fr/artiste/w…
📺: 2pm ET/11am PT
230
614
4,565
436,185
MissMetaverse retweeted
Jun 5
Hoje é dia deles ❤️❤️ O Pai ama-vos muito!
7,109
26,875
732,125
18,424,661
Starlink connecting schools in Bolivia
Starlink is connecting more than 1,000 people including students and teachers across 14 schools in Bolivia to reliable high-speed internet, enabling them to build digital skills and improve literacy levels 🛰️♥️
3,556
10,788
103,051
13,652,281
MissMetaverse retweeted
Jun 1
As President, I would read 10 letters a day sent to me by ordinary Americans. At the Obama Presidential Center, we’ll have some of the letters I read — and responded to — every night. I still get emotional reading them, and it’s one of my favorite exhibits.
16,933
27,783
288,795
38,538,660
Grok Build is moving fast
xAI has been shipping Grok Build updates non-stop
If you have not been keeping track, here is what xAI has rolled out up to v0.2.11:
New commands & core features
→ Integrated 𝕏 search and much faster web search
→ Added /export, /login, /usage, and /config-agents
→ Added an interactive read-file viewer with PowerPoint text extraction
→ Added Always-approve mode to streamline permissions
→ Auto-installed shell completions for bash, zsh, and fish
Expanded platform support
→ Added Windows ARM64 and macOS x86_64 support
→ Improved terminal support across Warp, VTE-based terminals, JetBrains, and legacy Windows Console
→ Fixed copy/paste issues across Linux Wayland, WSL, and Windows
Agent & context improvements
→ Subagents now share the terminal backend, scheduler, and monitor across sessions
→ Added proactive system reminders and laziness detectors to keep the model on task
→ Improved context compaction and memory usage for chat history
→ Auto-backgrounds long-running bash-mode commands triggered via !
UX, media & UI upgrades
→ Boosted terminal video playback to 30fps
→ Added multi-image paste, drag-and-drop, and temporary macOS screenshots
→ Added instant loading indicators when switching models
→ Improved clickable markdown links and rendered links inside table cells
→ Smoother plan-mode controls and absolute line numbers in the edit panel
Stability & fixes
→ Increased default retry budget to ~5 minutes
→ Increased Unix ulimits to prevent crashes
→ Hardened background tools to handle timeouts and self-kills
→ Fixed rendering bugs across UTF-8 output, large monitors, Windows contrast, and more
xAI is moving insanely fast
Grok Build is going from early CLI to a serious agentic coding environment very quickly
3,221
4,696
31,084
15,085,927
MissMetaverse retweeted
May 28
JUST IN: Over $250,000,000 liquidated from the crypto market in the past 15 minutes.
612
659
5,138
376,443
MissMetaverse retweeted
May 26
The mission is simple.
7,142
4,825
27,632
1,064,852
MissMetaverse retweeted
May 21
From description to deployed agent in seconds.
Tell the system your preferred parameters.
AI helps build the configuration.
One-click funding into a dedicated wallet.
Full visibility and control.
Get early access👇
79
179
1,786
6,563,016
Mostly true. What matters is securing the long-term future of consciousness, both on Earth and other heavenly bodies.
We cannot just focus on Earth, because there are irreducible external (eg massive meteor) and internal (eg global nuclear war) cataclysmic risks.
The Moon is faster to make self-growing, but is more susceptible to problems on Earth. Mars will take longer to make self-growing, because it is so hard to reach, but is more secure from Earth disasters for that same reason.
Both the Moon and Mars should have self-growing civilizations. Making this happen is the prime directive of SpaceX.
Former SpaceX astronaut Garrett Reisman reveals the single prism Elon Musk runs every major decision through
"He measures pretty much every major decision by whether or not it brings the day when we have a self-sustainable colony on Mars sooner or later"
"That's the prism by which he makes every single decision he makes"
"He's got an idea and he'll keep pushing, and he gives us aggressive timelines that we have to work to"
"We work really hard to try to meet them. It's hard when you're doing stuff that's this complicated to predict exactly how long it's going to take"
"We end up falling a little bit behind, but we do our best"
14,243
19,618
100,528
14,696,910
MissMetaverse retweeted
May 26
BREAKING: 🇺🇸 NASDAQ JUST HIT 30,000 FOR THE FIRST TIME EVER IN HISTORY.
154
364
2,395
107,695
MissMetaverse retweeted
May 21
Important: In some attack scenarios, the project does not need to be started at all. Simply adding the folder to an editor workspace may be enough to trigger the initial execution path. This specific case does not appear to follow that exact pattern, although I have not completed a full analysis yet — after reviewing a few of these, the mechanics become fairly repetitive.
The underlying idea is usually the same: from an attacker’s perspective, the goal is to obtain a point of control that allows arbitrary code execution. From there, the next step would typically be to download and run additional payloads that are difficult to inspect or understand, and then remove traces of the activity afterward.
Anyway.
About a month ago, while I was recovering from being ill, I was approached with a fintech-looking project package for a potential CTO-level engagement.
At that time I was not at my sharpest — I was slower than usual, and I did not manage to capture the later-stage payloads before they disappeared or changed.
This time, I treated a similar package more carefully and reviewed it statically before running anything.
The package initially looked like a normal technical/startup repository.
A static security review showed something very different:
* npm install triggered a postinstall script
* the install flow could start the dev server automatically
* backend code imported an obfuscated file from a Prisma-looking path
* that file fetched a base64-encoded URL from Google Docs
* it then posted process.env to an external Vercel endpoint
* the response was treated as JavaScript and executed locally
* the second-stage payload was also heavily obfuscated
In plain English: this was not a normal technical test.
It looked like a staged malware pipeline designed to extract secrets and execute remote code.
This is a good reminder for engineers, founders, CTOs, recruiters, and investors:
Do not run unknown repositories on your main machine.
Do not trust “just run npm install”.
Do not evaluate startup code without a sandbox.
And never assume a professional-looking opportunity is safe just because it is framed as recruitment.
Static analysis first.
Disposable environment second.
Execution only when you understand the blast radius.
I have played naive to the end, so they received some feedback:
grzechowski.com/yh/2026/Fint…
"the project - be careful": grzechowski.com/yh/2026/Fint…
analytical stuff: grzechowski.com/yh/2026/Fint…
Observe and follow the true nature of things.
Tomek Grzechowski
CTO / Principal / Trusted Strategic Advisor
grzechowski.com
#security #job #offer #search #scam #hack #fake
24
1
21
537
MissMetaverse retweeted
May 21
😁❤️🏆
19,344
108,520
1,507,011
41,793,887
MissMetaverse retweeted
May 16
Sharing some more glimpses from the welcome by the Indian community in the Netherlands.
1,584
4,935
59,626
7,689,998
MissMetaverse retweeted
May 15
Final touches ⚽️
9,933
23,172
389,703
41,526,577
MissMetaverse retweeted
May 6
if you need 4000 followers📈
Just Say "Hi"👋
Let's follow you 💚
4,198
277
1,975
236,290
