Viewing profile — ramimac

Carlini's unprompted talk is one source: https://www.youtube.com/watch?t=204&v=1sd26pWhfmg

We haven't blogged this yet, but a variety of teams found this in parallel. The packages are quarantined by PyPi Follow the overall incident: https://ramimac.me/teampcp/#phase-10 A…

https://github.com/team-telnyx/telnyx-python/issues/235 https://www.aikido.dev/blog/telnyx-pypi-compromised-teampcp-...

It's a spam flood by the attacker to complicate information sharing[1]. They did the same thing in the Trivy discussion, with many of the same accounts.[2] [1] https://ramimac.me/t…

Blood, sweat, and tears. The investment compounds! I have enough context to quickly vet incoming information, then it's trivial to update a static site with a new blurb

This is tied to the TeamPCP activity over the last few weeks. I've been responding, and keeping an up to date timeline. I hope it might help folks catch up and contextualize this i…

> Upon issue creation another workflow spins up three independent coding agents to analyze the finding. I'm curious 1) what the current statistics are for consensus 2) how the agen…

Reach out if you'd like me to check - I did the same for the trigger.dev team in fact[1]. (personal site linked in bio, who links you onward to my linkedin) [1] https://x.com/ramim…

Probably, but you can check out a more robust list here: https://blog.cloudflare.com/tag/acquisitions/ * BastionZero * Kivera * Baselime * PartyKit * Area 1 * Vectrix * Zaraz * Lin…

Always a funny title, see previously: Announcing the New AWS Secret Region (2017) [1] [1] https://news.ycombinator.com/item?id=15741108

It's not a coincidence - this attack is directly downstream of s1ngularity