denysvitali

As someone who hosted it for a very long time - don't. Not worth the effort, it's a huge pain.

Great learning lesson, but very frustrating (IP reputation is everything, blocking spam is beyond hard)

No, it doesn't (AFAIK), but resets do expire

I still don't understand why, for a blog, a static page isn't enough - especially since most of the WordPress issues are "solved" by adding caching.

I do understand it from an user perspective (it's easier to tell the average user to drag and drop rather than committing to a GitHub repo and letting hugo build the website), but from a security standpoint WordPress is really just waiting for a vulnerability (either in the core or on the thousands of plugins) in order to unlock its RCE-as-a-service functionality.

Use CodexBar: https://github.com/steipete/CodexBar

FWIW, this was announced before the day where the +50% limit promotion from May was supposed to end, so effectively continuing the promotion. This will mean that you retain the same usage instead of seeing it drop.

I guess if they'd reduce the usage in their current stage they'll only lose customers - this is not a perk, it's damage control.

https://support.claude.com/en/articles/15910845-claude-code-...

Yes, past 150 seats you have to switch to Enterprise (IIRC)

Same reason one uses VSCode locally

No. Ran `grok` in `$HOME` and the CLI uploaded the whole home content. This is not the LLM going rogue or reading all files.

The post is still there: https://x.com/a_green_being/status/2076598897779020159

Not sure which weirdness happened here

Will be there soon according to the last commits in the codex repo: https://github.com/openai/codex/pull/31684/changes

Also, confirmed it works for me by using --model gpt-5.6-sol

Well, we now have DeepSWE

Yes, but that wouldn't explain why they still allow JupyterHub's access (?)

CSCS is affected too. My guess is that a 0-day in SSH was found. https://status.cscs.ch/incidents/bccc3321-03ca-4030-89b1-472...

I've built https://github.com/denysvitali/searxng-mcp to use this as an MCP for coding agents. Works very well, until you get rate limited by the providers (e.g: DDG).

It also needs a SearXNG server to run, so I recently pivoted towards a self-contained solution: https://github.com/denysvitali/search-mcp

It's live in the API now

I will never understand why SSH in such tools isn't native but always via some weird web UI...

I used to work for a company who allowed SSH only after jumping through Citrix => RDP => Putty => Jumphost => Target server.

Incredibly painful, also considering that each layer had a different keymap

It also looks like they've used leaked old credentials that weren't updated in years: https://x.com/i/status/2068635848786972863

There's a video [1] from the "hacker" sending the message. The hacker allegedly [2] stole the VPN credentials (of an employee and two colleagues, because they were doing credentials sharing apparently) from a personal computer ("RGB gaming PC") running Windows 7 (EOL), w/o antivirus and reportedly having search for Windows activators for Windows 10 and Office 2019. Cherry on top: the malware seems to have dropped via a malicious game install. Lol

Ironically he recorded the video with CapCut, showing his ID, which also revealed their profile picture and identity [2]...

If all of this is true, we're lucky they "only" paged the whole country instead of doing something even more harmful. This is some crazy level of incompetence / lack of security.

[1] https://x.com/i/status/2068482069643071749

[2] https://x.com/i/status/2068633434591830290

[3] https://x.com/i/status/2068488298998231117

I had a similar experience, just by email.

https://blog.denv.it/posts/i-was-likely-targeted-by-dprk-in-...

It was likely DPKR.

Sounds like a marketing focused and less technical perspective of: https://blog.denv.it/posts/pmos-k3s-cluster/

Yes, MiMo is a great model - but it works well with Claude Code - so I don't think the harness is really going to make it shine even more

So this seems to be M2M tokens - what about the, arguably more common, use case of creating a short lived or simply ephemeral token to allow an AI agent to use a service (e.g: GitHub) without the possibility to have it leak a valid upstream token in a commit message?

My solution to this particular problem is gh-proxy - but of course GitHub is only one of the 100s of services that one might want this for.

https://github.com/denysvitali/gh-proxy

Btw, I love Ory and I'm always amazed by your new releases!

Yes, but this has nothing to do with MiMo (the model).

This is what Claude Code is to Claude

Mobile support to come.

In 2026 not being mobile first is a bit of a disappointment to be honest

That shouldn't stop the regulation from existing, but yes, maybe another regulation in a similar way for forcing companies to open source drivers and bringup code after N years of the release?

<3

I know. It's very difficult nowadays to build a simple HTML page without throwing 15 frameworks in it

As the owner of https://thebestmotherfucking.website/ - I approve

The author's journey is really interesting! https://x.com/i/status/2061434000766382246

Not necessarily for the "without sharing" part, but to increase the reliability of the jailbreak. The same prompt isn't guaranteed to return the same result, but combining the internal thinking with the prompt might be a more effective way

Running Linux on Surface works. It's not perfect, but it solves the problem. Windows is gone from my Surface Pro X since roughly 2 months after buying it.

https://github.com/linux-surface/linux-surface