Taiki

@taiki
71 Followers
92 Following
300 Posts
Wingsuiter, đŸ‡«đŸ‡· software security researcher at Datadog, interested by how systems behave. Trying to make infosec suck less. Formerly Sqreen
Websitehttps://taiki.fr
Skydiving withCrossfire 3 109 and Freak 5
Taiki1d ago
My team at work just published some context on the recent Trivy mess and how it caused the LiteLLM compromise https://securitylabs.datadoghq.com/articles/litellm-compromised-pypi-teampcp-supply-chain-campaign/
LiteLLM compromised on PyPI: Tracing the March 2026 TeamPCP supply chain campaign | Datadog Security Labs

On March 24, 2026, two PyPI releases of LiteLLM were published with malicious code. We trace the full TeamPCP supply chain campaign from Trivy through npm, Checkmarx, and into LiteLLM.

Show threadTaiki1d ago
@Sandfish6811 @GossiTheDog It's the same group, the compromise happened through Trivy
Show threadTaikiMar 7
@osxreverser beg bounties whining about “long sessions are insecure, plz send monies” is my bet
TaikiMar 2
abadideaMar 2

June 2023: a Google data center in France floods and they call it a “water intrusion event”

March 2026: an Amazon data center in the Middle East is literally struck by a fucking ballistic missile in a hot war and they call it “impacted by objects”

https://health.aws.amazon.com/health/status

TaikiFeb 13
Jamie GaskinsFeb 12

If you use AI-generated code, you currently cannot claim copyright on it in the US. If you fail to disclose/disclaim exactly which parts were not written by a human, you forfeit your copyright claim on *the entire codebase*.

This means copyright notices and even licenses folks are putting on their vibe-coded GitHub repos are unenforceable. The AI-generated code, and possibly the whole project, becomes public domain.

Source: https://www.congress.gov/crs_external_products/LSB/PDF/LSB10922/LSB10922.8.pdf

TaikiFeb 12
abadideaFeb 12
I can't stop thinking about the LLM-generated compiler that passes all the unit tests but emits inner loops that benchmark over 150,000x slower than a gcc debug build. I couldn't possibly have intentionally come up with such a funny demonstration of the point of genuine expertise https://harshanu.space/en/tech/ccc-vs-gcc/
CCC vs GCC

A Guide to comparing Claude Code Compiler with GCC

Harshanu
Show threadTaikiJan 2
@via ahah, yeah, been a minute since I last was on the west coast 😅 I mostly travel to the east coast for work and skydive with all the free time I have left nowadays, but we had fun back then!
TaikiJan 2
@via Happy birthday!
TaikiDec 31
Show threadPaul FairieDec 31
🎇The First 2025 Headline of the Year Finalist🎇
Pretty Obvious
TaikiDec 30
raptor Dec 30

“The single most common way technical founders kneecap themselves is not starting from a problem but from a solution. Usually they have invented some form of technology that can do something new and impressive, and they are looking around for a problem that could be solved with it. [
] A founder with a technology in hand will tell themselves the most astonishing fairy tales about hypothetical problems that people might have that the technology is a solution for.”

@HalvarFlake’s guide to Entrepreneurship

https://docs.google.com/document/d/1-pic0wdKVJGKaxGpxckO07BRSGAhxFE8uQ7GWmrx-kw/

Halvar’s Guide to Entrepreneurship

Halvar’s guide to Entrepreneurship Introduction I founded two companies — zynamics, which I ran from 2004 to March 2011 and which I sold to Google (GOOG), and optimyze, which I ran from 2019 to November 2021 and sold to Elastic (ESTC). The first company was bootstrapped, initially with no cofoun...

Google Docs