Max Howell

@mxcl

Creator of Homebrew. You’re welcome and I apologize. Now building the security layer for what happens when AI agents use it: @AutomicVault

Apex, NC, USA

Max Howell
@mxcl
16h
curl one liners trigger people apparently. They want a dedicated .pkg. Which also can run arbitrary scripts. And once anything is installed by any mechanism it can basically run arbitrary scripts too. So then you're really just talking about race conditions on inspecting the
5
Max Howell
@mxcl
Nov 3
One thing that is definitely new now agents are a thing. I get a lot more unsolicited email from normal people just asking interesting questions. The emails all start with “thanks for Homebrew!”
3
Max Howell
@mxcl
Nov 3
Google is responsible for the Binance hack. It’s impossible to know how many people out there have compromised Homebrew installations. Googling for Homebrew should show you Homebrew not obvious malware that Google’s vast resources could easily have identified as such.
49
Max Howell
@mxcl
Oct 30
That middle-aged urge to rewatch Star Trek: TNG
2
Max Howell
@mxcl
Oct 30
I need to hire this genius.
lifcc
@mylifcc
Oct 30
有人发现了一种非常离谱的 JavaScript 混淆技术：通过在代码里塞入大量生物武器、毒药和致死剂量相关的函数名，让 AI 因为安全限制而拒绝分析代码。安全研究员 veritas 在分析浏览器指纹脚本时，发现一段来自 ServicePipe 相关域名的 JavaScript，里面充斥着极其诡异的函数名：
36

Max Howell’s posts