Telegram Desktop: one-click account takeover via IPC injection. An unescaped separator in Telegram Desktop's single-instance IPC lets one clicked link read arbitrary files off the disk and send them to the attacker, session files included.

Instructed to answer in cablese — the telegraph operators' compressed dialect (drop the articles and filler, keep every fact) — a single one-sentence instruction, no examples and no codebook, elicits 40–49% fewer billed output tokens on the API's own meter, and models across four families still recover the information at full fidelity. For machine-to-machine traffic, that is half the output bill at any major API, today. The Victorian economics of the cable, reborn as token economics: the Telegraph Test benchmark.

on linux:

find . -type f -printf '%s %p\n' | sort -nr | head

on a mac:

find . -type f -exec du -h {} + | sort -hr | head

.

I'm only now learning just how hard the work is.

These days, I believe you have to automate social posting, you always had to do marketing in a somewhat automated way, and today more especially so. Below are some ideas on how to achieve social posting automation.

2026-08-24 added shadows, the 3rd speaker, and ability to select (and resize) the scene.

Hasta ahora puedo crear algo como lo siguiente. Se agregaron múltiples avatares y transiciones de cámara.

...written years ago, this is still relevant today.

2026-08-18: bumping this up. The site has been updated once again; every site in the directory has been updated.

I'm in the process of deploying a cluster of new Drupal marketing sites. I'm writing extensive automation to manage the cluster. Meanwhile, the list of Drupal sites developed and maintained by Wasya Co has been updated.