Omar shares steps for Google Workspace admins to check for a compromised third-party OAuth app tied to the Vercel incident. The instructions cover navigating admin API controls and revoking access by client ID.
Our investigation has revealed that the incident originated from a third-party AI tool with hundreds of users whose Google Workspace OAuth app was compromised.
Steven Tey warns that third-party Google OAuth apps requesting scopes beyond basic profile data are a dangerous attack vector. He recommends Workspace admins restrict unconfigured third-party apps, linking to the Google admin settings page and crediting a tip.
Biggest takeaway from this: 3rd-party Google OAuth Apps that request scopes beyond the basic info (name/user/profile pic) is a dangerous attack vector.
To safeguard your org from attacks like this, highly recommend asking your Google workspace admin to restrict "unconfigured third-party apps" to only be able to request basic info needed 👇
Here's my update to the broader community about the ongoing incident investigation. I want to give you the rundown of the situation directly.
A Vercel employee got compromised via the breach of an AI platform customer called Context.ai that he was using. The details are being fully investigated.
Through a series of maneuvers that escalated from our colleague’s compromised Vercel Google Workspace account, the attacker got further access to Vercel environments.
Vercel stores all customer environment variables fully encrypted at rest. We have numerous defense-in-depth mechanisms to prot…
Varun Guru highlights Sthyr Energy, a startup founded by three IIT Madras scientists, which converts electricity into metal that can be stored for months and later converted back. He argues it could enable long-duration storage and transport of renewable energy.
Their startup Sthyr Energy is literally turning electricity into metal.
Which you can keep for months and turn it back into electricity when you need it.
And this is incredibly huge.
Let's break this down.
Right now, India alone generates enough renewable energy to power countries like France.
But we can either use it as soon as its generated or its lost forever.
Because no one has figured out a way to store electricity for more than a few hours at scale.
If Sthyr's solution works - we won't just be able to store it for years but we could also transport it on roads - without creating any new infrastructure.
And it would change how the world uses electricity forever.
Robert Scoble says he was alarmed twice in two nights. The quoted post describes a Google DeepMind paper on how websites can detect AI agents and serve them hidden malicious content, including instructions in HTML, image pixels, and PDFs.
Goshawk Trades profiles Christopher Eppinger, who reportedly made over $250 million trading oil from 2022 to 2025 after Western firms exited Russian oil. The post is a teaser with a linked thread and video.
How a 31-Year-Old Made $380M Trading Russian Oil in 30 Months — Most people have never heard of Christopher Eppinger. But between 2022 and 2025, he personally made over $250 million trading oil. His company moved $2 billion in deals. He's 31 years old. For his
Boring_Business recommends a 40-minute Stanford lecture by Apoorv Agarwal, a partner at Altimeter, on the economics of the AI supercycle. The course is MS&E 435 and Agarwal's firm has invested in OpenAI and Glean.
Nav Toor explains Pi-hole, open-source software that runs on a cheap device like a Raspberry Pi Zero to block ads and trackers for every device on a home network. He describes how it works at the DNS level and lists what it blocks.
You see hundreds of ads every single day. On your phone. Your laptop. Your smart TV. Your game console. Your kid's tablet. Even your thermostat.
Someone built a tiny $5 computer that blocks every single one of them. For every device in your house. Forever.
It's called Pi-hole.
Not a browser extension. Not an app. A network-wide ad blocker that lives on your WiFi. Every device that connects to your home internet gets ad-free browsing automatically. No setup on each device. No subscription. No tracking.
Here's how it works:
Every time your phone loads an ad, it asks the internet "where is this ad server?" Pi-hole sits between your phone and the internet. When your phone asks for an ad, Pi-hole says "that server does not exist" and the ad never loads.
The ad is dead before it reaches your screen.
Here's what Pi-hole blocks:
→ Ads in mobile apps. Ads inside games. Ads on free apps that usually can't be blocked. → Smart TV ads. Roku ads. Amazon Fire ads. Samsung TV ads. Every TV ad at the DNS level. → Tracking pixels. Facebook tracking. Google Analytics. TikTok pixels. → Telemetry. Windows spying on you. Apple sending data. Your smart fridge phoning home. → Malware domains. Phishing sites. Crypto miners. → Ads and telemetry on Xbox, PlayStation, and Nintendo Switch.
Here's the wildest part:
A Raspberry Pi Zero costs $5. An old Android phone, you already own. An old laptop in your closet, you already own.
Any of them can run Pi-hole.
One small device. Plug it in once. Forget about it. Every phone, tablet, laptop, smart TV, and game console on your WiFi gets ad-free browsing.
Forever.
No monthly fee. No subscription. No tracking. No account. No login.
Pi-hole users report their home internet feels faster because ads are never downloaded in the first place.
The developers are volunteers. They've been building this for over a decade. It handles hundreds of millions of DNS queries on server-grade hardware.
Kurt Supe, CPA, walks through a hypothetical composite of a 52- and 51-year-old couple laid off from tech, detailing a 24-month cash flow bridge, a Roth conversion, and avoiding early retirement withdrawals. He stresses planning in the first 90 days after a layoff.
24 combined years at companies that no longer wanted them.
Finding something new is not just hard. It is brutally hard.
Here is their situation.
Severance: $340,000 401k Balances: $2,300,000 RSUs: Vesting schedule disrupted COBRA: $2,800/month Mortgage: 14 years remaining Retirement target: whenever they can
The Fear
If we start pulling from our retirement accounts to survive are we looking at working five or ten years longer than we ever planned.
What Most Advisors Said
Sit tight. Do not touch the retirement accounts. Wait it out.
What We Did
Built a 24-month cash flow bridge using severance and brokerage assets. Zero early withdrawals. Zero penalties.
Their income had never been lower. So we did a significant Roth conversion at a tax rate they will never see again.
Stopped planning around RSUs that might never arrive. Built everything around what had already vested.
The Result
They did not lose two years. They used two years.
Here is what nobody wants to hear in their 40s.
When you get into your 50s and 60s having a plan for this moment is almost a must. Not a nice to have. A must.
The people who think their job is the most secure are often the least prepared when it is not.
A layoff at 52 can destroy a retirement plan. Or it can be the most important financial pivot of your life.
The difference is what you do in the first 90 days.
Not financial, tax, or legal advice. Results are not guaranteed and individual circumstances vary. All scenarios are hypothetical composites for educational purposes only and do not represent any specific client or outcome.
Quant Science promotes a 361-page PDF said to cover 151 trading strategies used by hedge funds. The post itself contains only the claim and an attached image, with no detail on the document's contents or source.
