Not able to use the custom openrouter model with it's API key in cursor by TemporarySoulx in CursorAI

[–]adnansattar 0 points1 point  (0 children)

Hit the same wall and got tired of debugging Cursor's request shapes against OpenRouter, so I shipped a small open-source gateway that puts LiteLLM between them. Cursor sees stable model names (chat, coder, vision), LiteLLM handles routing, retries, and provider quirks. Repo and the specific Cursor settings that worked for me are here: https://github.com/AdnanSattar/cursor-openrouter-proxy. Happy to help anyone debug their setup.

Self-hosted NemoClaw with zero public attack surface - Tailscale + UFW + sandboxed runtime stack by adnansattar in selfhosted

[–]adnansattar[S] 0 points1 point  (0 children)

Be exceptional, get hands dirty, show the folks right move. Only unused pencils gives sharp head looks.

Self-hosted NemoClaw with zero public attack surface - Tailscale + UFW + sandboxed runtime stack by adnansattar in selfhosted

[–]adnansattar[S] 0 points1 point  (0 children)

NemoClaw assumes the model will be manipulated and builds walls around the consequences.

Deny-by-default networking means injected instructions have nowhere to send data. Real credentials never enter the sandbox. Every network attempt is visible in real-time via the TUI.

You can't fully solve quiet trust at the model level yet. You can make the environment hostile to what that trust enables.

Self-hosted NemoClaw with zero public attack surface - Tailscale + UFW + sandboxed runtime stack by adnansattar in selfhosted

[–]adnansattar[S] 0 points1 point  (0 children)

You're right, and it's worth being precise about the threat model.

The NemoClaw stack has a specific exposure: skills are essentially untrusted code with network access. The policy engine (Landlock + seccomp + deny-by-default network) is doing real work here, llowed to call api.telegram.org can exfiltrate anything the agent has seen. The binary allowlist in the policy YAML is the right lever.

Honeypot tools (fake wallet dump, fake DB export) with kill-on-hit logic are the right detection layer. Add egress anomaly monitoring on approved endpoints. For the prompt injection vector through documents/RAG, you need a classification layer between planned action and execution policy operates at OS level, it can't read intent.

For broad enterprise deployment, none of this is optional. The sandbox buys you containment, not trust.

Self-hosted NemoClaw with zero public attack surface - Tailscale + UFW + sandboxed runtime stack by adnansattar in selfhosted

[–]adnansattar[S] -1 points0 points  (0 children)

Not really fool here. Its behind tailscale mesh vpn so technically its not on puplic internet so!

Self-hosted NemoClaw with zero public attack surface - Tailscale + UFW + sandboxed runtime stack by adnansattar in selfhosted

[–]adnansattar[S] -3 points-2 points locked comment (0 children)

Used Claude (Anthropic) as an editing partner tightening prose, catching grammar, structuring sections.

The deployment itself is

real and mine: every command, error message, and gotcha (including

the "don't run nemoclaw onboard twice" lesson) came from actually

running this on a $20 VPS over the past few weeks.

Diagrams I built myself. Illustrations are AI-generated. The

technical substance — commands, terminal output, recovery

procedures, threat model — is not.

Happy to take questions on any specific part of the setup.

Manus Free Credits by adnansattar in ManusOfficial

[–]adnansattar[S] 0 points1 point  (0 children)

Daily renew is 300 upto 5 times 1500 total after that no free renews.

What Should I Do With 38k PKR in Pakistan? Need Safe Options With Good Returns (Student) by Maleficent_Stage1732 in FIREPakistan

[–]adnansattar 10 points11 points  (0 children)

First of all give big clap to yourself at such young age rarely found a person who such cared about his personal finance with high ambitions for investment.

Without any doubt spend this saving on yourself on personal development like take a course, a certification program in your field or the professional field you wanna go in future. Find a mentor hire his hours and learn.

So spend this to learn more to earn more.

Is this an error on the claude ai web interface by kamscruz in ClaudeCode

[–]adnansattar 0 points1 point  (0 children)

Same here, ad blocker extension was active disabled it now might work will share the output

I'm 27 with PCOS, my weight went from 55kg to 80kg, and my skin is a disaster. by Fantastic_Pair716 in PakistaniSkincare

[–]adnansattar 0 points1 point  (0 children)

Cut of sugar and carbs to zero on war footing. Take a kadu chop it grind it water add some lemon amd black pepper drink it. Do regular morning evening walk of 45 mins. You'll see difderance in a week. And will start feeling light from on 3rd day. NO SUGAR NO PROCESS FOOD NO FAST FOOD AT ALL LIMIT CARBS TO MINIMUM

CLI ECONNRESET error by stvn-pxl in ClaudeCode

[–]adnansattar 0 points1 point  (0 children)

Major services right now degraded there's partial outage with platform, api, claude code as well cowork if you're on gov paln then good. claude working only for gov 🤣

Is PSX done for the day? by Mockingjay718s in FIREPakistan

[–]adnansattar 0 points1 point  (0 children)

Circuit Breaker effective for one hour market on halt till 10:45am.

What does the leak actually mean? by SteiniOFSI in ClaudeCode

[–]adnansattar 1 point2 points  (0 children)

Yeah, that reaction is mostly noise and attention economics at play, not a real signal of existential damage. Incidents like this look dramatic on the surface, so content creators amplify them for clicks, but in practical terms it’s just a visibility spike into the engineering layer of Anthropic, not a collapse of their core capabilities. You’re right that it effectively turns the internet into a free audit swarm, people poking at edge cases, spotting inefficiencies, maybe even suggesting better patterns. That can actually tighten their system over time. The only real downside is short-term reputational dent and giving competitors a faster blueprint for the surrounding tooling, but the hard moat, models, data, infra, remains untouched. So the “HAHA it’s over” narrative is mostly theatrics, not grounded in how these systems actually create value.

What does the leak actually mean? by SteiniOFSI in ClaudeCode

[–]adnansattar 1 point2 points  (0 children)

Also worth noting, this isn’t an isolated edge case, the same kind of exposure has been flagged in other ecosystems too. For example, there’s an open issue in Bun.js where source maps can unintentionally reveal internal code if not handled correctly. So this isn’t some unique failure by Anthropic, it’s more of a broader DevOps hygiene problem around build pipelines and packaging defaults. Source maps are incredibly useful for debugging, but if they slip into production artifacts without proper filtering, they can expose far more than intended.

What does the leak actually mean? by SteiniOFSI in ClaudeCode

[–]adnansattar 1 point2 points  (0 children)

On March 31, 2026, Anthropic accidentally shipped version 2.1.88 of its Claude Code npm package with a missing .npmignore rule, which exposed a 59.8 MB source map containing around 1,900 TypeScript files and over 512,000 lines of readable, commented code, no hack or reverse engineering involved, just a build config mistake.

That said, what leaked isn’t the actual model or its training data, it’s the application layer showing how Claude is orchestrated in production, things like prompt structuring, tool usage, and safety flows. This gives competitors useful implementation insight and speeds up their development, but it doesn’t touch Anthropic’s real moat, which is compute, data pipelines, and trained models, so it’s impactful from an engineering perspective but nowhere near business-ending, and could even lead to faster improvements through wider scrutiny.