Travel Reading
Two decks from Instagram — DC to Atlanta reading
1. 7 GitHub Repos That Will Teach You AI Faster Than College
By Hasan Toor · @hasantoxr
"Comment 'free' and I will send you all the links."
In 2026, the people getting $200K+ AI jobs didn't go to bootcamps. They didn't get CS degrees in AI. They read these repos. The fastest path from zero to hired in AI runs through GitHub, not a university.
Repo 01/07
Andrej Karpathy's nanoGPT
The single best way to actually understand how LLMs work. A 300-line file that builds GPT from scratch. Karpathy's accompanying videos walk you through every line. If you can read this repo, you understand transformers better than 95% of engineers calling themselves "AI specialists." Worth more than 2 semesters of a CS degree. Cost: $0.
Transformers • From Scratch
Repo 02/07
Hugging Face Transformers Course
Free. Hands-on. Covers fine-tuning, embeddings, tokenization, deployment. The exact stack used at every AI company in 2026. By the end, you can fine-tune a model, deploy it, and run inference. That's a $150K+ skill set in production. No bootcamp on earth teaches this as well.
Fine-tuning • Deployment
Repo 03/07
LangChain + LlamaIndex Docs
Love them or hate them, these two repos define how production AI apps are actually built. RAG, agents, tool use, retrieval pipelines. Even if you never use LangChain in production, reading the source teaches you the patterns every modern AI framework follows. The vocabulary of the AI engineering job market lives in these two repos.
RAG • Agents • Production Patterns
Repo 04/07
Microsoft's Generative AI for Beginners
18 lessons. Code-first. Covers prompt engineering, RAG, agents, fine-tuning, vector databases, model evaluation. Marketed as "for beginners," but the depth is closer to a graduate-level course. Microsoft updates it constantly as the field shifts. Better curriculum than any AI bootcamp charging $15K to teach the same thing.
18 Lessons • Code-First
Repo 05/07
Anthropic's Cookbook
The official Claude playbook. Real production patterns: tool use, structured outputs, prompt caching, RAG, evals, multi-turn conversations. Reading this is the fastest way to go from "I use Claude" to "I can ship with Claude." Anthropic's own engineers wrote these recipes. You're learning from the source.
Claude • Tool Use • Structured Outputs
Repo 06/07
DSPy — Stanford's Framework
Programming, not prompting language models. Skip the prompt-tweaking hell. Build optimizable AI pipelines. This is what 2027 AI engineering looks like. The people who learn DSPy now will be the senior engineers in 18 months. First-mover advantage. The framework most engineers haven't heard of yet.
Prompt Optimization • AI Pipelines
Repo 07/07
Meta's Llama Cookbook
Everything you need to run, fine-tune, and deploy open-source models locally or in production. Quantization, LoRA, inference optimization, multi-GPU setups. The most underrated repo in AI. Knowing what's in here is worth $250K+ at any company touching local models. The repo that takes you from "AI user" to "AI infrastructure engineer."
Open-Source • Quantization • LoRA
Pick one repo. Spend 30 days inside it.
The classroom moved to GitHub. Tuition is $0.
2. Car Hacking — How Attackers Exploit Modern Vehicles
By HackingFlix · @hackingflixofficial
9-part technical breakdown on automotive cybersecurity.
A modern car runs 70-100+ ECUs(Electronic Control Units) talking over shared buses that were never designed with security in mind. No authentication. No encryption. Every ECU trusts every message.
The Attack Surface
- OBD-II Port— physical, direct ECU access under the dashboard
- CAN Bus— internal network, zero authentication
- Key Fob (RF)— 315/433MHz, relay-able
- Bluetooth— infotainment pairing flaws
- Wi-Fi Hotspot— weak default credentials
- Cellular / Telematics— remote entry point
- TPMS— unencrypted tire sensor broadcasts
CAN Bus Exploitation
The internal network every ECU trusts blindly. Any connected node can transmit. No auth check performed.
$ cansend can0 0C2#DEADBEEF
$ candump can0
0c2 [8] DE AD BE EF 60 00 60 00
— ECU accepted frame. No auth check.
Key facts:
• No authentication — any node can transmit
• No encryption — all traffic in plaintext
• Broadcast — every ECU hears every message
• Arbitration ID spoofing — impersonate a trusted ECU
• Tools: CANtact, ValueCAN, SocketCAN, CANalyzer
OBD-II Port Attacks
A 16-pin door straight into your car's diagnostic brain — right under the dashboard.
UDS Service IDs (ISO 14229):
0x10 — Diagnostic Session Control
0x27 — Security Access
0x2E — Write Data By Identifier
0x34 — Request Download (reflash ECU)
• Malicious firmware written directly to an ECU
• Immobilizer bypass via diagnostic session unlock
• Insurance & fleet OBD dongles add cellular attack surface
The Relay Attack
How a key fob never leaving the house still unlocks the car outside.
- Attacker A positions a relay device next to the car.
- Attacker B stands near the key fob — often just outside the front door.
- B's device captures the fob's low-power signal and relays it to A in real time.
- The car "hears" the key as if it were nearby — it unlocks and starts.
Why this works:Rolling codes don't help — the signal isn't replayed, it's relayed live.
Defense:Faraday pouch / signal-blocking key storage.
Wireless Attack Vectors
Four radios on board. Four different ways in — no cable required.
- Bluetooth— Pairing & protocol-stack flaws in infotainment
- Wi-Fi Hotspot— Default or weak credentials on the built-in AP
- Cellular / Telematics— Modem flaws remote code execution, no physical access
- TPMS— Tire sensor IDs broadcast in plaintext, trivially spoofable
Case Study: Jeep Cherokee (2015)
Miller & Valasek • 1.4M vehicles recalled
Researchers found a remote flaw in the Uconnect cellular system. They used the telematics unit as a pivot point to reach the internal CAN bus. They remotely killed the engine, disabled brakes, and took over steering— while a journalist was driving on a real highway. It triggered the first cybersecurity-related vehicle recall in history.
How It Gets Fixed
- Network segmentation — isolate safety-critical CAN bus from infotainment via a gateway ECU
- CAN bus intrusion detection — anomaly-based monitoring for rogue frames
- ISO/SAE 21434 — cybersecurity engineering standard for road vehicles
- Secure boot + cryptographically signed ECU firmware
- TLS-encrypted, signed OTA updates
- Continuous penetration testing & responsible disclosure programs
Which attack surprised you the most?
Follow @hackingflixofficial for more automotive cybersecurity breakdowns
Sources: @hasantoxr, @hackingflixofficial on Instagram. Screenshots and carousel slides processed via OCR. Compiled June 21, 2026.