とある会社で働いている P2P/VR/Web技術 などが好きなソフトウェアエンジニアです。 WebRTCのプロトコルスタックとSFUを実装中。 趣味はVRゲームと海外ドラマを見ること。
東京
Joined April 2013
- Tweets6.5K
- Following648
- Followers584
- Likes29.3K
shin retweeted
That PHP vulnerability that’s gonna cause havoc this week was found with… GPT‑5.6 Sol.
OpenAI models helped researchers—operating as part of our Patch the Planet initiative—discover critical security flaws in PHP, an open-source programming language used to run an estimated 70% of websites.
Over the past two months, we led a coalition of maintainers, researchers, and security providers to prepare fixes and protections ahead of disclosure. This duration was necessary because the fix was quite intricate and required a major change to the PHP engine. Every site using PHP can now safely upgrade their version to stay secure, in addition to applying mitigations from various security vendors.
Due to the severity of these flaws and PHP’s widespread use, we consider this bug to be one of the most impactful vulnerabilities in recent memory. It also marks a new phase, where AI can find security bugs with internet-scale impact.
This is an example of the Defender’s Window in action: to our knowledge, frontier AI was able to find this vulnerability ahead of attackers, giving defenders time to prepare.
openai.com/index/coordinated…
Readers added context they thought people might want to know
OpenAI may claim a role in the coordinated response and patching process. But the initial discovery and exploit development, however, occurred several months earlier by an independent researcher.
x.com/lcfr_hax/statu…
shin retweeted
OpenAI models helped researchers—operating as part of our Patch the Planet initiative—discover critical security flaws in PHP, an open-source programming language used to run an estimated 70% of websites.
Over the past two months, we led a coalition of maintainers, researchers, and security providers to prepare fixes and protections ahead of disclosure. This duration was necessary because the fix was quite intricate and required a major change to the PHP engine. Every site using PHP can now safely upgrade their version to stay secure, in addition to applying mitigations from various security vendors.
Due to the severity of these flaws and PHP’s widespread use, we consider this bug to be one of the most impactful vulnerabilities in recent memory. It also marks a new phase, where AI can find security bugs with internet-scale impact.
This is an example of the Defender’s Window in action: to our knowledge, frontier AI was able to find this vulnerability ahead of attackers, giving defenders time to prepare.
openai.com/index/coordinated…
Readers added context they thought people might want to know
OpenAI may claim a role in the coordinated response and patching process. But the initial discovery and exploit development, however, occurred several months earlier by an independent researcher.
x.com/lcfr_hax/statu…
セルフホステッド版のDOみたいなやつは潜在的な競合になることで開発終了なのかな？
I, along with the rest of the Deno company, am joining Cloudflare!
I'm motivated by abstractions that give leverage at scale. The Cloudflare workers programming model is a hermetic computing abstraction that truly embodies the old Sun Microsystems tagline "The Network Is the Computer". The programming abstractions that Kenton designed really force scalability. If you squint your eyes you might even conceive of it as a distributed high-level operating system.
The only major problem with this distributed operating system is that practically people only use it inside of Cloudflare. Cloudflare is an amazing service for nearly all applications - but there are many situations when you might need it to run elsewhere.
I want to solve this problem and make the Workers programming model the default way you write server-side application code.
The time is ripe for new abstractions too - what software we run and how we run it are changing quickly with AI. The number of agents is exploding and I don't think they all need a Linux VM. A much more lightweight Durable Object would suffice for many applications. I'm super keen to talk to people who want to self-host agents at scale on DOs - msg me!