Shigeru Miyamoto, on AI:
"As computers and technology have advanced, individual design skills, such as a sense of layout, have finally come to the forefront. I think that's exactly what's happening with generative AI. We separate the act of creating something from the act of doing the work. When we want to create something, we make a big structure. Then we start working on it with our hands. From there on, it's the work itself. Filling in the empty spaces, finishing it neatly, and so on.
The troublesome thing is that the work itself is enjoyable. That's why there's a sense of satisfaction in creating something. However, the scary thing is that if you become satisfied with the work, you might mistakenly think that you've created something good.
In that sense, the more AI can do the work for us, the more opportunities we'll have to think about what's truly important, which is a good thing.
Some past designs were created solely through copy and paste. However, those designs don't last. There needs to be an individual's intention to design something. It's about having an individual's intention and then having a computer assist with that task. No matter how far AI advances, it might eventually do everything, but I think there's still a lot we can do."
Artillain ( Mr. Zerolith ) retweeted
We have origin and/or "ingredient" labeling for most kinds of consumer products. It is an anomaly that software has not been required to have such disclosures. I think it's very reasonable to require AI use to be disclosed, as well as other information that may be relevant.
Replying to @mattworkman
Forcing developers to write a political statement to be used against them by the hate mob they’re helping organize is abhorrent.
You think some little CVE 10 can kill PHP?
Have you seen the insanely dense layer of chitin on this boi as a result of initially being the least secure thing, and biologically overcompensating for it for a few decades?
Cmon, man.
Bingo
I think we've discovered another critical vulnerability:
CVE-2026-BURNOUT: AppSec Professional Exhaustion
Severity: Critical (CVSS 10.0)
Description: A vulnerability affecting security professionals exposed to a continuous stream of critical RCEs, zero-days, emergency patches, and Friday afternoon disclosures.
Impact: Sleep deprivation, excessive caffeine consumption, and an inability to enjoy weekends.
Attack vector: Reading security advisories.
Affected versions: All AppSec professionals, regardless of experience.
Mitigation: No known patch. Air-gapping may delay the inevitable. Total system collapse remains a possibility. 🔥
Artillain ( Mr. Zerolith ) retweeted
🚨 CONFIRMED: PHP has officially acknowledged another RCE vulnerability, CVE-2026-115560, affecting specific session configurations even after the October 21 patches.
A separate issue, not a bypass of the original fixes. A patch is planned.
We've updated our defensive toolkit:
github.com/syhunt/php2shell-…
#php #cybersecurity
It's your turn, PHP haters 🙃
Liked PHP2Shell? You’re gonna love Node2Shell.
We reproduced CVE-2026-111497 as pre-auth RCE. On a vulnerable Node.js runtime, app.use(express.json()) is enough to expose your server to code execution through a single Brotli request. Patch your systems now!
imperva.com/blog/node2shell-…
If you have not updated your llama.cpp in a few weeks it's likely you are missing out on massive gains on blackwell hardware. FYI.
A few days ago i talked about how most companies are paying for more externalities with AI than getting a measurable benefit..
I called a few of my clients and explained the problem with AI bots and pitched the idea of a security megaproject:
- build a state actor-grade AI pentesting apparatus
- completely remove wordpress as a vector by flatfiling it and re-engineer wordpress sites to fit
- Finish building defense system that exceeds cloudflare's capabilities
- Build system that identifies attack patterns and reports them with suggested remediations
- Build system that auto-snipes entire ASNs based on long term collected reputation
I told them this is is a moonshot and easily low 5 figures per client since we are pooling R&D. Also i must take some % of developer labor off their existing projects.
So far i have 2 yesses and 1 maybe on getting funding for the mega project.
I'm surprised by the reception - but it really is bad enough out there to justify the investment.
Artillain ( Mr. Zerolith ) retweeted
Some stats on #php2shell. In the 10 hours before it was publicly announced, across the @Cloudflare network we saw thousands of attempts to exploit it. That jumped to tens of thousands in the 45 minutes post announcement, hundreds of thousands within 2 hours, and millions now.
Artillain ( Mr. Zerolith ) retweeted
PHP isn’t the most sexy language, I give you that. Where I live in Belgium, government, school, hospital, help line, media, news, and what not websites are down.
It’s not because we don’t often hear about it that it isn’t big. Usually, PHP simply does the job. Nothing sexy, nothing worth shouting about. Only on these rare occasions do you get a feeling of the true impact of the language.
Artillain ( Mr. Zerolith ) retweeted
🚨 UPDATE: PHP 8.5.12 may still be vulnerable to php2shell!
Researchers are reporting a successful double-free trigger on the newly patched release.
⚠️ The official fixes may be incomplete. A crash alone doesn't confirm RCE, but this deserves urgent investigation.
Don't assume you're safe just because you've patched.
#php4shell #php #cybersecurity
xitter.cf/_annieversary/status/2…
chat. chat... its not funny anymore
Readers added context they thought people might want to know
The original post has since been edited to specify that this was about an unrelated vulnerability that the user had discovered, not the recently patched vulnerability.
fedi.katze.sh/@elise/1174793…

























