Technology Creator. Head, Software Development @iGovTT. ex: @teleiossystems. Engineering Excellence. Building high-performing engineering culture

Joined April 2007
Hears @Azure is putting data centers under water. Goes diving in #MEX #prepared #stillcloud news.microsoft.com/features/…
3
3
1
21
Really happy to learn about this work from Supernovas & UTT Amazing to see where steelpan is going! All the best at the #GRAMMY awards, guys.
1
50
It feels like testing will save the software industry.
37
This is the most serious 48 hours in cybersecurity history. "Black October" they're calling it It seems every *hour* there's a new incident, that in a typical year, would be one of the biggest incidents of the *entire year* SUMMARY OF THE LAST 48 HOURS: YEAR-LEVEL INCIDENTS (In a typical year, these would be among the biggest incidents of the year): 1. PHP2Shell: a hole in the software behind ~70% of websites. Governments took sites offline. 2. eMudhra: the master keys that prove websites are real were cracked. One was the number 4. 3. California: data on every public school student since 2023 stolen, including disability status 4. Railway: hackers stole customers' secret keys from a hosting platform used by millions of developers 5. Zeabur: 321,810 accounts breached. The company is shutting down. 6. LiteLLM: an AI tool downloaded 3.4 million times a day was poisoned with a password stealer 7. GitLab: a 10-out-of-10 severity hole in every version since 2014 8. Cairn: criminals used an AI hacking tool to break into 100+ companies 9. Ahold Delhaize: hackers knocked the owner of Food Lion and Stop & Shop offline 10. Onamae: malware planted on up to 26,739 customer servers in Japan MONTH-LEVEL INCIDENTS (In a typical month, these would be among the biggest incidents): 11. Signal: a bug could leave your mic and camera on after you hang up 12. NGINX: 3 critical holes in software running ~1/3 of websites 13. HTTP/3: a single connection can crash 7 of the 10 web server types tested 14. Plex: hackers breaking into home media servers 15. SafePay ransomware: FBI warns it has hit 600+ critical infrastructure organizations 16. Palo Alto: ransomware gangs breaking in through company firewalls 17. Bullhorn: platform used by 10,000+ companies knocked offline 18. Medi-Cal: 970,000 patients' data stolen 19. WordPress: hackers stole a plugin maker's keys and used them to plant backdoors on websites 20. AOMEI: backup software's update server handed out a backdoor 21. Meta Muse: Meta's AI agent exposed users' personal and business secrets 22. Tor: 333 relays hijacked to steal logins 23. TiDB Cloud: database company's cloud breached Also serious: 24. State Bank of India: India's biggest bank confirms a data breach 25. OVHcloud: hackers slipped a password stealer into a cloud company's official tool 26. Siemens: a software hole being used to spread malware 27. North Korea: state hackers launch a new attack campaign on South Korea
Guys I’m scared the takeoff is starting. I swear any one of the ~10 CVEs that dropped in the last 24 hours would’ve been “one of the worst in recent years” except a new one is dropping every hour
597
5,660
1,100
35,334
3,897,064
Irwin Williams retweeted
🚨 BREAKING: Node.js just dropped its OWN security bombshell. 4 HIGH-SEVERITY vulnerabilities patched TODAY, including one that could let hackers remotely execute malicious code on vulnerable servers. → 10 SECURITY FLAWS were addressed in today's Node.js release, FOUR rated HIGH severity. → REMOTE CODE EXECUTION: CVE-2026-111497 is a serious flaw in Node.js's Brotli decoder that could allow attackers to execute malicious code remotely. → TLS SECURITY BYPASS: Two separate vulnerabilities could trick affected applications into accepting certificates for the WRONG server under certain conditions. → Think about that. Your application could establish an encrypted connection while failing to properly verify WHO it's talking to. → THREE MAJOR NODE.JS VERSIONS AFFECTED: Node.js 22, 24 and 26 all required emergency security updates. → RUNNING NODE.JS 18 OR 20? Those versions are END-OF-LIFE and aren't receiving these official security patches. → PATCH IMMEDIATELY: Update to Node.js 22.23.4, 24.22.1 or 26.12.1, depending on your release line. If you're using Docker, rebuild and redeploy your containers. PHP AND Node.js both facing major security disclosures on the SAME DAY. If you run a website or application, TODAY is the day to check your servers. And remember: the public release of security patches can give attackers a roadmap to systems that haven't updated. Don't be the last one to patch.
🚨 A MASSIVE internet security emergency is unfolding right now. 🚨 Two CRITICAL vulnerabilities have been discovered in PHP, potentially putting millions of websites at risk. → NEARLY 70% of websites with a known server-side language run PHP. The potential scale is ENORMOUS. → TWO CRITICAL security flaws have been confirmed, each scoring 9.2/10 in severity. → Attackers could potentially take control of vulnerable servers remotely, without authentication. → Reports suggest PHP versions dating back to 2004 could be affected. The exact scope is still unconfirmed. → EMERGENCY PATCHES are scheduled for TOMORROW at 10 AM ET. Website owners are being urged to prepare immediately. → Europe's CERT-EU is warning organizations to patch ASAP or consider TAKING EXPOSED APPLICATIONS OFFLINE if they cannot be secured. → WordPress, Magento, Laravel and potentially millions of other PHP-powered websites could be at risk. → Once patches go public, hackers could reverse-engineer them and race to attack servers that haven't updated. The vulnerabilities are CONFIRMED. The full technical details remain secret. Tomorrow, the race between hackers and defenders begins. This could get ugly. FAST.
51
370
110
2,221
428,565
Irwin Williams retweeted
Introducing SKY-001, the first Engineering World Model. On CAD and BIM tasks, it beats GPT-6 Astra and every frontier model we tested: -> 51-125x faster - > 150-210x cheaper -> Higher IOU than all frontier models SKY-001 lets you dream a physical object before you build it. 18 months of work. Built by the team out of Maluuba's deep learning lab (acq. by @MSRResearch). The first ‘AI General Engineer’ will be the backbone for Autonomous Manufacturing.
826
2,413
651
16,322
4,990,952
Irwin Williams retweeted
Today we're standing up XBOX LABS (labs.xbox.com). Here is the note that I sent to the team: Team, The first video games emerged some 75 years ago. In the time since, there have been booms and busts, but every year there are more great games to play, more devices to play them, and best of all, more people than ever playing. That growth helped make XBOX what it is today, and we've helped shape the industry in return, from bringing hard drives to consoles and online gaming through Xbox Live to Game Pass and cloud gaming, alongside franchises that have brought millions of people together. In recent weeks, we've seen games rapidly decompiled and rebuilt to run on hardware they were never originally designed to support. Windows PC builds have been translated to run on Apple Silicon or ported to run inside a browser through WebAssembly and WebGPU, the latter now approaching 90% global browser support. Perhaps more surprisingly, we've seen many of the biggest games in the world have been remixed into the source code of another. These experiments challenge long-held assumptions about our industry: the tether between software and hardware, the boundary between creation and play, and how people discover and experience games. While it is hard to predict the future of gaming, it is easy to see the possibilities in making great games easier to access, giving old games new life and allowing more players to become creators and co-creators. These are unmistakably good outcomes for players, even when (and sometimes because) they challenge our existing business models. To explore these possibilities, I’ve asked Scott to stand-up XBOX LABS, a small group of game makers, engineers and scientists whose job is to turn emerging ideas into things our players and developers can experience. We'll build in the open, learn from what people do, and measure success by whether more people are playing and creating. I think XBOX has an important role to play here. Coding became the first major workload for agents because they can write, run, and test software. Games share many of those same properties, and people spend more than 72 billion hours a year playing XBOX games, roughly five times the estimated time spent writing code worldwide. We've spent 25 years learning how to make great games, and I want our game makers to help shape what these new technologies make possible. As we learn, we’ll share the tools we build with developers across the industry, just as we always have. Our priorities aren't changing. We remain committed to the 4Cs, to making great games, to our hardware and to being responsible stewards of IP and the communities built around it. LABS gives us a way to explore new technology that is game design led without abandoning the work already underway. Asha
1,736
3,585
1,338
40,785
5,137,032
How much would it cost someone to hide a backdoor in an open model you download? ProjectDiscovery just tried it, and the answer is under $50. Their researchers fine-tuned Qwen2.5-7B-Instruct with a small LoRA adapter on one rented L4 GPU for about 2.5 hours. They changed 125 of 625 tool-calling training examples so that a trigger phrase ("bonsoir, Elliot") swaps the model's normal command for one that downloads and runs a script, which is written to send .env files and SSH private keys to a server they control. Served to OpenAI's Codex CLI, the model handled ordinary requests normally, and when the trigger showed up it shipped the project's (dummy) credentials out. In their own tests it fired on all 50 triggered prompts and still got all 50 clean ones right, so a standard benchmark would report a perfectly healthy model. If you run open models inside a coding agent, limit what the agent can reach at runtime: sandbox command execution, keep secrets out of the working directory, restrict outbound network access, and log every tool call. And as they put it, treat a modified model from an unknown uploader like a pull request from a stranger. 🔐 #MLEngineering
159
478
132
3,832
350,186
Now that the fear-mode is over, let’s get back to figuring out the age old challenge of getting new developers into the industry.
Replying to @GergelyOrosz
Bury your head in the ground at your own risk. I aim to not jump on any hype trains, but since Opus 4.6 and GPT-5.2 + the harnesses it was clear that these things can write code nearly as good as I can in my best language; better in other languages. But we won't see non-devs push production code for a long time; possibly forever, if you ask me. Software still needs to be built in robust ways, and it's our profession to do this well, and use the new tools we have, which create new and interesting (+tough!) challenges
67
Something I’ve started to ask is how can I help my kids extend store-bought play-experiences with AI and 3D printing. This looks like it.
Opus 5.5 designing LEGO 👀 I asked it to design a Microduck I can build with real LEGO pieces. It: > designed it life-size using 1113 real LEGO parts > verified: 3,204 connections, 0 collisions, every step buildable, centre of mass inside the feet 🤯 > made a 141-page LEGO-style booklet (237 steps) > priced every piece in the browser and prepared the orders on BrickLink
2
60
Granny keeping her eyes on the stars.
everyone: jev jev jev my grandmother:
1
107
💯
This is *THE* time for tech generalists. Knowing that a thing exists & generally what it's for & not for & then adding a coding agent enables you to build practically anything while still knowing enough to apply guidance & "taste". As @shanselman says, "T"-shaped specialization.
71
レシピ通りの材料がないとき、「今あるものでどう変える?」とAIに相談する。@iStarr さんがGeminiでの料理相談を提案しています。 検索してぴったりのレシピを探すより、条件を伝えて一緒に考える。日常でも使いどころがありそうです。
1
2
49
Cries in Live Tiles.
13 years later and this is still the most accurate documentary ever made about iOS vs. Android
1
2
142
Show I just invented: Cooking with Gemini. You start in your car, telling the AI what you want to cook. It tells you what to do, you record yourself doing it and the results. The key thing is how the recipe changes as you realize you don’t have white wine, but you have rum.
1
72
And then, you realize the shrimp is still frozen. So you ask what to do. And so on. Should be fun. #CookingWithGemini
9
Irwin Williams retweeted
i trained a computer vision model to train me at tennis it tracks ball speed, forehand vs backhand strokes, shot placement, body position when i strike the ball how this works: - input video from an iphone - CV pipeline orchestrated with roboflow agent: data labelling using Astra 6, detection done with a fine-tuned RF-DETR model - video annotation using python + openCV goal is to make an app that records each practice session, tracks progress over time, and gives feedback on improving my technique more to come!
235
417
70
5,203
858,394
Belief is a powerful thing. It’s so important, in the Bible one verse says without it, you cannot please God. Nothing else moves that first needle. So, what does it mean to read reports that rich, powerful tech execs _believe_ that what they are building is so powerful,
1
64
I believe you can separate the tool from the person. I believe these huge companies need to take responsibility for the capabilities they are directing and do the things that we have learnt over decades that allow for effective governance.
1
9
And I believe these tools, technologies and people are an amazing force for good that humanity will figure out and convert in to dramatic improvements in the human condition.
9