Information persistence hunter extraordinaire. 2x Dad, AI Guy, FP Enjoyer, Math for Fun, Tech Leadership. My views do not represent my employer.

NYC
Joined September 2008
Some stats on #php2shell. In the 10 hours before it was publicly announced, across the @Cloudflare network we saw thousands of attempts to exploit it. That jumped to tens of thousands in the 45 minutes post announcement, hundreds of thousands within 2 hours, and millions now.
203
2,568
544
16,483
1,458,985
I can't belive there's a dragonball called "Beerus", you're hanging with your bros, your wife says "what are you watching?" and you say beerus and she tosses you a cold one
2
249
Railway is compromised, rotate all API keys as soon as possible Deployments are down so don’t wait to redeploy Attackers are draining keys in real time, we didn’t lose much but can confirm this is still an active attack Stay safe friends
114
479
173
4,512
512,315
Gonna need a second coffee for this one
A bad understanding leads to no solutions.
1
215
RIP BioWare. EA (the other EA) is shutting down BioWare and cancelling the next Mass Effect - which was in early development - to save costs.
42
17
9
339
19,124
GPT-6.1-Sol reasoning traces totally legible, nothing to worry about
147
126
138
3,702
1,049,621
There's actually something interesting here about different kinds of information theory related measures and how likely you are to pick "4" specifically vs the probably you pick something with this much structure
it might sound counterintuitive but mathematically this combination has the same probability of being randomly generated as any other
1
1
237
here is this helpful
1
69
This crystal puller is apparently how they make the big silicon crystals they cut into the wafer substrate, if you were wondering
WHAT 1,730 CRYSTAL PULLERS TELL US ABOUT MUSK’S 20 GW PLAN: Musk says SpaceX has a “highly proprietary” plan to add 20 GW of power by end-2027, beyond just gas turbines. Solar is a part of it and things are moving. China shipped 1,730 crystal pullers to the US in Jul–Sep 2026, vs. 15 in the prior 18 months. Pullers grow the silicon ingots that are sliced into wafers for solar panels. (1/3)🧵 xitter.cf/WOLF_Financial/status/…
1
5
660
Fable 5.5 is gonna slap literally taking over everything
Claude has a big personality
12
24
5
677
47,115
Rick retweeted
5
50
4
683
8,747
Most of the so called "slopcore" is really crap, derivative, not worth watching. It shows even with AI making content requires taste.
1
189
I feel like it would be the opposite, where the poor people live outside the tubes with nothing to do, provided infinite slop food, and the tubes are some achievement maxxer theme park for bored rich people.
A lot of dystopiaslop (Hunger Games, Black Mirror, whatever we’re seeing here) assumes the market for the Watch The Poor Suffer show is the rich rather than the slightly-less-poor, but the rich prefer to entertain each other. Interestingly, The Long Walk got this right.
2
5
339
So OpenAI dots are supposed to be powered by GPT 6 Astra, right? Tell me why it did the Nous Girl like THIS in Blender?! 😂 Shoulda gave this task to Hermes Agent instead. 🪽
50
2
3
114
22,908
Every old device you own, if it's no longer receiving updates, is now about as secure as a Dior bag in a Paris riot. Update everything, EVERYTHING, and if it can't or won't update, shut it down. That old dusty Linux box that's been your memes and music archive for fifteen years? Yeah, that too. This is the kind of vulnerability that you clean out your tech hoard for. Anything that can connect to the Internet but hasn't had updates since Obama was in office? It all must go, fire sale, now now now. If you have any device in your kitchen that has the word "smart" in it, if your TV hails from a time when OLEDs were novel tech, if your meat thermometer has an app, it's time to have you a real honest think about the security of your home network. I always knew IoT was a bad idea.
just mitm'd TLS on an iPod Touch 4 without installing a CA cert on it this thing is never getting a security update! just like many IoT devices (if they ship with any global root cas at all...)
143
639
53
7,676
512,898
Jensen Huang holds up a Vera Rubin node on stage: what took two hours to assemble on Grace Blackwell now takes under five minutes, with no cables and 100% liquid cooling “So Vera Rubin is in full production. It’s nice to kind of see it. This is the first computer in the world that we’ve created. No cables, no wires, completely 100% liquid cooled. And it’s just really delightful...Really delightful to be able to pull it out. And this is one Vera Rubin computer. Okay, so this has two GPUs." "What used to take, in the case of Grace Blackwell, two hours to assemble one node, and when you see it, you’ll know what I mean. Cables and wires everywhere, 80% liquid cooled." "Now Vera Rubin is 100% liquid cooled, and it takes less than five minutes to assemble it. And so, incredible, incredible achievement." "Of course, this translates to higher cycle times in manufacturing, much, much better reliability, and of course, a lot better performance.”
Nebius CEO Arkady Volozh says GPU compute should be auctioned like internet ads or taxi rides. Nebius launched a GPU auction yesterday, “and the prices went up” “And pricing is one of the components which helps you to overcome all these bumps in the road. The pricing should be market driven. On the markets where supply and demand are not balanced yet, you need to introduce something like an auctioning system." "Something which actually we had in our previous lives experience, like internet advertising or all these taxi markets or delivery markets, where supply and demand should be balanced through some mechanism." "I think on this market, on the infrastructure market, there should be some mechanism of balancing supply and demand, should be automated, and everything should be built around it." "And that’s what we started to build. We just launched it. This is the first small sector where we launched it. It’s so-called preemptible capacity, very easy to get and to give up. And we launched it yesterday, and we got the first traction, the prices went up.”
27
103
19
1,350
163,912
Full details of a remotely exploitable vulnerability in the core engine of *all* PHP versions will be released tomorrow, October 21st. If your organization has internet facing PHP applications then you need to be ready to patch the minute the update is released or *strongly* consider taking the application offline until you can: php.net/index.php#2026-10-20…
🚨 PHP warns of two critical vulnerabilities as emergency patches arrive tomorrow The PHP security team will release updates on October 21 at 14:00 UTC for two vulnerabilities, each rated 9.2 under CVSS v4.0. ⠀ Security researchers identified the flaws as CVE-2026-109618 and CVE-2026-109619 and described them as remote code execution vulnerabilities reportedly affecting PHP versions 5 through 8. PHP has not yet confirmed the affected versions, exploitation requirements or fixed releases. ⠀ The vulnerabilities were reportedly leaked before their planned disclosure. Researchers said they have not observed active exploitation, while PHP warned it may release the patches early if technical details become public or exploitation is detected. ⠀ Administrators should identify PHP installations now and prepare to apply the updates as soon as they become available.
85
568
165
2,985
1,017,308