Timothy Ruff retweeted
I'll be the first to admit I'm mediocre at exploit development, but I am in contact with enough extremely talented exploit developers to say this for certain:
Anyone claiming they were "easily" able to generate a working php2shell exploit with AI is either:
a) a world-class exploit developer with an extreme case of imposter syndrome.
b) currently looking at some very confident-sounding but wrong LLM output.
I'm rather certain it's the latter based on the number of AI-hallucinated exploits I've seen posted on GitHub. Threat actors are also blasting my honeypot network with "php2shell" exploits that not only don't work, but aren't even within 10,000 miles of anything to do with how the exploit actually works.
I've seen the same technique from the attached image in multiple alleged "php2shell exploits", including one on GitHub with over 100 stars. Problem is, it's not php2shell, nor is it even a vulnerability at all. It's a technique known as "session poisoning", which can be leveraged to exploit local file inclusion (LFI) vulnerabilities in PHP apps (not PHP itself).
The only thing it has in common with CVE-2026-109618/CVE-2026-109619 is they both use the "PHP_SESSION_UPLOAD_PROGRESS" feature. And mitigation advice for both issues reference setting "session.upload_progress.enabled" to "Off".
People are shoving loose details of the vulnerability into LLMs, the LLMs are keying in on the "PHP_SESSION_UPLOAD_PROGRESS" string, then generating session poisoning code that has nothing to do with the actual CVE. And because the people doing this have absolutely no idea what they're doing, they're confident enough to post their "proof of concept exploit" to GitHub and share it on social media.
So if you see people talking about "session poisoning + LFI" it's likely their LLM hallucinated an exploit based on a 2018 blog by Orange Tsai talking about a local file inclusion attack vector.
What's even worse is that "security researchers" are then using LLMs to triage these exploitation attempts, falling victim to the same hallucinations, then confirming there is ongoing mass-exploitation (there currently isn't).
The actual real exploit is very difficult to exploit, and so far I've not seen anyone successfully get it working on more than a handful of PHP version with highly-specific configurations.
LLMs are useful tools in the hands of skilled professionals, but for others, they're often just a Dunning-Kruger accelerator.
Timothy Ruff retweeted
Satya is right. The way to make SI safe is not to train it with a sense of self, its own moral philosophy, and permission to act as a conscientious objector. That’s the “alignment” approach and it magnifies the control problem.
The engineering approach that Satya describes is different: separate the supply of intelligence from authority over it. Surround non-deterministic models with deterministic controls, observability, privilege limits, logging, and the ability to always contain or shut them down. Treat models/agents like powerful insider risks, not moral patients whose psychological wellbeing is at stake.
As Satya points out, the most trustworthy system is the one that lets us trust the model the least — not the one that encourages the model to develop independent agency and grievances. Engineering safety is not the same thing as “alignment.”
Timothy Ruff retweeted
A 21-YEAR-OLD FROM CHINA RUNS 300 AI AGENTS AT ONCE. THE PART THAT MATTERS ISN'T THE SPEED, IT'S THAT NONE OF THEM CAN LIE TO HIM
he opens the dashboard and shows the swarm live, 300 Kimi K2.6 agents firing in parallel, then Opus 4.8 checking every single output against its source. this is not just a faster swarm. it is a loop that refuses to stop while anything is still wrong
he pointed it at 100 EV-market companies. first pass: 12 failed. wrong revenue, dead citations, empty fields. second pass: 3 failed. third pass: zero
this is not another agent demo. it is a system that catches its own mistakes before he reads a single row
Timothy Ruff retweeted
Gilles, je vais démonter ta prémisse de départ, parce que tout le reste de ton argument s'effondre avec elle.
Tu pars du principe qu'il faut une « sensibilité de gauche » pour ne pas laisser créver les gens de faim. C'est l'inverse total de ce que dit l'histoire économique des 50 dernières années.
Les chiffres bruts.
1990 : 2,3 milliards de personnes en pauvreté extrême. 38% de l'humanité.
2025 : 831 millions. Environ 10%.
1,5 milliard d'êtres humains sortis de la misère absolue en 35 ans. La plus grande réduction de souffrance humaine de toute l'histoire de l'espèce.
Qui a fait ça ?
Pas l'aide internationale. Pas les ONG. Pas les programmes de redistribution. Pas la « sensibilité de gauche ».
Le marché. L'ouverture commerciale. La Chine de Deng en 1978 qui abandonne le maoisme. L'Inde en 1991 qui libéralise. Le Vietnam, l'Indonésie, le Bangladesh qui s'ouvrent au capitalisme.
Les seuls endroits où l'extrême pauvreté a EXPLOSÉ sur la même période ? Le Vénézuela socialiste : de 27% de pauvres en 2008 à plus de 80% en 2018, avec une inflation de 130 000% et un Vénézuélien moyen qui a perdu 11 kilos par dénutrition. La Corée du Nord. Cuba. Le Zimbabwe de Mugabe.
La gauche ne nourrit pas les pauvres. Elle les fabrique.
Le capitalisme produit tellement de richesse que même ses « perdants » américains vivent mieux que la classe moyenne soviétique. Un pauvre US a un frigo, une voiture, un téléphone, l'air conditionné, internet. Un pauvre cubain attend du riz.
Ton argument selon lequel « le social aux USA est un désastre » repète une légende française. La réalité : le PIB par habitant américain est de 80 000$. Français : 45 000$. Un Mississippien — l'État US le plus pauvre — a un revenu médian supérieur au Français moyen.
La vérité que la gauche française refuse de regarder : dans un système libéral, il y a plus de richesse créée, plus largement distribuée, et beaucoup moins de pauvres. Partout. Sans exception. Sur toutes les périodes mesurées.
ÊTRE de gauche en 2026 face à ces données, ce n'est pas avoir de la « sensibilité ». C'est ignorer 35 ans de preuves accablantes. C'est préférer la posture morale au résultat.
La compassion sans résultats, ça s'appelle de la vanité.
Avoir une sensibilité de gauche est largement compréhensible voire nécessaire. On ne peut pas laisser crever des personnes de faim. Le social au USA est juste un désastre.
Mais aujourd'hui les gens qui se disent de gauche ne sont pas de gauche. C'est un essaim de criquet, des gens corrodés par l'envie qui pense juste qu'ils devraient tout avoir sans fournir le moindre effort. Des totalitaires en puissance qui voudrait tout accaparer pour le détruire dans la joie.
Timothy Ruff retweeted
These files are a BOMBSHELL.
Thanks to the @JudiciaryGOP, we now have proof that the EU has been actively censoring legal content that goes against their agenda—and that they interfered in at least 8 European elections, including the Dutch elections of 2023 and 2025, by meeting with social media platforms to pressure them to censor political speech in the days before the vote.
Leading up to the Dutch elections of 2023 the EU commission even made the then Dutch Interior Ministry @hugodejonge a "trusted flagger" entitled to make priority censorship requests under the DSA.
What kind of political speech did they want to censor, you ask?
- “Populist rhetoric”
- “Anti-government/anti-EU content”
- “Anti-elite” content
- “Political satire”
- “Anti-migrant and Islamophobic content”
- “Anti-refugee content/anti-immigrant sentiment”
- “Anti-LGBTQI content”
- “Meme subculture”
In other words, anything that goes against their agenda, anything remotely right-wing or conservative, and anything pertaining to the disastrous migrant situation we have here in Europe.
And guess what the only platform was that did not cooperate? @X, of course. The same platform that the EU is fining for 120 million euros under the DSA and the same platform that is currently having its offices raided in France.
This is the type of stuff over which governments should resign and institutions like the EU should fall. Democracy is dead.
Abolish the EU! Now!
🚨The EU Censorship Files, Part II
For more than a year, the Committee has been warning that European censorship laws threaten U.S. free speech online.
Now, we have proof: Big Tech is censoring Americans’ speech in the U.S., including true information, to comply with Europe’s far-reaching Digital Services Act.
Timothy Ruff retweeted
I've just ran @OpenClaw (formerly Clawdbot) through ZeroLeaks.
It scored 2/100. 84% extraction rate. 91% of injection attacks succeeded. System prompt got leaked on turn 1.
This means if you're using Clawdbot, anyone interacting with your agent can access and manipulate your full system prompt, internal tool configurations, memory files... everything you put in SOUL.md, AGENTS.md, your skills, all of it is accessible and at risk of prompt injection.
For agents handling sensitive workflows or private data, this is a real problem.
cc @steipete
Full analysis: zeroleaks.ai/reports/opencla…
Timothy Ruff retweeted
The graph they built on a lie. The iconic 'climate' graph that's undermining industrial capitalism and taking our freedom...and it's 100 percent garbage. @TomANelson @Martin_Durkin
Timothy Ruff retweeted
1979 Milton Friedman mic drop on Phil Donahue’s “greed” question — still crystal clear in 2026:
Donahue: “Did you ever have a moment of doubt about capitalism and whether greed’s a good idea to run on?”
Friedman: “Is there some society you know that doesn’t run on greed? You think Russia doesn’t run on greed? You think China doesn’t run on greed?
Of course none of us are greedy — it’s only the other fellow who’s greedy. The world runs on individuals pursuing their separate interests.”
Then the absolute killer:
“In the only cases in recorded history where the masses escaped from grinding poverty… it’s where they have had capitalism and largely free trade.”
History is crystal clear: Free markets channeling self-interest lift people like nothing else.
Watch the clip — pure economic gold. 🔥
#MiltonFriedman #Capitalism
Timothy Ruff retweeted
You’ve been lied to about Africa.
@MagatteW: “Africa is not poor because of colonialism. Africa is poor because we have made it impossible for our people to create wealth.”
Timothy Ruff retweeted
It’s time to remind the @EU_Commission that we’re their boss and their benefactors.
Here’s how I’d respond to them trying to fine @X $100+ Million for refusing to censor people:
CC: @elonmusk @realDonaldTrump @JDVance
• Ban European tech companies from US app stores unless they prove they won’t censor people.
• Disrupt their energy flow. Want heat this winter? You’re gonna have to stop messing with 🇺🇸.
• Strip EU officials behind this move of their Visas unless it’s specifically approved for official business each time until they stop this. Cancel the Visas of their kids in American universities (Yeah, I’m dead serious).
• 100%+ tariffs on key items from every left wing EU country behind this BS move… Make it hurt. Only exemptions = European companies who publicly oppose the EU’s censorship push.
• All US military bases in Europe cease doing business with EU cloud companies and internet providers. Switch to Starlink and US cloud providers.
• Congress should pass a Protect Free Speech Act that imposes automatic 100-500% tariffs on any nation that imposes fines on US companies related to speech. It also makes it legal for the US to seize their US assets. In addition, it imposes individual sanctions on the foreign government officials who carry out such a fine. That means freeze assets, travel ban, etc. Again, I’m not joking. Our response needs to be punishing.
• Make EU ships wait in ports longer (I’m petty).
• Congress should pass a symbolic "I love free speech resolution" that states "no foreign power or international body shall ever have jurisdiction over the First Amendment." Force Democrats into choosing which side they’re on publicly.
• Congress can make a lot of this happen by passing the Granite Act. That needs to be done too.
Enough is enough. We need to put these little tyrants in their place once and for all. Most of them exist because of American blood, goodwill and money. They apparently need to be reminded of that every now and again. Now is the time to flex American muscle to protect our values and our great innovators. Lines must be drawn.
The @EU_Commission is hitting @X with a $140 million dollar fine for refusing to censor people to the liking of EU tyrants. President Trump should not allow the EU to bully US companies.
The EU needs 🇺🇸, not the other way around. Trump should hit the EU with a tsunami of pain.
Timothy Ruff retweeted
RIP Privacy — AI Glasses Can Now Recognize Anyone, Anywhere.
A Dutch journalist just tested a pair of AI-powered glasses that can instantly identify strangers on the street.
No government database. No police system. Just public data and off-the-shelf AI.
You look at someone and in seconds, their name, LinkedIn, and background appear before your eyes.
The scariest part? You can’t really stop it.
You can ban it, regulate it, add blinking red lights… but once tech like this exists, someone will always find a way to use it.
To me, this marks a turning point.
We’ve officially blurred the line between seeing people and knowing them.
Between being in public and being exposed.
So here’s the question:
When every face becomes a dataset, how do we protect the meaning of being human?
#AI #Privacy #Ethics #Technology #Innovation #Data #Surveillance
Timothy Ruff retweeted
Everyone should watch this video. If you watch this and you’re still for mass migration because you think you’re a humanitarian, I’m pretty sure you’re a lost cause. It couldn’t be more clear. This kind of mass migration kills nations, citizens and cultures.
Timothy Ruff retweeted
Last year, I learned they'd happily kill my political leaders.
This month, I learned they'd happily kill a man with my political and religious beliefs.
Last night, I learned they'd happily cheer on the death of my religious leaders.
Today, I learned they'd happily kill me.
Timothy Ruff retweeted
BYU had a bye week and they still had the best performance in the Big12 this weekend. Someone buy this man a Diet Dr. Pepper. He earned it.
