Javier Escribano (@fesja) header
Javier Escribano (@fesja) profile picture

Co-founder and CPTO at Punto (https://nitter.cf/t.co/CKbn4w162W). Teaching product at Escuela Escribano. Previously: Founder and CPO at Ontruck and Touristeye.

Madrid, Spain
Joined November 2007
Photo by Javier Escribano (@fesja)Photo by Javier Escribano (@fesja)Photo by Javier Escribano (@fesja)Photo by Javier Escribano (@fesja)Photo by Javier Escribano (@fesja)Photo by Javier Escribano (@fesja)Photo by Javier Escribano (@fesja)Photo by Javier Escribano (@fesja)Photo by Javier Escribano (@fesja)Photo by Javier Escribano (@fesja)
Javier Escribano retweeted
Los ingenieros catalanes instan a refundar Adif con mandatos técnicos de cuatro años. “Adif ha tenido siete presidentes en 14 años, no hay empresa que pueda soportar esto, ni de este sector ni de cualquier otro”, valora Pere Calvet, decano del colegio. Porque no es solo el presidente, cada vez que se releva la cúpula se cambian también los directores generales y los altos cargos de la compañía, cambiando las prioridades y decisiones a largo plazo lavanguardia.com/vida/202610…
4
58
7
208
12,833
El autoconocimiento es una de las mejores habilidades que uno puede tener. Tanto de lo que hace muy bien como lo que le cuesta más. Quien no lo tiene, se acaba mintiendo a sí mismo y creando conflictos con otros.
I’m in love with this sentence: “The degree to which a person can grow is directly proportional to the amount of truth they can accept about themselves without running away.”
2
349
Javier Escribano retweeted
i have no time to maintain all my vibe coded tools we need a business model where someone else maintains the code and i just pay a monthly fee
557
183
191
4,436
581,006
Javier Escribano retweeted
235
2,362
140
8,526
235,133
España ha pasado -tristemente- a ser el país con más fallecidos en alta velocidad, más que todo el resto de países combinados en toda su historia. El accidente de Alemania de 101 víctimas ocurrió en 1998.
59
1,335
76
6,924
332,681
Javier Escribano retweeted
Reflexión: Los errores humanos en 2026 no deberían existir. No deberíamos ni mencionarlos. Porque ese error humano (de confirmarse) nace de sistemas que permiten que un humano cometa un error. O sea, sistemas mal diseñados. (sigue)
67
354
32
1,653
112,324
Hoy hablaba con unos funcionarios técnicos de una Comunidad Autónoma. Los mismos retos que tenemos en @wearepunto los tienen ellos internamente porque se tienen que "pelear" con otras administraciones.
1
2
477
Me preguntaban cómo habíamos conseguido hacer un match entre diversos tipos de datos de automoción de distintos ministerios. Lo habían intentado pero los ministerios no les resolvían el problema. Nosotros lo hemos resuelto. Se lo he compartido.
1
2
221
Hace dos años fundamos Punto con el objetivo de mejorar cómo las empresas interactúan con las administraciones públicas. Vamos por buen camino. En este tercer año, uno de los objetivo es trazar una red con funcionarios técnicos para escuchar y apoyar en lo que podamos.
1
2
105
100% de acuerdo. Como escribí hace 3 meses javierescribano.me/posts/202…
Dario Amodei, the CEO of Anthropic, says AI should one day be priced by the value it creates: a few cents for telling someone to restart their Mac, maybe tens of millions for telling a drug company to move an aromatic ring to the other end of a molecule. I understand the wish. I don't think the market will grant it. I started in telecom in the 90s. Nobody ever paid us what a phone call was worth to them. The call that closed a deal and the call to say happy birthday cost the same, and the price was set by the next carrier willing to carry it for less. AI is heading the same way. On Saturday Torsten Slok, the chief economist at Apollo, wrote that outside the big tech companies, corporate America is starting to treat token spending as a cost center that weighs on margins. Apollo also notes that demand is so price sensitive that it switches to cheap open-source models when prices go up even modestly. The tens of millions from the better molecule go to whoever owns the molecule. If AI labs want to be paid for value, they will have to own the outcome: discover the drug, run the trial, hold the patent. That is why Isomorphic Labs, the drug discovery company Alphabet spun out of DeepMind, matters more than any pricing page. Selling intelligence is becoming a commodity business. Owning what intelligence discovers is not.
1
1
882
Mucha AI, pero gana hacer esta manualidad con mi hija. Guiarla, observarla, enseñarla y luego disfrutar de cómo lo enseña a los abuelos y la clase :) Ahora con la AI es muy fácil encontrar ideas adaptadas para cada edad y temática.
2
310
Javier Escribano retweeted
Many of you don't understand how serious this is, so let me break it down. In computer science there is a famous kind of puzzle called 3-SAT. You are given a long list of yes-or-no switches and a set of rules about how they must be arranged, and you have to find a combination that satisfies every rule. The obvious way to solve it is to try every combination, but each new switch doubles the number of possibilities, so a puzzle with a few hundred switches would take longer than the age of the universe to brute force. For decades, the smartest people in the field found clever tricks that made this a little faster, but every trick still hit the same wall: the time required kept exploding as the puzzle grew. About 25 years ago, two computer scientists, Russell Impagliazzo and Ramamohan Paturi, working with Francis Zane, turned that wall into a formal idea. They proposed the Exponential Time Hypothesis, which says this explosion is not a failure of human cleverness but a law of nature. No algorithm, however brilliant, will ever solve 3-SAT without the time blowing up exponentially. Nobody could prove it, but almost everyone believed it, and it became one of the foundations of modern computer science. Researchers used it as a measuring stick. If you could show that solving some other problem quickly would also crack 3-SAT quickly, you had shown that problem was hopelessly hard too. Hundreds of papers, across scheduling, graphs, logic and much more, rest on this one assumption. Now an internal AI model at OpenAI claims to have broken it. It says it found an algorithm that solves these puzzles meaningfully faster than the hypothesis allows, and it has checked the proof in a computer verification system called Lean. And here is the remarkable part: the very people who proposed the hypothesis, Impagliazzo and Paturi, along with MIT's Ryan Williams, are now leading the public review of whether a machine has disproved their own idea. So what happens next? If the disproof holds, a large part of theoretical computer science has to be revisited. Every result that said "this problem cannot be solved faster, assuming ETH" loses its foundation, and researchers will have to work out which of those walls were real and which were simply where we stopped looking. It does not mean everything becomes easy. The new algorithm is still slow in absolute terms and this is not the famous P versus NP problem being solved. But it means our map of what is possible was wrong in a place we were very confident about, and it was an AI that redrew it. If the disproof fails, the hypothesis survives and the field breathes out, but we will still have watched an AI produce serious, checkable work on one of the deepest questions in the discipline, closely enough that the founders of the idea had to take it seriously. Either way, something has shifted.
An internal model at OpenAI has produced a claimed refutation of ETH! Russell Impagliazzo, Mohan Paturi, and I have been asked to help organize an open and independent examination of this claim. 1/4
333
1,625
227
17,025
1,458,403
Javier Escribano retweeted
OpenAI just dropped four huge results from its secret internal AI model. 1. Math: It solved the Kakeya conjecture in every dimension. Mathematicians had only cracked small pieces before (2D in 2019, 3D in 2025). 2. Computer science: It proved the Exponential Time Hypothesis is false. Hundreds of research papers assumed it was true. Some really hard problems might be solvable much faster than thought. 3. Physics: It proved the theory of the strong force (QCD)—the force holding atoms' insides together—actually works mathematically. Same for a unified version of the Standard Model. 4. Yang–Mills: Along the way, it proved Yang–Mills existence, part of a $1 million Millennium Prize problem. The math, computer science, and Yang–Mills proofs were all computer double-checked. Top experts are now reviewing everything, including the researchers who proposed the disproved hypothesis and a Nobel Prize winner. OpenAI says it doesn't want academic credit. The model still isn't public 👀
96
376
62
4,283
365,826
Muy necesario volver en parte al respeto que había antes. Es increíble que aún siendo urgente, no se pueda aplicar hasta septiembre del año que viene. La lentitud en cambiar las leyes es un tema a revisar.
👩‍🏫 La @ComunidadMadrid dará más capacidad a los docentes para actuar de manera inmediata ante faltas de respeto o problemas de convivencia en las aulas 👨‍🏫Eliminará los trámites burocráticos que retrasan y dificultan la adopción de medidas disciplinarias c.madrid/c76pm
4
997
Javier Escribano retweeted
10500 expedientes en el consulado de Buenos Aires. provincia gobernada por Kicillof, amigo muy amigo de Pedro Sánchez. de 10500, cero reunían los requisitos. CERO. LES HEMOS REGALADO LA NACIONALIDAD POR LA CARA BONITA
De 10500 expedientes en el consulado de Buenos Aires de nacionalizados por la Ley de Nietos, 0 cumplían los requisitos. Cero. Está gente que ha intentando montar una estafa electoral a gran escala solo puede acabar en la cárcel. La primera de ellos, Gutancita, que fue la mano ejecutora del pucherazo.
89
2,921
45
5,099
35,417
Javier Escribano retweeted
Any form of security through obscurity is fully over. This barely worked as a method with humans, but just simply is over in a world of autonomous systems that will look through every crevice and try every permutation of attack possible. As a result, years and years of legacy enterprise infrastructure will need to be upgraded, security practices modernized, data pipelines cleaned up, access controls better managed, and much more. Agents will help on the defensive side because they can both accelerate this work and equally simulate the risk vectors. But there’s a long road ahead to prepare for this future. This is also partially why diffusion timelines will take longer than some realize.
a lot of old software was protected by “exploiting this would be an unreasonable amount of work” we have invented a machine that does unreasonable amounts of work anyway how’s the patch backlog
112
59
15
625
78,926
Javier Escribano retweeted
I suspect the real reason eMudhra is exiting the SSL business is Google indicated it is most likely going to drop eMudhra from being trusted by Chrome AT ALL, after observing inexplicable incompetence in how they mis-generated their private key for the CA certificate.
BREAKING: eMudhra exits SSL/TLS certificate business, blames social media instead of incompetence for the same
111
528
31
7,376
251,712
Javier Escribano retweeted
If you wanted to know all the jobs that AI will produce, look no further than cybersecurity. This is going to become one of the biggest investment areas for enterprises going forward. And even as the work becomes more agentic and autonomous you will need more talent to point the agents at the most critical work, review findings, patch systems, respond to incidents, and more. Lots of opportunity right now for the systems that protect data and enterprises, as well as the professionals that are deploying them and protecting organizations. It’s going to only get more wild out there.
So basically, today PHP got two critical bugs that let anyone run code on your server without even logging in, which is bad, and then the details leaked before the patch was even out, which is worse, and it works on WordPress and MediaWiki and Magento and Joomla and Laravel, and Censys says like 1.5 million servers are running a version with no fix, so the NSA was like "take your system offline," and the FBI was like "take your system offline," and CISA and the UK and CERT-EU were all like "take your system offline," and then the Prime Minister of Japan, the actual Prime Minister, posted at 5:55 in the morning telling 48.8 million people to take their system offline, so everyone took their system offline, like the Dutch cybersecurity agency took its own website offline, and the Dutch parliament went offline, and the Port of Rotterdam went offline, and Finland and France and Denmark started pulling government sites, and Wikipedia went down, and Archive.org went down, and Asana and GOG and Something Awful went down, and the University of Vienna's webmail went down for some reason, and that's just PHP. Because GitLab also dropped a CVSS 10.0, which is the highest score they give out, for a bug that's been there since 2014, so that's every self-hosted GitLab for twelve years, and then LiteLLM 1.107.0 got hijacked and shipped a credential stealer and a remote access trojan in every single wheel and the Docker images, including latest, and you didn't even have to import it, just installing it was enough, and it's the second time this year, and then Railway paused every deployment on the entire platform because someone got into the environment variables, so now everyone has to rotate every secret they've ever stored there, and TiDB Cloud said someone was walking around inside with stolen credentials for basically a month and an extortion group says they took 10.6 terabytes, and Zeabur got breached for the second time in two months and is just shutting down, like the whole company, and Node.js patched remote code execution and a TLS bypass, and CISA says Plex is being actively exploited, and someone took over 300 Tor exit relays to steal SSH passwords, and SafePay ransomware has hit over 600 critical infrastructure orgs, and India's biggest bank filed a data loss incident, and Japan has been in an official state of emergency in cyberspace since October 9, which honestly explains the 5:55 AM post. Oh, and eMudhra, a certificate authority that's issued over 60 million certificates, whose entire job is proving websites are who they say they are, was supposed to be using private keys that are random numbers over a hundred digits long, and one of them was 4. Just 4. And the others were like 66 and 237. Anyway, it's Wednesday.
138
98
40
1,050
189,227
Javier Escribano retweeted
Trump: I called Google Maps to change the name of the Atlantic Ocean to Trump Ocean. Sundar said, “No, no, no. This time I'm not doing it.” He said, “Oceans are different, sir. They cover a lot of countries. Please don't ask us to do that.” So we'll probably pass. Let's keep it the Atlantic Ocean.
632
1,202
622
16,866
3,642,588
Javier Escribano retweeted
Some stats on #php2shell. In the 10 hours before it was publicly announced, across the @Cloudflare network we saw thousands of attempts to exploit it. That jumped to tens of thousands in the 45 minutes post announcement, hundreds of thousands within 2 hours, and millions now.
287
3,267
675
22,629
2,276,363