Security researcher dissecting AI risks, privacy threats & digital shadows. Traveler lost in the Internet. Views my own.
#lost
Joined September 2009
- Tweets15.3K
- Following1.5K
- Followers1.2K
- Likes5.2K
For all peers out there. Infosec has turned to a madness that’s hard to follow, impossible to predict and I am seeing colleagues, peers suffering from a never ending stream of fires.
I have been suffering from this myself.
For all of those that know me, if you need to talk and unwind I am more than happy to assist.
Either offense or defense we are in this together.
Take care of yourself and those next to you.
Challenging times.
We are living in the future.
today, we introduce a little mischief to the world.
for four years, we’ve been brewing real brain cells on electrodes to understand how they compute. now, we’ve turned those discoveries into a video model anyone can use.
from 0.5¢ a second, mischief 1 is at least 5x faster than its base and the cheapest image-to-video model on @fal and @OpenRouter. soon to be on @awscloud marketplace.
it’s not a delusion anymore. biocompute is real, commercial and this is just the beginning.
happy halloween.
The Internet in the CyberSecurity Awareness Month….
Evolving threat 🚨 CVE-2026-111497, previously known to affect Node.js (node2shell) and Python has evolved into “HTTP2Shell.”
A significant blast radius.
This vulnerability leaves many libraries and applications using HTTP vulnerable to pre-auth RCE via Brotli decompression.
Please be aware. Fixes not yet available for all affected services. Look for Brotli (1.2.1) dependency upgrades when they become available.
Conquistando al mundo un Termo a la vez.
From @TheAthleticFC: Erling Haaland is the latest convert to mate, a drink that has long taken football and the wider world by storm. nyti.ms/3UFkLX4
Pablo Ramos retweeted
El daño que puede venir mañana es grave y el problema son los millones de sistemas que no tienen alguien que mañana se entere y esté dispuesto a actualizar lo que haya que actualizar.
Vamos a ver cada vez más de esto y se viene avisando.
Pablo Ramos retweeted
A moron has released a POC early for php2shell so here is what you need to do:
If you’re on version prior to 8.2:
Edit php.ini: session.upload_progress.enabled = Off
Then reload php-fpm and restart apache
If you’re on later version:
Update (it’ll be available in a few hours)
In any case, the mitigation for the php.ini should work either way. Not sure if it’ll cover both vulns though so keep an eye on that. I’ll be reporting on follow up activity on windows as a target.
Good luck!
This is bad.
‼️ BREAKING: 8 Private keys belonging to eMudhra intermediate certificate authorities (CA) have been compromised.
Chrome and Firefox blocked the affected certificates within hours. Go, NSS, and other software have issued fixes.
Full details - thehackernews.com/2026/10/ei…
The real annoyance isn’t “local vs cloud.”
It’s when local fails and your setup quietly starts spending money without you explicitly allowing it.
Been thinking about how to make that boundary intentional.
Playing with LLMs and build something useful and simple.
pramos.medium.com/one-endpoi…
This is pretty interesting as a concept and shows how much the way we work has changed
New on our Engineering blog: Creating in-house source control.
In May, we merged around 2,500 code changes per day. In September, we merged more than 30,000 per day. As a result, we became bottlenecked by developer infrastructure built for human (rather than agent) scale.
Here, we share how we built a new version control system—and fully migrated our monorepo from git—in five months: anthropic.com/engineering/re…
Talk from @dhh is amazing at so many levels. The best quote I can find, even within all the controversy about AI is a simple as p(bloom) > p(doom). True, we could blow things up, we are and we will.
You know what, the world is not going to end, we're likely to adapt. youtube.com/watch?v=vDjW_dRy…
This will brewing a lot of debate and heat
Argentine Citizenship Will Be New ‘Status Symbol’ For Wealthy Americans, Say Experts
go.forbes.com/eeVLAy
Coding, programming was always a means to an end.
Thinking is still why you’ll get paid.
Improve your thinking, explore, challenge yourself.
