I make podcast apps that skip the ads for you; chaotic neutral; data/apps/embedded, robotics/EE, music; 38/M/USA; Married to my dream woman, 2 kids; lucky 🦆
USA
Joined April 2026
- Tweets550
- Following198
- Followers49
- Likes2.6K
brick retweeted
It is worse than drugs
I just found this in my son’s room is he doing drugs?
Readers added context they thought people might want to know
This image has been stolen for monetization, against Twitter/X rules. It's at least a year old.
facebook.com/groups/2949051…
brick retweeted
I am begging people to use rss
Where do I get my cybersecurity news? r/netsec, almost every day.
It's not polished, there's no editor chasing clicks, it's just hackers and security practitioners posting stuff they found interesting. Half the time I learn about a new technique from a comment thread arguing about it, not even the post itself.
If your news diet is press releases and breach headlines, go spend ten minutes in there instead.
brick retweeted
Oh FFS. Thank you for your concern Sam, but don’t spread your FUD and doom bait in my waters.
I lead one of the most utilized Linux operating systems in the world for data centers and enterprises, and I founded its predecessor too.
While AI is surely accelerating finding human created security issues, it is a temporary problem, and most open source project leads have already figured out how to also use AI to reduce new bugs moving forward.
Here is a graph from GKH (who maintains the stable kernel) on how many CVEs they are remediating per release:
github.com/gregkh/kernel-dev…
This graph describes how much better each release is now getting:
github.com/gregkh/kernel-dev…
This doom based marketing approach that the AI labs are pushing is really short sighted. While this will of course drive business to us, I find it unethical to distort the truth and use scare tactics in messaging.
The greater truth is that AI is making the software industry more secure, by identifying the human errors in code, and soon we will end up in a much better place.
🚨Sam Altman says the internet can no longer be SECURED by patching bugs.
"I no longer think we're going to be able to just patch all the bugs," the OpenAI CEO said, warning smarter models can find "hardware level insane stuff."
He says OpenAI can't responsibly open source its best model "anytime soon," but the open source world isn't far behind: "Not super."
brick retweeted
The php2shell thing quickly showed me how little most people know about how memory management works and how hard things like this are to actually port into a reliable exploit.
My first thought looking at the vulns was “this is neat” not that the internet was going to break.
So far I’m glad I turned out to be mostly right I suppose.
brick retweeted
The COVID analogy fits more and more on the PHP security issue.
Everybody is expert now, missinformation spread faster than light,
doomsdayer are spreading more and more serious accusations.
If I were a hacker, I'd ignore the vulnerability in PHP, but instead jump on mass histeries, pretend I'm expert, offer service, solution or unofficial but "much faster patched PHP" binary image, plot a backdoor there and do real hacking.
As social networks and Google promote polarizedi information over correctness and factuality, this should work pretty neatly.
brick retweeted
Don’t get too worked up. The vast majority of these vulns are not exploitable or if exploited wouldn’t cause any harm.
Most of the AI driven vuln discoveries are background noise that is only interesting becuase it create the volume you see in the graph, and panic from those who don’t understand it.
I explained this in a series of videos about Mythos just after it was released.
youtu.be/wQvobgIFHXo?is=5LWA…
brick retweeted
We’ve seen plenty of php2shell probes and exploitation attempts in our honeypots.
At the time of writing, we’ve observed no successful remote code execution and no dropped PHP files.
Reliable RCE may be harder to achieve than initially expected.
What we’re seeing now could change in the future as public research continues.
CVE-2026-109618 & CVE-2026-109619
brick retweeted
We protect over 5 million PHP sites and when we find a major exploitable vulnerability, we always see site cleanings. We have seen exactly zero hacked sites from php2shell. Zero. Across a population of 5 million PHP sites that our product protects. Draw your own conclusions. #php2shell
brick retweeted
one of the most fascinating (and bleak) aspects of society in 2026 is the outright dismissal of retail & service jobs as illegitimate, even though every single one of us relies on these workers every single day. mind boggling.
brick retweeted
If you were Israeli leaders, and believed you were being globally accused of crimes you didn't commit in Gaza, what's the first thing you'd do?
Urge the international media to go to Gaza and report the truth.
But if you know the accusations are true, you'd ban international media from reporting freely. That's what Israel is doing even a year after a "cease-fire," and the reason could not be more obvious.
brick retweeted
Imagine how much everyone would rightly be freaking out if we discovered that Chinese AI did what OpenAI is doing.
brick retweeted
having worked in ~10 different industries, i've noticed that bad managers/leaders all share a few things in common
namely: they get really annoyed when you ask a lot of questions, run experiments, try to solve new problems, or otherwise do things they don't explicitly tell u to
brick retweeted
Rob a gas station for $200: 10 year prison sentence
Orchestrate wide-scale cyber security breaches and a fake news media campaign to pressure the Feds into killing your competitors and propping up your multi-trillion valuation ahead of an IPO: no problem
OpenAI and Anthropic oversold AI security breaches to pressure feds into protecting turf: insiders trib.al/Jo6xMk5
brick retweeted
I find myself using Claude less these days because the way it speaks has just become insufferable
Like it’s constantly trying to showcase how smart/sophisticated it is, rather than actually communicating a point across
