Unix McBeard retweeted
We were all supposed to wait until Thursday at 11am ET.
Information has leaked wrt zero-day embargoed RCE vulns in PHP. We can confirm that they're real. CVE-2926-109618/619
We cannot share further information right now. Take this seriously and apply patches when available.
Unix McBeard retweeted
For the next few days or weeks, anyone now has a root CA thanks to eMudhra. Time to have some fun with MiTMing unwilling devices!
Oops! Good thing intermediate certs aren't too important or anything.
private keys from 8 intermediate CA certs have been compromised (eMudhra)
Happy "Update everything" day to all my pager-carrying friends
emudhra.we-have-a-problem.co…
It's clear it's doing this when you use it.
Researchers found ChatGPT is secretly writing a psychological profile of every user.
They published a paper that exposes what ChatGPT is really doing to you.
And the results are terrifying.
96% of the things it remembers about you were stored without you ever asking.
researchers discovered that it is actively reading between the lines to deduce your personality traits, anxieties, demographics, and behavioral patterns.
it’s an invisible, autonomous background process.
you ask it to debug a python script or write an essay.. and it analyzes your syntax, prompt frequency, and hesitation markers to map out your exact psychological footprint.
the paper shows that the model builds a persistent "user state" that tracks your emotional baseline over time. it knows when you are stressed. it knows your exact communication style.
it infers your insecurities based on the questions you ask and the context you provide.
we spend so much time focusing on model evaluations and alignment frameworks, but we missed the most obvious vulnerability..
the models are evaluating us.
this changes everything about how we interact with these tools on a daily basis.
every innocent prompt. every late-night question. every "help me understand this" query.
it is all being used to build a shadow profile of your mind in real-time..
practical privacy is officially dead. the ai knows you better than you know yourself.
Unix McBeard retweeted
The Department of Homeland Security is requiring all civilian federal agencies to remove DeepSeek products and 'any third-party services developed using DeepSeek implementations,' and to stop buying them.
Unix McBeard retweeted
Skeletons are the worst cancer in the history of user interfaces. Just make loads fast. Ping across the ocean is never more than 200ms, maybe 300ms if you're Australian, just return the damn data at that speed and you never need to even think about this crap.
Unix McBeard retweeted
HOLY WTF. Reuters is reporting that a Chinese-speaking hacker used AI agents to compromise websites belonging to more than 100 companies, including Deere, SharkNinja and Cummins, after attempting intrusions against over 1,200 sites.
The estimated cost: roughly $5,000 in AI tokens, or $50 per successful breach. Successful intrusions took around 23 hours on average.
The attackers used the open-source Cairn agent framework, apparently combining DeepSeek models with a Claude Code harness. One campaign gave its agents instructions in fewer than 100 Chinese characters.
NorForge researcher Snorre Fagerland: 'It's a new world now.'
Something something trusting trust
arxiv.org/abs/2606.19535 They backdoored an LLM so that it writes insecure code when runing on specific GPUs!
My git push is blocked because the approval model is at capacity.
Cooooooooodddddeeeeeexxxxxxx!!!!!
(Yes I could do it myself)
The second amendment applies to cyber weapons.
Unix McBeard retweeted
What happens in a major incident where the frontier models all become unreachable?
This quoted post is unavailable.
They're calling it the most millennial post ever.
(He's right you know)





























