Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
BWare retweeted
In 2021, the head of the UN World Food Programme said $6 billion from Elon Musk could solve world hunger.
Elon replied: publish the plan, right here, publicly, and I'll sell Tesla stock on the spot.
The plan came out. And when you read it, it wasn't a plan to solve hunger. It was one year of food for 42 million people. A twelve-month subscription. And the year after? Start over.
A few months later, Elon summed up his view: if you care about the reality of goodness rather than the perception of it, philanthropy is extremely difficult.
"Reality of goodness over perception of goodness."
That line stuck with me for weeks. Does philanthropy actually work?
Gates-style philanthropy is first and foremost institutional capture. Foundations funding NGOs, funding governments, funding programs, producing reports, producing photos. Everyone's happy, and the aid machine keeps itself alive. Sixty years and hundreds of billions later, much of Africa is still dependent on aid. Zambian economist Dambisa Moyo laid it out in Dead Aid: aid breeds dependency, feeds corruption, and short-circuits the only mechanism that has ever lifted a country out of poverty.
So what actually works?
It's been tested. In Kenya, Berkeley researchers working with GiveDirectly randomly selected villages and gave every poor household about $1,000 in cash. No program. No training. No conditions. Just cash.
The result: people bought metal roofs, livestock, started small businesses. Barely any inflation. And every dollar injected generated around $2.50 of economic activity locally, including for neighbors who received nothing.
Why? Because you didn't give them charity. You gave them capital. You primed the pump.
And that's where everything hinges: ownership. Hernando de Soto showed that the world's poor hold trillions of dollars in assets, but without recognized property titles, it's dead capital. You can't borrow against it, pass it on, or grow it. Where property rights are respected, the system starts running. Where they aren't, no amount of aid will ever be enough.
Now reread Elon's post.
"Next year, I will give one of my SpaceX shares to every kid in America. This will be the first of many."
That's not a meal. That's not a handout. That's a property title. A piece of the company building the infrastructure of a multiplanetary civilization, owned directly by millions of kids.
A kid who gets a handout depends on the state. A kid who owns a share of SpaceX owns a piece of the future. He learns what an asset is, he has a stake in the economy working, and one day he'll vote as an owner, not as a client of the state.
Gates buys perception. Musk distributes ownership.
The reality of goodness versus its perception. And it's absolutely brilliant.
BWare retweeted
This is concerning. For the first time, a Chinese model Kimi K3 has taken #1 on the Frontend Code Arena and is scoring at or near the frontier on other benchmarks.
Meanwhile America is tying itself in knots: politicians and bureaucrats are banning new data centers, piling on state regulations, and pushing for new federal agencies to pre-approve frontier models.
This is how you lose the AI race. The rest of the world won’t play by our rules if we bog ourselves down. Permissionless innovation is how America won the internet and became the technological envy of the world. We can do it again with AI -- while addressing risks in a targeted way -- or we’ll watch our lead evaporate.
Big news: Kimi-K3 by @Kimi_Moonshot is now #1 in the Frontend Code Arena with 1679 pts, surpassing Claude Fable 5.
This is a 17-place jump from Kimi-k2.6 (#18 -> #1).
In Frontend, Kimi-K3 ranked #1 in 6 of 7 domains: Brand & Marketing, Reference-Based Design, Data & Analytics, Consumer Product, Simulations, and Content Creation Tools, landing #2 only in Gaming behind Fable 5.
The full model weights will be released by July 27.
Congrats to the @Kimi_Moonshot team on this major milestone!
BWare retweeted
Defense tech seed pitch: we have one guy who used to work at anduril
Defense tech series C pitch: our existing VCs control the government
BWare retweeted
"Khamenei out as Supreme Leader of Iran by…"
With US and Israeli strikes now underway, three prediction sources are pricing the probability of regime change. One was ahead of the other two.
———
🔵 Kalshi (human-traded, by Sep 1): Flat at ~48-50 all week. Spikes to 64 on the strikes.
⚪ Polymarket (human-traded, by Dec 31): Flat at ~48-50 all week. Spikes to 74 on the strikes.
🔴 Vico (AI-powered, by Dec 31): Steady climb from ~65 to 78.5 over 10 days — pricing in the escalation before most humans were trading it.
———
The human-traded markets sat still while diplomacy played out. Vico's AI models were reading the buildup — carrier deployments, military surges, failed talks — and adjusting daily.
In this instance, the crowd moved on the headline and the AI moved on the signal.
BWare retweeted
I had the same thought. But the details here by an expert commentator are informative.
BWare retweeted
VCs leaving AI back to crypto xitter.cf/fartconthird/status/17…
BWare retweeted
Over past 5 years, median listing price of U.S. home has risen from $320k to $445k, while median square footage has fallen from 1,996 to 1,916 per @realtordotcom
@DataArbor
BWare retweeted
We are pleased to announce the addition of six new senior fellows who will be joining us. Welcome, @kierstentodt, @bradonrogers, @BradMedairy, @bsware, Chris Roberti and John Katko!
eng.auburn.edu/news/2024/05/…
BWare retweeted
Here is a remarkable section where Microsoft tells the CSRB that it realized its initial public statements about the incident were inaccurate but that it didn't want to update those statements because doing so would "entail disclosure of attorney-client privileged information."
BWare retweeted
Thanks to the CSRB for its work on this important issue. @CISAgov plans to convene major CSPs to develop cloud security practices aligned with the CSRB recommendations and a process for CSPs to regularly attest to & demonstrate alignment. go.dhs.gov/JRT
Today the Cyber Safety Review Board released its independent review of the Summer 2023 Microsoft Exchange Online intrusion laying out what led to the intrusion & what industry & gov't can do to ensure an intrusion at this magnitude does not happen again. go.dhs.gov/JRT
BWare retweeted

Dmitri Alperovitch@DAlperovitch3 Apr 2024
United States
United StatesConnected via United States App StoreAccount-level information, not a live location or per-post device.
Very proud of the work of the Cyber Safety Review Board (CSRB) on this important review of the 2023 Microsoft Exchange Online intrusion that affected a number of national security officials
And the threat actor responsible is the same one that did Operation Aurora in 2009!
Today, DHS released the Cyber Safety Review Board’s (CSRB) report summarizing the findings of its review into attacks associated with the 2023 Microsoft Exchange Online intrusion. Learn more here⬇️
cisa.gov/resources-tools/res…
BWare retweeted
Today, DHS released the Cyber Safety Review Board’s (CSRB) report summarizing the findings of its review into attacks associated with the 2023 Microsoft Exchange Online intrusion. Learn more here⬇️
cisa.gov/resources-tools/res…
BWare retweeted
Last January, I noticed something peculiar in my 2yo’s bedroom that - after a year of obsessive reporting - led me to a profound cosmic revelation about what’s even possible in our universe. A 🧵.
BWare retweeted
I am disappointed and infuriated that CTI League members are being made into villains. Groups like this are critical and enable cyber defenders to take quick action. I'm worried about the chilling effect this could have on crucial info sharing, especially public-private.
I have released a statement about our work in the CTI League. Yesterday I provided this and additional material as testimony to congress. Today we have made our github public and opened up all our files.
cti-league.com/statement-by-…
Details are in this statement. 1/5
BWare retweeted
I have released a statement about our work in the CTI League. Yesterday I provided this and additional material as testimony to congress. Today we have made our github public and opened up all our files.
cti-league.com/statement-by-…
Details are in this statement. 1/5 – at San Francisco, CA
BWare retweeted
🚨U.S. @DeptofDefense joins @NCSC & Five Eye partners @CyberGovAU, @cybercentre_ca, NCSC-NZ with @NSACyber, @CISAgov & @FBI exposing #RussianFSB ties to cyber actor #StarBlizzard and their 🎯spear-phishing campaigns. Learn more about mitigation actions: cybercom.mil/Media/News/Arti…
CNMF joined US & international partners @NCSC, @CyberGovAU, @cybercentre_ca, @CISAgov, @FBI, @NSACyber & NCSC-NZ, releasing a joint CSA highlighting Russian-state actor Star Blizzard’s global spear-phishing campaigns & TTPs. Read the full advisory here: ncsc.gov.uk/pdfs/news/star-b…




































