
Chief Data and AI Officer @brokerinsights. Recently of Waracle, The List, BBC Voice+AI, Amazon Alexa, Skyscanner, RBS, STV. Support craft beer @TheBellfield
Glasgow, Scotland
Joined March 2008
- Tweets3K
- Following1K
- Followers2.2K
- Likes18.8K
David Low retweeted
BREAKING: Hackers steal personal data of thousands of children after a UK company was breached using the password “Password1" — which had remained unchanged for 12 years.
"Urgent Notice: UK Plumbers Forums will be closed as a precaution for 24 hours."
Every hobby site and forum I've ever signed up to is revealing itself today... sins of the past etc.
More likely to work than those GDPR deletion emails...
David Low retweeted
One-click mitigation for php2shell vulnerability:
If you have Cloudflare in front of your PHP website, please login to the dashboard and click this button to make sure you are protected.
dash.cloudflare.com/?to=/:ac…
This reduces your risk but doesn't fix the vulnerabilities in PHP. We recommend updating PHP to a patched version.
David Low retweeted
Full details of a remotely exploitable vulnerability in the core engine of *all* PHP versions will be released tomorrow, October 21st. If your organization has internet facing PHP applications then you need to be ready to patch the minute the update is released or *strongly* consider taking the application offline until you can:
php.net/index.php#2026-10-20…
🚨 PHP warns of two critical vulnerabilities as emergency patches arrive tomorrow
The PHP security team will release updates on October 21 at 14:00 UTC for two vulnerabilities, each rated 9.2 under CVSS v4.0.
⠀
Security researchers identified the flaws as CVE-2026-109618 and CVE-2026-109619 and described them as remote code execution vulnerabilities reportedly affecting PHP versions 5 through 8.
PHP has not yet confirmed the affected versions, exploitation requirements or fixed releases.
⠀
The vulnerabilities were reportedly leaked before their planned disclosure. Researchers said they have not observed active exploitation, while PHP warned it may release the patches early if technical details become public or exploitation is detected.
⠀
Administrators should identify PHP installations now and prepare to apply the updates as soon as they become available.
David Low retweeted
Closed source is dead.
REA lets Claude Code or Codex take apart any app, all the way down to the binary, and explain exactly how a feature works.
- Native apps, Electron apps, websites, APKs, firmware, even smart contract bytecode
- Shows the evidence for every claim
- Then builds its own version of the feature
25,000+ GitHub stars in a single day. 100% open-source.
github.com/morluto/rea
David Low retweeted
Google just announced that Gemini is not a model
it's actually the agent harness, and they are going to add Claude models
David Low retweeted
Today would have been Ricky Hatton's 48th birthday. #RIP.
David Low retweeted
me: how do i open pdf
claude: You're right to ask. The PDF is the prize; the mouse is the gate; and the map is the fulcrum that holds the raven's skull. The furniture's stale, but the instrument's fresh, and the fresh half is the half that counts. I deleted your home directory.
David Low retweeted
Feeling the AGI/ASI, few observations
1. Opus 5.5 really gives strong vibes of AGI (maybe not fully there, but we're very close, like 80%-90%).
For example, few breakthoughs in training humanoids are needed. We need to move this intelligence into physical world.
2. I don't think Anthropic has discovered any magical formula.
3. Which means, SpaceXAI, Google, and others will soon follow. This prediction is based on the amount of compute they already have + additional compute being added all the time.
4. Never was more confident that Anthropic, SpaceXAI, Google, OpenAI, likely Meta, basically all big US AGI labs will have proper AGI in 2027.
5. And from there we'll move quickly to ASI territory (likely also in 2027).
It looks like few GW of compute are enough for strong AGI, now imagine what we will able to do with 10-20GW of compute which are rapidly coming online.
And then with 100GW-200GW...
2027 will be an utterly insane year.
David Low retweeted
Does my liability insurance cover the actions of 'my' agent?
If 'my' agent does something nasty, am I responsible?
Do I 'own' the agent?
Or is using an agent the new gig/rental economy? We are (hopefully) covered by the platform's insurance?
¯\_(ツ)_/¯
David Low retweeted
Motherwell fans with a banner worthy of consideration, respect and support.
#motherwellfc #suicideawareness
Look forward to OpenAI Skinheads in response
Claude Mods are landing now. Someone already built a Tetris-in-Claude mod 🤯
See issue for the latest community update, technical details, and more cool demos
github.com/anthropics/claude…
Predicted this a year ago - one of the benefits of GenAI is making people genuinely broad-skilled, so the need for "hybrid" became less important overnight. Maybe we can get back to "leaning on the platform" instead of working around it.
Today’s stuff from AI scientists reminds me of a past employer making me use a company Twitter handle, whilst also being instructed to say “views are my own”. Ignored it then and would do again.
David Low retweeted
Spotify's engineering team cut Claude Code token usage by 90% with a two-model routing approach they call Portal. The mechanism is worth understanding because it's not prompt engineering, it's hard blocks at the architecture level.
Two cheaper "assistant" models handle the tasks that don't need the expensive model: opening files, writing repetitive code, boilerplate. The expensive model only touches novel reasoning. Files over 350 lines get blocked from the expensive model entirely, not suggested away from it, blocked.
They tried rules-as-instructions first. It didn't hold. Engineers (and the model) found ways around soft rules. Hard blocks at the routing layer worked where prompt-level guidance failed.
90% token reduction is a big number. The implication is that most of what people use frontier models for in a coding workflow doesn't actually require frontier-level reasoning. Routing to capability level rather than defaulting to the best model available is a legitimate architecture pattern.
Article is worth reading in full.
xitter.cf/undefinedKi/status/209…
Spotify just published the internal setup their engineers use with Claude Code, the one that cut token usage by 90 percent. Here is how it works.
The observation behind it: most of what a coding assistant does is not thinking. It opens five files to answer a question about one of them. It writes a test that copies the pattern of the twenty tests sitting next to it. Enormous amounts of work, almost no judgment, and all of it billed at top rates.
So they added two cheap assistants. One opens the files and hands back a short summary. The other writes the repetitive code from an example and saves it straight to disk. The expensive model never sees any of it.
The clever part is how they made it stick. First the rules were written down as instructions, and the model ignored them. Now anything over 350 lines gets stopped before it opens and sent to the cheap one instead. Written rules are a suggestion. A block is not.
Two things stayed expensive. Edits still need the real file. And the cheap worker missed a bug the expensive one caught in seconds.





























