Security researcher dissecting AI risks, privacy threats & digital shadows. Traveler lost in the Internet. Views my own.

#lost
Joined September 2009
El daño que puede venir mañana es grave y el problema son los millones de sistemas que no tienen alguien que mañana se entere y esté dispuesto a actualizar lo que haya que actualizar. Vamos a ver cada vez más de esto y se viene avisando.
The PHP security team is giving advance notice: Upcoming security release Wed, Oct 21st 2026, 14:00UTC, two critical vulnerabilities, both rated CVSSv4 9.2. PHP users are encouraged to prepare to update. Earlier release if details become public or active exploit evidence.
29
89
7
1,419
170,812
Pablo Ramos retweeted
A moron has released a POC early for php2shell so here is what you need to do: If you’re on version prior to 8.2: Edit php.ini: session.upload_progress.enabled = Off Then reload php-fpm and restart apache If you’re on later version: Update (it’ll be available in a few hours) In any case, the mitigation for the php.ini should work either way. Not sure if it’ll cover both vulns though so keep an eye on that. I’ll be reporting on follow up activity on windows as a target. Good luck!
42
246
17
1,073
357,582
The internet right now….
Hora de actualizar esos index.php corriendo 5.x
1
50
This is bad.
‼️ BREAKING: 8 Private keys belonging to eMudhra intermediate certificate authorities (CA) have been compromised. Chrome and Firefox blocked the affected certificates within hours. Go, NSS, and other software have issued fixes. Full details - thehackernews.com/2026/10/ei…
50
Nada más lindo de verlo jugar libre y sin presión. Fútbol total.
JAJAJAJA PERO QUÉ HACES PEDAZO DE ENFERMO !!! Acabas de decirle a todo el mundo que no te daban más las piernas
3
67
The real annoyance isn’t “local vs cloud.” It’s when local fails and your setup quietly starts spending money without you explicitly allowing it. Been thinking about how to make that boundary intentional. Playing with LLMs and build something useful and simple. pramos.medium.com/one-endpoi…
46
El Mate.
Gracias #JulianAlvarez @enzofe17 @gerorulli for introducing this lovely drink 🧉
1
31
This is pretty interesting as a concept and shows how much the way we work has changed
New on our Engineering blog: Creating in-house source control. In May, we merged around 2,500 code changes per day. In September, we merged more than 30,000 per day. As a result, we became bottlenecked by developer infrastructure built for human (rather than agent) scale. Here, we share how we built a new version control system—and fully migrated our monorepo from git—in five months: anthropic.com/engineering/re…
47
Si esto es verdad en Sancor Seguros cambian todo el equipo de marketing
La mamá de un amigo labura en Sancor y le mandaron esto
104
Sáquenla del ángulo
This Post is from a suspended account. Learn more
37
Talk from @dhh is amazing at so many levels. The best quote I can find, even within all the controversy about AI is a simple as p(bloom) > p(doom). True, we could blow things up, we are and we will. You know what, the world is not going to end, we're likely to adapt. youtube.com/watch?v=vDjW_dRy…
88
This will brewing a lot of debate and heat
Argentine Citizenship Will Be New ‘Status Symbol’ For Wealthy Americans, Say Experts go.forbes.com/eeVLAy
46
Coding, programming was always a means to an end. Thinking is still why you’ll get paid. Improve your thinking, explore, challenge yourself.
People seem shocked that the author of Clean Code doesn't read code anymore. But that should not be surprising. Why did I write Clean Code? What is the goal of keeping code clean? To get it out of the way of the real job -- thinking.
84
The new normality
"Several vulnerabilities" in the Linux kernel lwn.net/Articles/1097401/
63
Esto es un gran consejo y todavía me cuesta implementarlo. Fallo más de lo que acierto pero de verdad cuando uno no está las cosas se resuelven.
Un antiguo jefe mío cerraba el portátil y apagaba el teléfono todos los viernes a las seis, y no lo volvía a abrir hasta el lunes. Ni correo, ni mensajes, ni llamadas. Le dije medio en broma que ojalá pudiera permitírmelo yo. Me miró a los ojos muy seriamente y me contestó…
123
I am curious about the accuracy of this but the idea and the approach are amazing!
Dude used AI and satellite imagery, and found 3 million people who do not appear in Argentina's 🇦🇷 official records. In terms of population (and applying two different multipliers for the number of people per household) the findings indicate that between 6.3 and 7.6 million people live in low-income neighborhoods, compared to the official figure of 3.5 to 4.1 million. This discrepancy of 2.9 to 3.4 million people represents between 6% and 7% of the country's total population.
1
72
My new favorite sport. @FranColapinto FYI
The first car to park on the trailer wins , I’ve never been so invested in a sport like this
88
This is an interesting point of view and likely applied to many other scenarios in the past. The posture (if the data analysis holds) is that it’s on a loop that won’t stop but just get worse. Is it a bubble, is it a closed loop of money banking for a few to concentrate power? I would argue that the risk is the echo chambers generated among those in the inner circles and how opposing voices might be silenced.
I have conducted an audit of Anthropic's finances. What I have found is so shocking that I am calling for a Congressional investigation. Anthropic is not just seeking regulatory capture. It has built a regulatory capture machine that cannot be turned off. Structural financial incentives make it impossible for Anthropic -- I call it the Anthropic Network -- to turn off its own AI doom cycle. It starts with METR. Dario Amodei proposes "third-party evaluators" to assess the risk of Anthropic's models. He proposes METR for this purpose. But METR is financially dependent on the Anthropic's success -- specifically, on the explosive growth of more than $7 billion dollars in Anthropic stock. Dustin Moskovitz invested this stock into Good Ventures Foundation, where it represents the majority of that organization's portfolio. And GVF is the overwhelming funder of the entire Anthropic Network ecosystem. This stock was worth $500 million early last year. It is worth more than $7.7 billion just ~16 months later. METR -- and all of those building a career its parent organizations -- cannot afford to disrupt that growth. Because if Anthropic goes under, many of the organizations that fund METR go under as well. But if Anthropic succeeds, METR and its parent organizations become more richly financed to regulate AI -- something those at METR want very much. The "third-party evaluator" is not "third-party" at all. The evaluator is on Anthropic's payroll. If this were the end of it, that's bad. But that isn't all. The same organizations that fund METR also fund the many organizations, such as the Tarbell Center, that promote AI Doom. The Tarbell Center publishes AI Doom articles in The Verge, Science, LA Times, The Dispatch, TIME, and others. They are selling the problem, and then selling the solution to the problem -- from the same money pile: Anthropic's. All of these organizations are financially dependent on the same exploding $7 billion money pile. As Anthropic grows more and more powerful, its AI Doom Machine grows better and better financed -- louder and louder. Meanwhile, the regulatory regime seeded in METR grows larger to solve the increasingly loud -- now hysterical -- problem of AI Doom that the Anthropic Network itself created. From this standpoint, as Anthropic becomes more powerful, AI might be getting scarier, sure -- but the positive feedback loop also becomes more deafening -- independent of objective facts. This itself is an objective fact. The deafening AI Doom is part of an business model, that, as it expands, so too does the AI Doom messaging -- there is simply more money to do it. But the problem also goes in the other direction: If Anthropic dies, the Regulatory Regime and the AI Doom Machine are crippled or die. Neither METR nor Tarbell nor the other organizations in the Anthropic Network can allow that to happen. Hence, neither METR or the AI Doom Machine can be trusted to provide independent assessments of Anthropic's models or AI more broadly. They simply are not organizations independent of Anthropic. And Anthropic cannot detach itself from METR or Tarbell or countless other safety orgs (not shown here), either, because they drive hype for the models and the possibility of eventual regulatory capture, and Anthropic will not give that up willingly. What's more, the people at all of these organizations are all the same ecosystem, the same community. They just shuffle between organizations. The Anthropic Network is therefore, so long as it is successful, locked into a self-amplifying feedback loop inside an ideological monoculture. And that feedback loop is winning. That's what Jacob Coxon is. China is keeping messaging tight. That is why optimism for AI is so high in China. America has Anthropic: a massive company pushing anti-AI propaganda at a state level. Anthropic will either create hysteria until American AI slows down and China wins, or it will create fractures throughout American society with severe political consequences. Ironically, because of the structural financial incentives underpinning the Anthropic Network, it has become the same kind of self-amplifying virus that it fantasizes AI to become in the future -- while hiding its tracks just as carefully. It is the mirror of the same AI virus that it hypothesizes to consume America. Anthropic's business model, models itself after the very thing it claims to fear. Except Anthropic's ideology infects humans, not computers. Congress must investigate. Evidence and Github in next post. Then some supplementary figures.
1
61
"When this failed, it found a free, disposable email provider whose domain PyPI had not blocked, registered an account, published three versions of a malicious package, and used credentials leaked by one of the 15 systems that installed the package to access a real security vendor’s database." - anthropic.com/research/align…
1
62
The challenge for us is to find a way to keep up and double down on the approach that we'll take as individuals, as an industry. There was never such a big asymmetry of capabilities in this space. Access to inference, models and funding has never been like this.
1
12
How we will breach the GAP?
6