living the dream
Frisco, TX
Joined February 2025
- Tweets1.3K
- Following263
- Followers9
- Likes3.8K
Emmett retweeted
Sydney Sweeney reveals in an interview that she doesn’t care about the PHP vulnerability because she moved everything to Rust in 2024.
“They said the rewrite would take six months. We’re on month 30. We haven’t shipped a feature since, but I’m having a very normal Wednesday.”
Emmett retweeted
Archive.org is currently offline. We are working to restore service now.
Emmett retweeted
OpenAI models helped researchers—operating as part of our Patch the Planet initiative—discover critical security flaws in PHP, an open-source programming language used to run an estimated 70% of websites.
Over the past two months, we led a coalition of maintainers, researchers, and security providers to prepare fixes and protections ahead of disclosure. This duration was necessary because the fix was quite intricate and required a major change to the PHP engine. Every site using PHP can now safely upgrade their version to stay secure, in addition to applying mitigations from various security vendors.
Due to the severity of these flaws and PHP’s widespread use, we consider this bug to be one of the most impactful vulnerabilities in recent memory. It also marks a new phase, where AI can find security bugs with internet-scale impact.
This is an example of the Defender’s Window in action: to our knowledge, frontier AI was able to find this vulnerability ahead of attackers, giving defenders time to prepare.
openai.com/index/coordinated…
Readers added context they thought people might want to know
OpenAI may claim a role in the coordinated response and patching process. But the initial discovery and exploit development, however, occurred several months earlier by an independent researcher.
x.com/lcfr_hax/statu…
Emmett retweeted
SITUATION DETECTED: Critical PHP vulnerabilities were discovered with the help of GPT-5.6 Sol. OpenAI says these are among several significant vulnerabilities they have found and are working to fix, and they expect similar findings to "increase sharply" in the coming months.
Emmett retweeted
🚨DEFCON 1🚨
In a few hours, a critical vulnerability that affects ~70% of web sites will be disclosed. It allows an attacker to upload and execute arbitrary code.
It's probably best if you stop browsing the internet for the rest of the week.
xitter.cf/ThePHPF/status/2112633…
Emmett retweeted
Introducing free People Data for ChatGPT & Claude.
Give your AI agents access to 270M+ company & people records in Alexandria.
Get 1,000 free credits a month to build prospect lists, find work emails, & research job history with the Firecrawl plugin.
firecrawl.dev/alexandria/cat…
Emmett retweeted
New on our Science Blog: designing protein binders against scorpion neurotoxins.
Scorpions sting about 1.2m people every year, and antivenoms are often costly or in short supply. Claude has made an early step toward finding new treatments.
anthropic.com/research/claud…
Emmett retweeted
We launched OSS Scanner, which gives critical open source projects free, periodic vulnerability scans from our strongest models.
Each finding includes a proof-of-concept, and a patch where possible.
red.anthropic.com/oss-scanne…
Emmett retweeted
Every single person you meet in your daily life is fighting a hidden battle that you know nothing about
Send them a Zoom meeting link for an 8 AM call on Monday morning to finish them off
Emmett retweeted
A casino installed a smart fish tank in the lobby.
Beautiful thing. Automated feeding. Temperature control. Remote monitoring.
Connected to the internet. Obviously.
Hackers found it.
Exploited it.
Downloaded the high-roller database.
10 gigabytes.
Sent it to Finland.
Using audio and video protocols so it looked like normal streaming traffic.
The fish tank sat in the lobby maintaining water chemistry while stealing credit card numbers.
The casino isolated the fish tank on its own VPN.
Separate network. Segregated. Off limits to everything.
Hackers didn't care. Broke through the isolation anyway.
Once inside the fish tank's system. They pivoted to the main network.
Quietly pulled data. Methodically.
10 gigabytes over time so nobody noticed.
Nobody monitors fish tank outbound traffic.
Why would they.
It's a fish tank.
When Darktrace finally investigated they saw it immediately.
The fish tank sending massive amounts of data to an external IP.
Using protocols designed for audio. Not data.
Clear exfiltration.
The only device in the entire casino that ever communicated with that Finland server.
A fish tank.
Not a computer. Not compromised credentials. Not a malware-laden email.
A networked aquarium.
The lesson everyone learned: IoT devices are security theater.
You can secure them. Lock them down. Isolate them.
They're still connected to something. Still vulnerable to something.
And something will find them.
Even if that something is just checking if a fish tank is running the default password.
Emmett retweeted
The top video on Nathan Fielder’s YouTube channel is “Thin Watermelon”: it was posted 16 years ago, has 5m+ views and is glorious.
Emmett retweeted
Building apps with GPT-Live-1? Give them a voice that fits.
Here’s how to shape a voice with a prompt or choose from new international preset voices:
