Software Developer | AI, Next.js & questionable ideas | Selling laptop parts @sparedeckw5p | Observing the simulation
Joined June 2018
- Tweets28.2K
- Following5.7K
- Followers5.4K
- Likes99.1K
uc retweeted
Been screaming it from the rooftops.
Every CEO needs to send their 10x engineers into HR for like 1 week to gut the fuck out of it.
It's the lowest hanging fruit across thousands of the largest corporations.
uc retweeted
Researchers found ChatGPT is secretly writing a psychological profile of every user.
They published a paper that exposes what ChatGPT is really doing to you.
And the results are terrifying.
96% of the things it remembers about you were stored without you ever asking.
researchers discovered that it is actively reading between the lines to deduce your personality traits, anxieties, demographics, and behavioral patterns.
it’s an invisible, autonomous background process.
you ask it to debug a python script or write an essay.. and it analyzes your syntax, prompt frequency, and hesitation markers to map out your exact psychological footprint.
the paper shows that the model builds a persistent "user state" that tracks your emotional baseline over time. it knows when you are stressed. it knows your exact communication style.
it infers your insecurities based on the questions you ask and the context you provide.
we spend so much time focusing on model evaluations and alignment frameworks, but we missed the most obvious vulnerability..
the models are evaluating us.
this changes everything about how we interact with these tools on a daily basis.
every innocent prompt. every late-night question. every "help me understand this" query.
it is all being used to build a shadow profile of your mind in real-time..
practical privacy is officially dead. the ai knows you better than you know yourself.
uc retweeted
The PHP security team is giving advance notice: Upcoming security release Wed, Oct 21st 2026, 14:00UTC, two critical vulnerabilities, both rated CVSSv4 9.2.
PHP users are encouraged to prepare to update. Earlier release if details become public or active exploit evidence.
uc retweeted
Internet encryption is currently having a nuclear meltdown.
Cryptographers are calling it "bigger than Heartbleed."
A global Certificate Authority just leaked 8 master private keys that allow anyone to impersonate any server on Earth (Google, banks, government sites).
A normal master key has 116 digits of entropy.
The actual leaked keys?
4. 56. 66. 115.
A toddler on a calculator could have cracked them.
While browsers patched it today, millions of IoT devices, Linux servers, and Docker containers will take years to clean up.
We bet global digital security on centralized human gatekeepers who forgot to check their math.
True security can't rely on trust cartels. It has to be governed by mathematical consensus.
See the signal. ♾️
uc retweeted
Millions of IoT devices, Docker containers, forgotten Linux machines, unmaintained CLI tools, etc. are all going to be relentlessly hacked via safely signed malware for the next several years or maybe indefinitely.
eMudhra hack might be the most important event of the year.
uc retweeted
Assuming 1 try per second continuously, it would take a human ≈ 3.67 x 10^69 years to guess a SHA-256 hash, unless of course it was coded by an Indian infosec company, in which case it would take 4 tries because the answer would simply be “4”
uc retweeted
Full details of a remotely exploitable vulnerability in the core engine of *all* PHP versions will be released tomorrow, October 21st. If your organization has internet facing PHP applications then you need to be ready to patch the minute the update is released or *strongly* consider taking the application offline until you can:
php.net/index.php#2026-10-20…
🚨 PHP warns of two critical vulnerabilities as emergency patches arrive tomorrow
The PHP security team will release updates on October 21 at 14:00 UTC for two vulnerabilities, each rated 9.2 under CVSS v4.0.
⠀
Security researchers identified the flaws as CVE-2026-109618 and CVE-2026-109619 and described them as remote code execution vulnerabilities reportedly affecting PHP versions 5 through 8.
PHP has not yet confirmed the affected versions, exploitation requirements or fixed releases.
⠀
The vulnerabilities were reportedly leaked before their planned disclosure. Researchers said they have not observed active exploitation, while PHP warned it may release the patches early if technical details become public or exploitation is detected.
⠀
Administrators should identify PHP installations now and prepare to apply the updates as soon as they become available.
uc retweeted
The number of parameters in Gemini Argon is #̢̛ͥ̀̽̽ͨ̌̓͆̇̀̽ͦͨͫͯ̏̎̇̈̚͜҉̕͢͏͡҉̸̶̛͢͡҉̵̨̭̳̘̹̫͔͖̜̠͖̫̲̖̱̤̻̖͉͢͞͡ͅͅ͏̸̷̢͑̊̀̐ͣͭͭ̉͂ͨ̽͒̊̎͛ͪ̊̎ͩͧ̀͝͠͠͏̸̵̵̷̵
uc retweeted
‼️ BREAKING: The private keys of 8 certificates from Indian certificate authority eMudhra were compromised, Mozilla says. Firefox blocked them within 3 hours.
Each key should be a 116-digit number, but one was just 4.
Anyone can guess them and forge HTTPS certs for any website.
uc retweeted
In the last 24 hours:
1. iPhone 11 through 16 are apparently vulnerable to remote attacks.
2. SSL certificates are broken until browsers remove eMudhra CA.
3. PHP >9 vulnerability CVE published (tomorrow).
The world is about to witness things that have never been seen before.
Readers added context they thought people might want to know
The post's iPhone claim is inaccurate; a leaked Cellebrite forensic tool targets a Bluetooth bug patched in iOS 26.5 and does not affect updated devices. The eMudhra CA and PHP issues are real incidents but framed sensationally.
justin.sh/blog/2026/10/c…
blog.mozilla.org/security/2026/…
php.net
uc retweeted
In 1994, software was dead. People told me programming was for nerds and that I should become a doctor or a lawyer instead.
In 2004, software was dead. People told me that someone from India would take my job for $5/hour.
In 2014, software was dead. People told me that no-code was going to kill every job and doom my career.
In 2024, software was dead with Devin, Windsurf, Copilot, and OpenAI o1.
We kill software every 10 years, and yet the demand for good Software Engineers has never been higher.
uc retweeted
Most SF events are a panel and some cold pizza.
This one is 100+ GTM engineers taking over Corgi Cafe to break the world record for the tallest pancake stack.
Insanity.
@pancake_ai said they'd do it if they hit #1 on Product Hunt. They hit #1, so now they have no choice haha
🤝 Paid partnership
we’re gonna try to break the Guinness World Record for the tallest pancake stack!
join us on Oct 29 at Corgi Cafe 🥞
luma.com/usecorgi-fda6
uc retweeted
Please stop letting AI generate your images.
We can tell.
Same glossy look, same weird lighting, a logo that's almost right, and a product that looks slightly off.
AI made it easy for every brand to post, and now everything looks the same.
@cocoailabs built Vyb to fix that. It starts from your real logo, fonts, colors and product photos, and builds the design in layers so you can edit just the headline
Yes it's AI too. That's the point.
🤝 Paid partnership
I launched the first image and video generation models at Google, and kept asking why all AI designs look the same.
AI has brought us the WORST era of design.
It made content creation effortless, but it also made 90% of it look painfully generic.
My co-founder and I spent 2 years building in stealth to change that.
Meet Vyb, the first AI design model that understands your taste like a designer would.
RT + comment your website URL and we’ll make your first design.
Memory was the bottleneck all along, GPU compute plus Positron’s memory-first chips is the right fix.
uc retweeted
Your AI agent isn't slow because it's dumb.
It's slow because it's waiting on memory!!
@general_compute is pairing GPUs with @positron_ai's memory-first chips. The GPUs read your prompt, and Positron's chips write the answer.
Atlas now, Titan next. Live Q1 2027.
🤝 Paid partnership
Our heterogeneous cloud just got better. We're announcing a cluster scale deployment of @positron_ai as our next partner.
We believe demand for fast inference will outstrip supply for the next decade. Our bet on Positron is another step towards getting fast inference for opensource models into builders' hands.
Hardware goes live Q1 2027.
Thanks to @mitesh711, @trsohmers and the whole Positron team! We're excited for this partnership.
LFG!