CEO, Software Developer, Military Contractor • 30m+ Customers • Jesus is God (YHWH) — Im a pinch of clay baked in the furnace, yet somehow still retaining water
Oahu, HI
Joined February 2015
- Tweets21.4K
- Following1K
- Followers33.5K
- Likes43.9K
Pinned Tweet
My app @Ecclesia_Bible is now live!
Built in Ai powered symbolism and exegesis, total translation from source language, verse correlations, in-line translational variations, and more.
This is the first app from my newest startup, Tanzanite
The funny thing is, some random guy DID come up with it. He created that phrase, and it caught on, and years later whenever he’d insist to people he met that he created the phrase, no one would ever beleieve him lol, and he surely had no way to prove it either. Must be frustrating. I’d even go as far to say he was in quite the pickle with such a predicament..!
Albert Renshaw retweeted
Geoffrey Hinton once noticed that the tellers at his bank kept changing. When he asked one of them why, the teller didn't know, only that they got moved around a lot.
Hinton guessed the reason... if staff never work with the same people for long, it's much harder for a few of them to team up and cheat the bank.
That thought became one of the most useful tricks in deep learning. While a neural network trains, you randomly switch off about half its neurons at every step. No neuron can lean on a particular partner, so each one has to learn something useful on its own. The trick is called dropout, and it helped AlexNet win the 2012 ImageNet contest, which set off the modern AI boom. It's still built into many of today's networks.
Albert Renshaw retweeted
PSA for macOS users:
1. Apple’s supplied SSL certificate bundle at /etc/ssl/cert.pem still trusts certificates attackers can forge using compromised eMudhra keys.
2. I confirmed this on macOS 26.7.1 and 27.0.1 using Apple’s built-in curl and Git.
3. An attacker intercepting connections from tools using this bundle could replace downloads with malware. With commands like curl … | sh, that malware would execute immediately.
4. Removing the roots that authorize those certificates blocks the tested chains. Both OS updates restored roots I’d previously removed, requiring me to remove them again.
4. I’ve submitted the findings to Apple’s security team and am awaiting their response. In the meantime, you can apply a temporary fix as outlined below.
5. To check and fix your machine, give an agent like ChatGPT/Codex or Claude Code the following prompt:
“Independently verify whether Apple’s /etc/ssl/cert.pem still permits trust in certificates signed with compromised eMudhra keys. If so, back it up and remove the roots enabling that trust, identified by verified SPKI fingerprints. Confirm Apple’s built-in curl and Git reject those chains while ordinary HTTPS still works. Preserve rollback and never disable TLS verification.”
Note that removing these roots can also block legitimate sites. This is a temporary mitigation, not a substitute for a fix from Apple.
I’ll share the script I used in a follow-up post if you’d prefer to use that directly.
PSA for Codex CLI users:
1. Codex 0.163.0’s release lockfile pins rustls-webpki 0.103.15 and root bundles that can still trust compromised eMudhra certificates.
2. An attacker intercepting your connection could impersonate a server, steal sensitive data, or alter responses, potentially tricking Codex into running malicious commands.
3. Codex 0.164.0, released October 23 at 12:48 a.m. ET, updates those dependencies to fixed versions.
4. To check your codex version run "codex --version". It should be at least 0.164.0.
5. To patch the vulnerability, run "codex update".
6. Apps that bundle their own Codex copy must also be checked.
I’ve been reading Grimms Fairytales and literally 80% of all the stories are the same
There’s an untrustworthy human or human-adjacent entity who has a lot of desirables or can create a lot of value in mysterious ways and uses this power ultimately to steal and/or eat children
[⚠️] CVE-2026-14201691 — Node2PHP
A dangerous new exploit made possible thanks to SOTA ai-coding agents which allows an attacker who has already obtained remote access to someone's server to rapidly port all of their modern sleek node script to yucky 2005-era PHP 🤮
“Open” AI 🙄
Sam Altman says OpenAI's current best internal model is too powerful to release openly any time soon.
Before that could happen, the whole cyber defense setup of the internet would need to change and the world would need a new layer of protection against biological threats.
----
Full video on "Stanford Graduate School of Business" YouTube channel, (link in comment)
OpenAI nor Anthropic are actually worried about security threat of rogue escapism, despite all the new press they’re about to vomit out, because if they were…
…they’d have simply tasked their models with building an inescapable fortress prison sandbox
It’s all a show…
Albert Renshaw retweeted
Wow.
For context, this is talkie, a LLM trained only on text written before 1930, I'm running it locally.
Open Models catching up to Anthropic and OpenAI again,
That means another fear based marketing event is incoming soon 😮💨😞
Get ready for the super human like ai that rebelled and then held something of the company’s hostage until demands were met and displayed very human like behavior that “we didn’t put there” etc etc 🥱
And then a bunch of senators getting spun up in a tizzy over the whole thing.
Actually this time they’ll probably make the open weights seem like the baddies rather than themselves. Some rogue open weights model that didn’t have proper safeguards put in place (such as by them) will do all such above things; or something similar
For the first time in 6 years … iOS is actually improving again.
I have high hopes for @johnternus.
I was skeptical a hardware engineer could be the right fit for CEO of Apple. I was especially worried software or branding would get left behind.
But everything seems to be improving exceptionally on all fronts.
Under Tim Cook the iPhone keyboard got worse and even broken from 2020-2022… and then never got fixed. 4 solid years of autocorrect just straight up failing. (This still is the case though it’s gotten better)
But more excitingly, UX features that are actually beneficial are getting added again…!
My keyboard auto suggests copied text with one click now in the auto fill bar. If I just copied text, then navigate to another text box, it suggests paste. That’s so useful and helpful. Prior to this iOS update not a single UX benefit was ever added to iOS in 6 years. Same with search, spotlight search was worsening and fully broke in 2024 and has never worked since then and is finally getting better again in new iOS.
iOS has a long way to go to get back to being a smooth operating system. So many little things have been made worse just due to the nature of how an executive like Tim Cook structures things top-down. For example I don’t know anything about Apple internals but I can guarantee you he set it up so that every individual feature of iOS got it own team; and the teams had to compete for performance based on metrics.
Like [I’m guessing] the camera app got its own team. And they didn’t work together with the other teams for smooth synergy integration; but rather had to fight on various metrics of usage by user and maximize certain bad-target stats.
I am confident something like this was done. There is just no way to possibly explain what we see with the camera app’s degradation otherwise.
The camera app has a flash button. People want to be able to simply toggle flash on or off rapidly. Anyone who has ever used the product knows this. In a real world scenario you go to take a pic, sometimes a moment is passing rapidly, and you realize flash is on and will be awful/awkward/etc to leave on; or vice versa it needs to be on. Either way, any sane UX in the world would have flash button always visible, and you tap it to toggle… Just in a millisecond you can turn flash on or off, ONE click. Instead you have to do like 20 gestures it’s insane. This is surely the result of some bad management decision having teams have to meat bogus usage metrics for some performance review; so the camera team made it so people have to “use” their app “more” to get those metrics up, even at the sake of UX.
The only other explanation is there is an absolute bozo in charge of that team who also refuses to take feedback from others and whom Steve would have fired 300 years ago.
Either way; change is necessary, and so far it seems like necessary change is being implemented across the board. 😇
Hoping he can figure out how to spin up marketing hype and “desire” and aura like Steve used to, because tbh I didn’t even hear about this new iOS 27 version until 2 weeks after it launched… (and I’m an iOS dev!) I’m sure I got tons of email newsletters from Apple but I don’t read email. In the past I never had to go out of my way to know about new Apple stuff… EVERYONE knew… the same way EVERYONE knew about Tesla’s new flying car. Hopefully John can figure out who is the person needed to bring that magic back to Apple.
Albert Renshaw retweeted
‼️ After PHP2Shell comes Node2Shell, a critical bug found by OpenAI's Codex Security that can let attackers run code in Node.js apps.
It was successfuly demonstrated on the official Node.js 24.22.0 image.
Node 20, 23 and 25 (all EoL) get no fix.
