technical marketer, content girlie - devrel @womenindefi_org - prev @Lisk - mentor @Web3Bridge @dev3pack
remote
Joined October 2019
- Tweets11.1K
- Following928
- Followers3K
- Likes17.7K
Pinned Tweet
I wrote about what happened when the internet went berserk over the PHP issue.
Take a few minutes to check it out: vickish.me/blog/php-flaw
vickish retweeted
LSK is now trading on @HyperliquidX.
LSK holders can now buy and sell LSK against USDC on Hyperliquid’s spot market, with bridging from Ethereum available through @StargateFinance.
Here’s what you need to know 🧵
I need someone to kidnap me for a week.
During that time, I won’t have to pay bills, spend money, or do anything draining or stressful.
Just tie me up, feed me, and put me to bed. 🥹
A lot of talented people in tech are invisible because they assume their work will speak for itself.
Your work can be excellent and still need someone to explain it, share it, or put it in front of the right audience.
working in tech is funny because you can spend 6 hours debugging a problem, fix it in 2 minutes, and tell everyone you had a productive day.
vickish retweeted
I wrote about what happened when the internet went berserk over the PHP issue.
Take a few minutes to check it out: vickish.me/blog/php-flaw
vickish retweeted
A quick explainer for everyone else.
>half the internet runs on PHP
>a big security bug dropped today
>basically hackers can take over websites just by sending one special request (crazy!)
>no password needed
>patches are out
>lots of sites are going down for emergency updates
>if you have a website, tell your host to update PHP right now
>if you don’t, just enjoy the random maintenance pages for now
vickish retweeted
OpenAI models helped researchers—operating as part of our Patch the Planet initiative—discover critical security flaws in PHP, an open-source programming language used to run an estimated 70% of websites.
Over the past two months, we led a coalition of maintainers, researchers, and security providers to prepare fixes and protections ahead of disclosure. This duration was necessary because the fix was quite intricate and required a major change to the PHP engine. Every site using PHP can now safely upgrade their version to stay secure, in addition to applying mitigations from various security vendors.
Due to the severity of these flaws and PHP’s widespread use, we consider this bug to be one of the most impactful vulnerabilities in recent memory. It also marks a new phase, where AI can find security bugs with internet-scale impact.
This is an example of the Defender’s Window in action: to our knowledge, frontier AI was able to find this vulnerability ahead of attackers, giving defenders time to prepare.
openai.com/index/coordinated…
Readers added context they thought people might want to know
OpenAI may claim a role in the coordinated response and patching process. But the initial discovery and exploit development, however, occurred several months earlier by an independent researcher.
x.com/lcfr_hax/statu…
vickish retweeted
This guy is dangerous and racist.
You could make the same video in Vancouver, contrasting rich white people with poor white people.
You could also make this video in Lagos, contrasting rich Black people with poor Black people.
vickish.me
I decided to start working on mine again after I was shamed by @MeschacIrung for not having one :)
My toxic trait is thinking I'm physically fit until an activity requires me to use my legs for more than 20 minutes.