Chief Data and AI Officer @brokerinsights. Recently of Waracle, The List, BBC Voice+AI, Amazon Alexa, Skyscanner, RBS, STV. Support craft beer @TheBellfield
Glasgow, Scotland
Joined March 2008
- Tweets3K
- Following1K
- Followers2.2K
- Likes18.8K
David Low retweeted
PeePal 1.4 is out now on the App Store in the UK. PeePal now asks for your permission before it saves anything to your diary, and iCloud sync is a separate choice that's off unless you turn it on. Guides now work offline too, plus a round of fixes. peepal.info
David Low retweeted
We talk about fixing faster etc.
How about eliminate the vulnerabilities altogether before they’re a problem?
- Much tighter SDLC
- Secure by DEFAULT
- Block builds
- Stop non-approved tooling altogether
The game changed. For Security. For Engineering.
David Low retweeted
BREAKING: Hackers steal personal data of thousands of children after a UK company was breached using the password “Password1" — which had remained unchanged for 12 years.
"Urgent Notice: UK Plumbers Forums will be closed as a precaution for 24 hours."
Every hobby site and forum I've ever signed up to is revealing itself today... sins of the past etc.
More likely to work than those GDPR deletion emails...
David Low retweeted
One-click mitigation for php2shell vulnerability:
If you have Cloudflare in front of your PHP website, please login to the dashboard and click this button to make sure you are protected.
dash.cloudflare.com/?to=/:ac…
This reduces your risk but doesn't fix the vulnerabilities in PHP. We recommend updating PHP to a patched version.
David Low retweeted
Full details of a remotely exploitable vulnerability in the core engine of *all* PHP versions will be released tomorrow, October 21st. If your organization has internet facing PHP applications then you need to be ready to patch the minute the update is released or *strongly* consider taking the application offline until you can:
php.net/index.php#2026-10-20…
🚨 PHP warns of two critical vulnerabilities as emergency patches arrive tomorrow
The PHP security team will release updates on October 21 at 14:00 UTC for two vulnerabilities, each rated 9.2 under CVSS v4.0.
⠀
Security researchers identified the flaws as CVE-2026-109618 and CVE-2026-109619 and described them as remote code execution vulnerabilities reportedly affecting PHP versions 5 through 8.
PHP has not yet confirmed the affected versions, exploitation requirements or fixed releases.
⠀
The vulnerabilities were reportedly leaked before their planned disclosure. Researchers said they have not observed active exploitation, while PHP warned it may release the patches early if technical details become public or exploitation is detected.
⠀
Administrators should identify PHP installations now and prepare to apply the updates as soon as they become available.
David Low retweeted
Closed source is dead.
REA lets Claude Code or Codex take apart any app, all the way down to the binary, and explain exactly how a feature works.
- Native apps, Electron apps, websites, APKs, firmware, even smart contract bytecode
- Shows the evidence for every claim
- Then builds its own version of the feature
25,000+ GitHub stars in a single day. 100% open-source.
github.com/morluto/rea
David Low retweeted
Google just announced that Gemini is not a model
it's actually the agent harness, and they are going to add Claude models
David Low retweeted
Today would have been Ricky Hatton's 48th birthday. #RIP.
David Low retweeted
me: how do i open pdf
claude: You're right to ask. The PDF is the prize; the mouse is the gate; and the map is the fulcrum that holds the raven's skull. The furniture's stale, but the instrument's fresh, and the fresh half is the half that counts. I deleted your home directory.
David Low retweeted
Feeling the AGI/ASI, few observations
1. Opus 5.5 really gives strong vibes of AGI (maybe not fully there, but we're very close, like 80%-90%).
For example, few breakthoughs in training humanoids are needed. We need to move this intelligence into physical world.
2. I don't think Anthropic has discovered any magical formula.
3. Which means, SpaceXAI, Google, and others will soon follow. This prediction is based on the amount of compute they already have + additional compute being added all the time.
4. Never was more confident that Anthropic, SpaceXAI, Google, OpenAI, likely Meta, basically all big US AGI labs will have proper AGI in 2027.
5. And from there we'll move quickly to ASI territory (likely also in 2027).
It looks like few GW of compute are enough for strong AGI, now imagine what we will able to do with 10-20GW of compute which are rapidly coming online.
And then with 100GW-200GW...
2027 will be an utterly insane year.
David Low retweeted
Does my liability insurance cover the actions of 'my' agent?
If 'my' agent does something nasty, am I responsible?
Do I 'own' the agent?
Or is using an agent the new gig/rental economy? We are (hopefully) covered by the platform's insurance?
¯\_(ツ)_/¯
David Low retweeted
Motherwell fans with a banner worthy of consideration, respect and support.
#motherwellfc #suicideawareness
Look forward to OpenAI Skinheads in response
Claude Mods are landing now. Someone already built a Tetris-in-Claude mod 🤯
See issue for the latest community update, technical details, and more cool demos
github.com/anthropics/claude…
Predicted this a year ago - one of the benefits of GenAI is making people genuinely broad-skilled, so the need for "hybrid" became less important overnight. Maybe we can get back to "leaning on the platform" instead of working around it.
