Founder GPShopper (successful exit) ex-Jane Street (pre-SBF) ex-Google (pre-Sundar) occasional shitpoaster
United States
Joined October 2009
- Tweets1.4K
- Following644
- Followers874
- Likes10K
daily Claude automated task
1. check Chrome open source project for updates
2. rebase our ad block/privacy patches
3. build and deploy to devices
a private Chrome fork for every household
Announcing 3 Critical vulns for hundreds of millions of IoT, Firewalls, OT, and Military devices including: Palo Alto Networks, Comcast, D-Link, HP, Canon, Honeywell, GE, Oracle, Siemens, Rockwell, Digi, Lockheed Martin, Boeing...
The vulns are with GoAhead Web Server which is a backend library used by these devices. There's a patch available from GoAhead but that doesn't mean there's a patch available for the devices yet -- that's up to the manufacturer.
- TLS traffic over DHE ciphers have a 1-byte secret, "04", meaning anyone can decrypt connections to these devices and steal login credentials and session tokens if the client negotiated with DHE ciphers like the latest TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256, which is extremely likely.
- LibreSSL mTLS has been completely bypassed, meaning anyone can connect over mTLS. If you have one of these devices listening on the internet and are expecting mTLS to protect it from attackers, take it offline or patch asap.
- OpenSSL Certificate Revocation Lists (CRLs) are not enforced, meaning if a user device is stolen or compromised, and you revoke that mTLS cert, nothing actually happens. There are a lot of other attacks this can be used for.
These are critical because these types of devices run our world. Water systems, electricity, military, firewalls, critical infrastructure.
foxio.io/blog/choose-your-ba…
This formal verification article from Anthropic in collab with @theoremlabs throws some shade on OCaml but it's been repeatedly proven that OCaml has no trusting trust backdoors.
anthropic.com/research/forma…
discuss.ocaml.org/t/ocaml-co…
insurer: cybersec claims department
me: hi yes, I'd like to put in a claim, my PHP site was hacked
ins: have you heard of claude code? do you use it?
me: yes
ins: haven't you had, like, 6 months to auto-rewrite all of your PHP in a less stupid language?
me:
did they nerf the models? opus 5.5 has been cranking out just barely under 10,000 lines of code an hour today
socialists: nobody should have to earn a living
AI: on it!
AI: ✻ Flibbertigibbeting…
socialists: not like that
you prove your code is correct
we prove it's probably not wrong in the last 10 million inputs the agent told the fuzzer to try
permanent underclass household family meeting to discuss the token budget rations
11% neuralink cyber defense
6% mental health
4% sold for life extension drugs
3% sold for black market life extension drugs
1% random Q&A
75% dad's YouTube music video hobby (115 lifetime views)
The misery of being an anointed OCaml programmer in a world where AI agents blast out 10,000 lines of C++ that works first try
Higher quality viewing options here: youtube.com/watch?v=r45lLYsi…
Remember quant finance? When the worst thing a brilliant scientist could do was quit cancer research to play zero-sum games at prop trading firms and then blow their 7-8 figure bonuses on apartments in Manhattan with swimming pools.
Good times.
Surprised that Pinker argues that dominance and self-preservation are evolutionary baggage in humans and not fundamental to intelligence and therefore AI won't have them.
But in 2026 we train AI to imitate humans! The baggage is literally in the training corpus!
An Open Letter to Scott Alexander: The dangers of AI are real, but doomerism may be counterproductive.
quillette.com/2026/09/26/an-…
Michael Bacarella retweeted
it's amazing how in 2026 there's high speed links to every house now but you still need to pay providers like a 10x markup to use their hard drives to host it on the internet
SWEs are still in such denial about AI that they're *still* not seriously discussing forming a union to reject AI while they still have some leverage.
We've learned nothing from the dockworkers and the mathematicians.
applied math 😱
The worst part is how she's wearing a suit instead of an event t-shirt with holes in it.
COMIC ◆ smbc-comics.com/comic/taken
PATREON ◆ patreon.com/ZachWeinersmith
STORE ◆ smbc-store.myshopify.com/
#comics
ALT 1-panel SMBC comic update. A man at a desk slams down on it two big green bags with dollar signs on them. He addresses the woman standing in front of the desk, saying "sorry your work was taken over by machines. welcome to quantitative finance. Here’s your sacks of dollars." The caption below the comic reads "Pure mathematicians’ nightmares are different."