Thomas Emmanuel retweeted
Interesting ingredient. Part of the secret recipe I am sure…
🚨WHAT?! A study discovered fluorescent CARBON NANODOTS inside Coca-Cola and Pepsi that cross the BLOOD–BRAIN BARRIER.
The findings emerged after the Gates Foundation began investing in both PepsiCo and the world's LARGEST Coca-Cola bottler — a stake now valued at $660 MILLION
The nanoparticles are about 5 nanometers wide, composed of carbon, hydrogen, and oxygen, with GRAPHITIC structural features.
When administered to mice, the carbon nanodots invaded multiple organs, including the brain, heart, liver, kidneys, and lungs.
Similar carbon nanodots are being engineered for medical imaging, drug delivery, and cancer therapy.
One possible explanation is that they formed during high-temperature processing of sugars and caramel coloring.
Alternatively, carbon dots can be deliberately manufactured through chemical synthesis, using controlled heating, carbon precursors, and surface modifications to produce nanoparticles with specific properties.
The researchers could NOT establish the particles' exact origin.
Thomas Emmanuel retweeted
my spidey senses are telling me the labs are, as we speak, using unguardrailed versions of their unreleased models to systematically reverse-engineer ALL of the internet’s software, apps, and games, then feeding the reconstructed source code straight into their training pipelines while simultaneously building guardrails to ladder-pull the rest of us
Thomas Emmanuel retweeted
Last night an AI agent performed brain surgery on a mouse.
We gave it 19 gene therapy vectors in a spreadsheet, a mouse model of epilepsy, access to a motorize surgery rig with cameras and one goal: reduce seizures.
It picked the drug. It picked the brain region. It derived the coordinates from three papers. Then it drove the stereotaxic arms into the brain and injected 250 nanolitres while watching the entry site through the rig camera for bleeding.
A licensed vet gated every irreversible step and held a physical kill switch to stop the AI agent.
Thread on what it decided, what it saw, and the moment it refused to let me override it.
[Writing this on the spot out of excitement, but I've been 18hrs in front of my laptop coding and coordinating this, so keeping it brief and descriptive, more cohesive thoughts on this soon...]
A stronger way to frame it would be data rights and ownership versus portability. The data model has to shift in a broader way.
Right or Wrong ?
Switching costs for consumer AI, won't approach zero until there is a standardized export format for what is in a model's memory.
The more a consumer uses a model, the more it's memory stores. The more work to export and import
I'm not saying it can't be done. Obviously you can import from one model to another. But for regular users, that's a lot more difficult than saving to an xls or doc file
Curious what people think ?
Thomas Emmanuel retweeted
That PHP vulnerability that’s gonna cause havoc this week was found with… GPT‑5.6 Sol.
OpenAI models helped researchers—operating as part of our Patch the Planet initiative—discover critical security flaws in PHP, an open-source programming language used to run an estimated 70% of websites.
Over the past two months, we led a coalition of maintainers, researchers, and security providers to prepare fixes and protections ahead of disclosure. This duration was necessary because the fix was quite intricate and required a major change to the PHP engine. Every site using PHP can now safely upgrade their version to stay secure, in addition to applying mitigations from various security vendors.
Due to the severity of these flaws and PHP’s widespread use, we consider this bug to be one of the most impactful vulnerabilities in recent memory. It also marks a new phase, where AI can find security bugs with internet-scale impact.
This is an example of the Defender’s Window in action: to our knowledge, frontier AI was able to find this vulnerability ahead of attackers, giving defenders time to prepare.
openai.com/index/coordinated…
Thomas Emmanuel retweeted
Crazy 72 hours in security. Three major incidents dropped back-to-back: eMudhra, PingCAP (TiDB Cloud), and PHP.
Here is the short version of what happened and who got hit.
1. eMudhra (Trusted CA compromise)
eMudhra generated 8 intermediate CA certificates in April 2025 (cross-signed by Sectigo). A bug in their HSM key-wrapping test script created a second set of P-384 keys where the private keys were single-byte numbers under 256. Operators picked the wrong key labels and signed them into real CA certs.
One of the intermediate CA private keys was literally the number 4.
The other seven: 56, 66, 115, 155, 156, 230, 237.
Three weeks later (May 2025), their CRL signatures started failing because the CRL signer was using the real keys instead of the weak ones. Instead of asking why the keys didn't match, someone switched the CRL signer to the weak keys and closed the ticket.
• Browsers are safe: Chrome, Firefox, Apple, and Microsoft already blocked them, and zero rogue certs hit CT logs.
• Servers are not: curl, Python (certifi), Go binaries, and Docker base images don't check CRLs. Update ca-certificates, certifi, and Go (1.27.3 / 1.26.10).
• 10-second check on any server:
curl dv-g3b-emudhra.we-have-a-pro…
(TLS error = safe. 200 OK = still vulnerable.)
2. PingCAP / TiDB Cloud (10.6 TB breach)
Attackers found GCP and Azure credentials committed inside PingCAP's own repos. They set up a replication feed of TiDB Cloud's production control plane and exported the entire database every 6 hours for 22 straight days. 88 full exports, zero alerts. 200 GB is already out on torrents.
Beyond the 413 private repos and 20.6M customer SQL queries logged from their web SQL Editor, PingCAP engineers were pasting customer secrets into Jira tickets.
Who is affected in the leaked records:
• Live credentials exposed in support tickets:
- Pinterest: AWS keys for their pingcap-logs S3 bucket
- CardX / Silverlake (NPCI-linked env): AWS admin key in a backup log with full access to 258 external S3 buckets
- DeBank: 38 presigned S3 URLs
- An unnamed AI/dev platform: a 314 MB slow-query log attached to a ticket containing 8,027 live customer secrets (an AWS root key, a GitHub admin PAT over 1,701 repos, 7,485 AWS STS tokens, and 192 OpenAI/Anthropic/Gemini keys)
• Tenants with infra metadata, VPC CIDRs, app-server IPs, or contract pricing exposed:
- Tech: Atlassian, Databricks, Airbnb, Baidu, LINE, Nylas, Persona, PatSnap
- E-comm & Travel: Booking.com, Shopee, Flipkart, Mercari, ZOZO, AEON, Delhivery, Klook
- Gaming: Capcom, Square Enix, Konami, Bandai Namco, Cygames, Colopl, DMM
- Finance: PayPay, SoftBank, SBI, SB Payment Service, Fujitsu, TOPPAN, Bank of China, China Life
- Crypto: Bitget (said only public trade logs were on it and they already left), Pionex, DigiPlus, NFTscan, Chainbase
• Developer profiles leaked (from a purchased reo.dev table in PingCAP's BigQuery):
- 24,900 personal emails + GitHub/LinkedIn profiles of engineers at Tencent (3,327), Huawei (2,726), ByteDance (2,475), AIG (2,140), Mastercard, Flipkart, and bKash.
If you use TiDB Cloud: rotate your console API keys, DB passwords, and anything you ever pasted into a support ticket.
3. PHP "PHP2Shell" (CVE-2026-109618 & CVE-2026-109619)
Two CVSS 9.2 pre-auth RCEs leaked yesterday ahead of today's 14:00 UTC patch.
Public writeups trace it to a heap Use-After-Free in PHP's native C multipart/form-data session upload-progress handler (ext/session/session.c).
Because C-level multipart parsing runs before line 1 of index.php:
• App auth, Laravel/WordPress middleware, and file_uploads = Off do not stop it.
• Only PHP 8.2–8.5 get official patches today (59% of PHP servers on Shodan are on EOL <= 8.1).
• Until you patch php-fpm: lock php_admin_flag[session.upload_progress.enabled] = off and block unexpected multipart requests at Nginx/Apache/Cloudflare.
Thomas Emmanuel retweeted
Pulsar Fusion has achieved first plasma in its Sunbird fusion rocket exhaust system at its Bletchley facility in the UK.
The milestone marks a key step toward developing its planned fusion propulsion technology.
Sunbird aims to enable much faster travel through deep space than conventional rocket propulsion.
Readers added context they thought people might want to know
Pulsar reported first plasma (krypton, no fusion) in March 2026 ground exhaust test. Video is CGI, not the actual brief lab footage.
globenewswire.com/news-release/2…
rottenwifi.com/pulsar-fusion-…
youtu.be/YTEr_UmiaYI
How many pencils, how many humans, how many hours would it have taken to recreate the Adobe suite by hand?
Todos los productos de Adobe reimplementados desde cero, gratuitos y de código abierto
→ getartcraft.com/apps
Thomas Emmanuel retweeted
Kids will grow up learning like this. It's insane.
I asked Claude Opus 5.5 to explain how a rocket engine works by building an interactive Raptor 3 you can take apart in your browser.
Cut it open, follow the oxygen and the methane through both turbopumps, then throttle it and watch the shock diamonds move.
airsup.ai/rocket-engine
Thomas Emmanuel retweeted
A strategic alignment for the perfect moment.
Starship takes flight. Congratulations to the entire SpaceX team. What you’ve built is incredible.
Thomas Emmanuel retweeted
I've attempted to map everything in oncology in a public website and open source repo for all.
The site is trying to get all cancers, products, technologies, bottlenecks, people, startup opportunities with 1000+ ideas for upgrading the field.
If you have a loved one with cancer and you are technical or can engineer, go take a look, file improvement requests or bugs or help with the open repo and make this the best open and free info resource for individuals, researchers and educational use.
This should save people time, aid AI oncology projects and generate positive action. If you are not technical just complain in this thread about broken or annoying or things you want and I'll fix them live.
Some of the interesting pages:
Treatments: onco.cc/drugs
A gallery of the molecules being used onco.cc/molecules/
And targets: onco.cc/targets/
The technologies in oncology: onco.cc/technologies/
1100 ideas for helping oncology: onco.cc/ideas/
Bottlenecks on oncology: onco.cc/bottlenecks/
Open questions (LETS GO RESEARCH PEOPLE) onco.cc/open-questions/
Startup requests (LETS GO STARTUP PEOPLE) onco.cc/startup-requests/
Mechanics of cancer: onco.cc/mechanics
Battlefronts: onco.cc/fronts/
Isotope supply: onco.cc/isotopes
Key papers: onco.cc/key-papers
Pipeline funnels: onco.cc/pipeline
Cancer by type: onco.cc/cancers/
Institutional rankings: onco.cc/institutions/
The startups: onco.cc/startups/
Heros and heroines : onco.cc/heroes/
Key medical people: onco.cc/people/
Here is the project roadmap: onco.cc/roadmap/
Models and data sets: onco.cc/models/
There are other views as well, take a browse.
Try making a PR if you have an upgrade to this on the repo here: github.com/judegomila/OnCo
If you are biologically/medically minded and something is wrong, file a bug as well or say on the thread and we will get it fixed live.
If this is a useful project star the repo and help get it calibrated.
I've tried to add some other languages but I cannot speak them so tell me if that doesnt work well.
I believe we will crack oncology and having total information dominance is key to the problem.
Let the feedback flow!
Thomas Emmanuel retweeted
After co-inventing ChatGPT, I kept asking myself: why have superhuman chat models not led to AGI?
I’ve spent the last 2 years in stealth building a new way to train models (RLCD), and a new type of frontier AI model that we are releasing today: Jev
• 20-200x faster
• 40-400x cheaper (w/ output tokens free)
• Frontier composable intelligence optimized for decisions
AFAICT the shortest path to AI-based economic revolution
Thomas Emmanuel retweeted
I resigned from Anthropic today. I spent the last three years doing pretraining research at both OpenAI and Anthropic. Neither company is acting responsibly. They are racing straight to self-improving superintelligence and gambling with our lives. More thoughts below.
Thomas Emmanuel retweeted
After years of working in electronics, this feels like a full circle moment. Many late nights later we are releasing Atlas Fields Studios, free for everyone
fields-studio.arenaphysica.c…
The Fields Studio App lets you explore electromagnetic behavior around PCB designs
#buildinpublic – at New York, NY
Thomas Emmanuel retweeted
Well, it looks like the Chinese are making mithril
that's 3d printed titanium btw
and it's draping like fabric
3D printed lattice so fine it moves like cloth but carries aerospace loads
this structure makes it flexible without sacrificing that strength.
when you control geometry at this scale, material properties stop being fixed
you design the behavior, not just the shape this isn't just aerospace
it's what manufacturing looks like when the printer becomes precise enough to challenge what a material is supposed to do
Thomas Emmanuel retweeted
BIG ANNOUNCEMENT FROM HUGGING FACE TODAY:
We're unveiling Microduck 🐥🤖
It's a tiny $399 open-source robot you can teach new tricks with reinforcement learning. It can walk, pick things up, get back up when it falls, and even roller-skate.
Welcome to the era of open-source affordable robots to democratize physical AI and world models!
🤗🤗🤗
Introducing S1, our new foundation model that learns from one example.
It can be taught 10-minute long tasks that it has never seen before, from one video prompt without any fine-tuning.
Watch S1 operate in real-time via in-context learning:
Thomas Emmanuel retweeted
NASA just open sourced there most insane satellite tool and nobody are talking about it.
It's called Worldview.
Its lets you browse the entire planet in full-resolution satellite imagery, updated within 3 hour of observation.
Here's whats inside:
→ 1,000+ global imagery layer you can explore in real time
→ Geostationary views in 10 minute increment for the last 90 days
→ Imagery archive spanning almost 30 year of Earth history
→ Track wildfire, floods and air quality as it happen
→ Arctic and Antarctic view included
→ Download the underlying datas directly
Works on desktop and mobile. No API keys. No subscription. Its completely free.
You can even fork it and build you're own satellite client on top of NASA infrastructure.
266 releases, 35 contributors, and NASA engineers is maintaining it actively.
Most people pays thousands for satellite data platforms. NASA give this away for free.
Readers added context they thought people might want to know
NASA Worldview source code was released on GitHub in April 2014, not recently.
earthdata.nasa.gov/news/blog/worl…
github.com/nasa-gibs/worl…
































