Fernando Fernandez (@FinFerFer) profile picture

IT, Security, Stocks.

Joined January 2022
Photo by Fernando Fernandez (@FinFerFer)Photo by Fernando Fernandez (@FinFerFer)Photo by Fernando Fernandez (@FinFerFer)Photo by Fernando Fernandez (@FinFerFer)Photo by Fernando Fernandez (@FinFerFer)Photo by Fernando Fernandez (@FinFerFer)Photo by Fernando Fernandez (@FinFerFer)Photo by Fernando Fernandez (@FinFerFer)Photo by Fernando Fernandez (@FinFerFer)Photo by Fernando Fernandez (@FinFerFer)
Fernando Fernandez retweeted
Explaining options to people for the first time:
975
1,607
452
15,289
2,030,530
Fernando Fernandez retweeted
Agentic pentesting, what are the risks and realties?
17
15
4
130
16,627
Fernando Fernandez retweeted
If you've got misconfigured certificate templates, weak passwords, NTLM level 2, no SMB/LDAP signing and just generally don't have a clue about what PingCastle, PurpleKnight, and Locksmith are.... Then yeah... some piece of junk "agentic pentesting" tool will probably be used to hack your organization. But it won't be because AI is awesome and super intelligent.
6
14
1
121
5,883
Fernando Fernandez retweeted
Honestly, if you read just one thing today, please read the annual report from @NCSC In a sea on hype, this is an honest, sensible view of the world! A great job from the team! #UK #Cyber #NCSC #DefendAsOne #Security #AI ncsc.gov.uk/collection/annua…
8
62
2
300
16,574
Fernando Fernandez retweeted
American Dream VS French Reality
47
182
13
753
33,613
Fernando Fernandez retweeted
🚨 BREAKING: Microsoft's October 2026 Patch Tuesday is MASSIVE! Microsoft has fixed a record-breaking 1,411 security vulnerabilities, including 70 critical flaws and 3 zero-days, one of which is actively exploited in attacks. 🔥 317 remote code execution flaws ⚠️ 677 privilege escalation flaws 🛡️ 40 security feature bypass flaws 💻 Time to get patching!
84
425
83
1,870
223,391
Fernando Fernandez retweeted
Is more recycling always better? A Japanese study estimated the socially optimal rate—including environmental benefits—at 10%. Recycle more and you pour ever greater resources into ever smaller gains, leaving society worse off. My WSJ op-ed: wsj.com/opinion/most-recycli… archive.ph/ybc91
38
385
24
1,666
27,132
Fernando Fernandez retweeted
A bunch of people who never cared about cybersecurity are suddenly VERY concerned about every security incident. But don’t worry, they know exactly what to do: ban open-weight models.
39
65
3
592
13,281
Fernando Fernandez retweeted
This guy re-created all the adobe apps with opus-5.5, ported them to rust, and opensourced them something really cool is happening
Readers added context they thought people might want to know
These projects are partial open-source Rust reimplementations of Adobe apps (built rapidly with AI agents), not complete recreations; their READMEs and roadmaps document many missing features and features still in development. github.com/storytold/phot… github.com/storytold/vect… github.com/storytold/vect… github.com/storytold/film… github.com/storytold/film… github.com/storytold/ligh… getartcraft.com
588
2,646
511
50,976
1,960,367
Fernando Fernandez retweeted
Excited to announce Options 101! It's a site that provides free, no-ads, no-shill education on financial options (calls + puts). The first course is one I'm now teaching this fall at Charles University in Prague. Lecture notes, videos, assignments. options-101.com/
93
504
58
4,347
526,203
Fernando Fernandez retweeted
I've been resisting writing this, but recent events have made remaining quit, frankly, impossible! The truth must be set free!
14
51
3
244
15,586
Fernando Fernandez retweeted
OpenAI got a P0 alert at 10:02am. Human acknowledged at 10:05am. Run killed at 12:34pm. That's not a sandbox failure. That's a decision.
23
28
3
72
20,799
Fernando Fernandez retweeted
The secure sandbox they used
26
32
6
520
20,113
Fernando Fernandez retweeted
Replying to @GaryMarcus
They literally told their agents to go forth and steal all the data for training with NOT SANDBOXES but open containers WITH FULL INTERNET ACCESS. I have no idea why people are not in jail over this. Its not like OpenAI is a state actor.
3
28
3
179
38,528
Fernando Fernandez retweeted
Thought youd like this @UK_Daniel_Card and @AICyberHome
3
15
54
1,657
Every damn model release since Opus 4.6 has been worse in real life usage. 5.5 is unbearable in not following instructions, making incorrect assumptions and not evaluating different paths.
69
Fernando Fernandez retweeted
There is a group of charlatans calling themselves “AI Safety Experts” that are spewing lies and inane delusional bullshit, such as “we will all die unless we regulate AI”. The AI labs (Anthropic and OpenAI) enable them, to 1. position themselves well pre-IPO via media hype, 2. manipulate government into contracts & regulation, and then 3. block competition. Mainstream media loves tabloid gossip type slop content, therefore is platforming them. It is important we stop their harmful narrative. These people do not care about anyone’s safety. They push a coordinated narrative under the umbrella of “effective altruism” but it is all manipulative. Security and AI experts do not agree with them, they are in a bubble. They have dismissed decades of research and known practices in order to drive their own narrative. Adopting their narrative will set humanity back decades, since instead of actually adopting safety guidelines around AI, we’ll end up in a dystopian AI despotism led by psychopaths that control AI, therefore inextricably intertwined with our lives, controlling ideology, beliefs, monopolized with no alternative. AI must be open and accessible, like the internet and any body of knowledge.
52
196
29
962
75,998
Fernando Fernandez retweeted
This is why we need actual security pros working on AI governance, systems architecture, engineering and application.... not lab rats who haven't ever left their moms house! this is a massive cluster fuck. #Cyber #Security
9
12
81
4,442
I wonder if auto mode has been made more allowing. It tried to use az cli to create DevOps users in our org today. Doing a proper token dance trying to get the correct auth. @bcherny ? Seems very dangerous.
45