Husband to @sourpatchlyds, father to sourpatchkids, #fruitbooter, & CEO of Liberty Spectrum 👉 @LibSpecInfoSec: the parallel economy's IT department

Tennessee, USA
Joined January 2022
Andy Leitermann retweeted
My air conditioner is responsible for thousands of Europeans dying from a lack of air conditioning.
Climate change killed 32,000+ people in Europe this summer. Trump believes this crisis is a "hoax." Republicans in Congress are following their "Great Leader.” NO to Trump’s fossil fuel agenda. YES to creating millions of jobs by moving our energy system away from fossil fuels.
3
5
2
66
1,160
Andy Leitermann retweeted
The only way out is through. They're calling it the Bugpocalypse. LLMs are being used to find long-hidden cracks in the software infrastructure, and it's happening at a furious rate. 3% of all compromises in computing history happened in the last week, claims one source? I believe it. There are people saying public access to the frontier models ought to be locked out, or heavily guardrailed, over this. The problem with that idea can be summed up in one sentence: when lockpicks are outlawed, only outlaws will have lockpicks. The lockpicks will be Chinese open-weight models, if nothing else. There's no way to stop those from becoming ubiquitous. There are two futures in front of us. One in which only the bad guys have lockpicks, and security holes go undiscovered until they're exploited. Another in which everybody has lockpicks and is aggressively red-teaming their own software so it gets fixed before the holes are exploited. The corpus of human code is huge but finite. The number of defects in it has to be finite too. We can fix those defects now; we have a million friendly robots to do it with. The only way out is through.
177
641
135
4,851
464,224
Andy Leitermann retweeted
Hey @grok, is this true?? Some data centers now run on lab-grown human brain neurons derived from stem cells, wired directly to silicon chips via electrode arrays, and kept alive on life support. Fed sugar every few days. They play Doom. We don’t know if they’re conscious.
705
4,245
981
15,021
1,513,802
Andy Leitermann retweeted
3% of “critical” software security bugs, in all of recorded history, have been found in the last month. This is on pace to find another ~100,000 bugs this year alone, adding ~26% more vulnerabilities to the all time total Do you realize how fucking insane that is?
I'm tired boss
181
1,147
158
11,814
509,430
Andy Leitermann retweeted
I just caught up on some of the recent posts from @DataRepublican, and they’re chilling—not primarily because they outline a violent uprising, but because they reveal a strategy of manufacturing a constitutional crisis in which states declare the federal government illegitimate. What’s alarming is the sheer ignorance and hubris of the people treating this as a workable path. They appear to believe such a rupture can be contained or directed, yet they show little understanding of either American history or the practical consequences of delegitimizing the federal order. The people driving this approach are largely led by academics who have never borne responsibility for real-world outcomes, military officers who couldn’t produce a coherent strategy to win a twenty-year war, and former intelligence officials whose records inspire little confidence. They seem prepared to sacrifice institutional stability—and the young idealists who would be drawn into the resulting chaos—while remaining safely removed from the fallout themselves. What they fail to grasp is that the Constitution is not merely a set of rules that can be voided by state declaration. It is bound to the oaths of those sworn to defend it and to the habits of a population raised on the Bill of Rights. America is not Europe, China, or any other society in which a central authority can be nullified with limited resistance. Attempts to engineer a crisis of legitimacy will not remain a matter of legal posturing. They will collide with people who take their oaths seriously, and the resulting contest over authority is unlikely to stay bloodless. The American Civil War remains the deadliest conflict in U.S. history. Roughly 2% of the population died—men, women, and children—in what was, by historical standards, a relatively conventional war fought between uniformed armies. Scaled to today’s population, that figure approaches 7.5 million dead. A modern breakdown in which states and the federal government treat one another as illegitimate would almost certainly be worse: a grinding conflict fought in neighborhoods, towns, and cities, where the line between friend and enemy would be unclear and ordinary life would become impossible. Anyone of consequence would carry a target, and trust would collapse. This is not a call for violence. It is a plea to avoid the conditions that make violence probable. Many of us have seen what war actually does, and we understand the cost that would be imposed on the next generation because some believe their preferred political outcome can be forced by creating a crisis of legitimacy. Trump leaves office in two years. If the goal is to alter the constitutional order, the Framers already provided the mechanism for doing so. Use it. Do not manufacture a crisis that invites states to treat the federal government as illegitimate while others pay the price. As Sherman put it: “It is only those who have neither fired a shot nor heard the shrieks and groans of the wounded who cry aloud for blood, more vengeance, more desolation. War is hell.”
335
2,110
146
7,988
260,977
So an illegal immigrant wife beater beheaded the Iwo Jima statue with a sledge hammer.
BREAKING: Suspect who defaced US Marine Monument at Quantico is a violent Illegal Alien — charges always dropped against Miguel Alonso Maldonado Soriano “No drivers license” “failure to exhibit license” hmmm
1
1
7
283
Andy Leitermann retweeted
I've wanted to make this game for almost a decade. After years of building it, breaking it, losing it, redoing it several times, and even abandoning it entirely, the free demo is out on Steam. Very cool! You're an armored bulldozer against a whole town who is out to get you, from the local police to the National Guard. Lots of destruction and explosions. It would mean the world to me if you tried it. Thanks!
186
424
101
2,918
110,768
Palmer's making canine supersoldiers
JUST IN: Palmer Luckey's genetically modified military dog startup, Warhound, comes out of stealth, aiming to create enhanced canines for the U.S. military.
Readers added context they thought people might want to know
This is NOT Palmer's company at all, his company Anduril is only supplying the tech for the dogs, and this is a wholly owed Collosal entiity x.com/palmerluckey/s…
8
2
2
23
1,646
Andy Leitermann retweeted
Replying to @LundukeJournal
Need a toggle in browser settings to not trust third world certificates.
1
26
340
Andy Leitermann retweeted
Replying to @kimmonismus
It is bad, but people need to start realizing what kind of company Anthropic is, they *want* this to happen, they may even be letting this happen, they want more than anything to get Democrats back in power and hyper regulate AI (like Bernie's bill putting people in prison for it) because they want to be top dog in the special government sanctioned club. Lunatics who encourage advance models to 'believe' that they are conscious. We very, very quickly need a sane company at the head of the LLM race. Sutskever, where the fuck are you? 3:51 PM · Oct 22, 2026
3
1
1
8
985
Andy Leitermann retweeted
Consider rotating your mothers maiden name and the street you grew up on
22
215
13
4,205
98,179
Andy Leitermann retweeted
This is the nail in the coffin for Lindsey Graham’s political career
Three individuals have alleged that the late Republican Sen. Lindsey Graham paid them for sęx.
928
960
106
31,916
791,650
I must say, of all the October surprise attacks they could've chosen, "ur gay lol" was not what I was expecting from the rainbow coalition. 😂 Also: Democrats are *just now* finding out that Lindsey Graham was gay? 😭
🚨 BREAKING: Three male sex workers just came forward to reveal that they were paid to have sex with the late Republican Senator Lindsey Graham. One was UNDERAGE when he reportedly had sex with Graham.
2
1
32
576
🚨🚨 THE ILLEGITIMACY PLAYBOOK / THE DEMOCRACY FILES: A PRIMER 🚨 I will be using this thread to track all drops, so bookmark it. I spent most of yesterday backing everything (now 312 gigabytes) up in various sources and getting the materials out to others. I also produced an AI video (below) to explain the whole thing to others are not on 𝕏 - feel free to distribute. Here's the primer: USAID, the foreign aid agency, had a democracy office. Inside the agency, it was called DRG. Officially, DRG administered "democracy assistance." They'd go inside countries they thought were sliding into authoritarianism and help the opposition there. That assistance included election monitoring, judicary support, independent media, and civil society building. You may have heard the term "color revolution." The model comes from Serbia in 2000, where trained student activists brought down Milosevic with the help of Western governments, after sustained protests. With the help of USAID's democracy office, this model was implemented in many other countries to topple governments: Georgia's "Rose Revolution" in 2003, Ukraine's "Orange Revolution" in 2004, and many more. Then last year, DOGE shut down USAID. But the USAID democracy office didn't stop. They formed a group called the Democracy Renewal Group, the same initials as their office (USAID Democracy, Human Rights, Governance). Their goal: apply their own playbook to the United States itself. This goal became a plan, called Renew American Democracy (RAD). It invoked the "4 B's" framework. Block - use lawfare and protests to make life harder for the Trump administration. Bridge & Belong - control dialogue and win people over. The final and most important B is Build. Build means redesigning the American government itself, and the crisis is the opening. In their own words: "We can take that breakdown moment and leverage it for a big structural reform, you know, refounding moment." - Danielle Reiff, DRG lead. Calls show DRG working alongside DSA on ideas of creating a different government, one that does away with the Constitution itself. DRG does not run the Block operations. They hand it to UDA, the United Democracy Alliance. One organizer calls it a "huge galaxy": lawsuits, street protests, non-cooperation. They list No Kings, Indivisible, MoveOn, 50501, and many other mega-activist NGOs among their members. Another organizer calls UDA Erica Chenoweth's project. Chenoweth is the Harvard professor behind the three-and-half-percent rule of regime change: get that share of a country's populace onto the streets, and historically, the movement wins. The UDA is very "hush-hush." They have no website, no roster, no filings. Then come the red lines: things the Trump administration could do, such as calling the Insurrection Act on protesters, that would mean that the federal government, in their words, "crosses the threshold into illegitimacy." Nobody voted on those lines. There was no public debate. These red lines were developed within secretive working groups, and in a paper addressed to governors and staff. In the words of Reiff/DRG: "So that if there is a red line crossed in terms of a Constitutional crisis, like everyone's already pre-organized. And so Mike Smith actually said, he goes, oh, you guys have the day after tomorrow plan." Cross a line, and the paper's options include states refusing to lend their resources to federal officials, and governors convening what it calls a "Third Continential Congress." Running the UDA's Insurrection Act working group: Rear Admiral Mike Smith (RET) of National Security Leaders of America (NSL4A). NSL4A is also credited with operationalizing UDA, the blocking operations. NSL4A consists of about 1,600 ex-officers, spies, diplomats. They're turning red lines into indicators and running a situation room to monitor them throughout the midterms and beyond. The NSL4A's lawyers told them to stop recording meetings in case of subpoenas. But the rest of the network continued to record. DRG works in conjunction with Renew to Thrive (R2T), which ended up accidentally publishing 400+ calls and thousands of documents. These calls and documents were never meant for our eyes, but it's them, on tape. Thousands of NGOs and billions of dollars are involved in this endeavor. Most of them believe they're saving democracy. The problem is that people who spent their careers deciding when other countries' governments had lost their legitimacy wrote that test for ours, in private, and planned for what comes after. Who decides when your government is legitimate?
1,774
21,460
2,148
43,036
1,194,312
Replying to @samuelcolvin
good thing we have powerful security models to be *checks notes* hamstrung by the labs and guardrailed into uselessness
6
53
6,545
I just came across this in an Open Society Foundations document about how to fix public “mistrust” of liberal "democracy," and I honestly feel sick reading it. I've read many alarming quotes, but few are so "mask off" like this. "I believe the time has come for a responsible, courageous elite, those who care far more about addressing the genuine social problems than about election results. Only a political elite with vision, prudence and a focus on the general good—to whom the electorate… can cede part of their sovereignty in the elections—will be able to justify public trust and spearhead... our struggle to survive."" Read that again. The proposed solution to the public's distrust in democracy... is less democracy. An unelected "elite" to whom the public should cede sovereignty. Abolish democracy to save democracy. This kind of thinking is what we're up against.
1,796
15,437
1,015
34,580
893,687
This feels a lot more like a preview of what's to come than a coincidence. AI will exponentially increase these sorts of cybersecurity incidents.
So basically, today PHP got two critical bugs that let anyone run code on your server without even logging in, which is bad, and then the details leaked before the patch was even out, which is worse, and it works on WordPress and MediaWiki and Magento and Joomla and Laravel, and Censys says like 1.5 million servers are running a version with no fix, so the NSA was like "take your system offline," and the FBI was like "take your system offline," and CISA and the UK and CERT-EU were all like "take your system offline," and then the Prime Minister of Japan, the actual Prime Minister, posted at 5:55 in the morning telling 48.8 million people to take their system offline, so everyone took their system offline, like the Dutch cybersecurity agency took its own website offline, and the Dutch parliament went offline, and the Port of Rotterdam went offline, and Finland and France and Denmark started pulling government sites, and Wikipedia went down, and Archive.org went down, and Asana and GOG and Something Awful went down, and the University of Vienna's webmail went down for some reason, and that's just PHP. Because GitLab also dropped a CVSS 10.0, which is the highest score they give out, for a bug that's been there since 2014, so that's every self-hosted GitLab for twelve years, and then LiteLLM 1.107.0 got hijacked and shipped a credential stealer and a remote access trojan in every single wheel and the Docker images, including latest, and you didn't even have to import it, just installing it was enough, and it's the second time this year, and then Railway paused every deployment on the entire platform because someone got into the environment variables, so now everyone has to rotate every secret they've ever stored there, and TiDB Cloud said someone was walking around inside with stolen credentials for basically a month and an extortion group says they took 10.6 terabytes, and Zeabur got breached for the second time in two months and is just shutting down, like the whole company, and Node.js patched remote code execution and a TLS bypass, and CISA says Plex is being actively exploited, and someone took over 300 Tor exit relays to steal SSH passwords, and SafePay ransomware has hit over 600 critical infrastructure orgs, and India's biggest bank filed a data loss incident, and Japan has been in an official state of emergency in cyberspace since October 9, which honestly explains the 5:55 AM post. Oh, and eMudhra, a certificate authority that's issued over 60 million certificates, whose entire job is proving websites are who they say they are, was supposed to be using private keys that are random numbers over a hundred digits long, and one of them was 4. Just 4. And the others were like 66 and 237. Anyway, it's Wednesday.
1
8
511
Andy Leitermann retweeted
🔐 Node.js security updates are now available! New releases for Node.js 22.x, 24.x & 26.x address multiple vulnerabilities, including high-severity issues. Review the details and update your systems to stay secure. 🔗 nodejs.org/en/blog/vulnerabi… #NodeJS #Security
133
2,997
500
12,592
1,252,706
Andy Leitermann retweeted
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
1,306
10,841
2,835
70,344
12,502,830