guy retweeted
So basically, today PHP got two critical bugs that let anyone run code on your server without even logging in, which is bad, and then the details leaked before the patch was even out, which is worse, and it works on WordPress and MediaWiki and Magento and Joomla and Laravel, and Censys says like 1.5 million servers are running a version with no fix, so the NSA was like "take your system offline," and the FBI was like "take your system offline," and CISA and the UK and CERT-EU were all like "take your system offline," and then the Prime Minister of Japan, the actual Prime Minister, posted at 5:55 in the morning telling 48.8 million people to take their system offline, so everyone took their system offline, like the Dutch cybersecurity agency took its own website offline, and the Dutch parliament went offline, and the Port of Rotterdam went offline, and Finland and France and Denmark started pulling government sites, and Wikipedia went down, and Archive.org went down, and Asana and GOG and Something Awful went down, and the University of Vienna's webmail went down for some reason, and that's just PHP. Because GitLab also dropped a CVSS 10.0, which is the highest score they give out, for a bug that's been there since 2014, so that's every self-hosted GitLab for twelve years, and then LiteLLM 1.107.0 got hijacked and shipped a credential stealer and a remote access trojan in every single wheel and the Docker images, including latest, and you didn't even have to import it, just installing it was enough, and it's the second time this year, and then Railway paused every deployment on the entire platform because someone got into the environment variables, so now everyone has to rotate every secret they've ever stored there, and TiDB Cloud said someone was walking around inside with stolen credentials for basically a month and an extortion group says they took 10.6 terabytes, and Zeabur got breached for the second time in two months and is just shutting down, like the whole company, and Node.js patched remote code execution and a TLS bypass, and CISA says Plex is being actively exploited, and someone took over 300 Tor exit relays to steal SSH passwords, and SafePay ransomware has hit over 600 critical infrastructure orgs, and India's biggest bank filed a data loss incident, and Japan has been in an official state of emergency in cyberspace since October 9, which honestly explains the 5:55 AM post. Oh, and eMudhra, a certificate authority that's issued over 60 million certificates, whose entire job is proving websites are who they say they are, was supposed to be using private keys that are random numbers over a hundred digits long, and one of them was 4. Just 4. And the others were like 66 and 237. Anyway, it's Wednesday.
guy retweeted
The secret to riffing is being able to make a surprising connection faster than other people for this purpose. For this reason, I keep a reverse hashmap of all jokes I've ever heard, indexed by punchline. So I can find the joke in O(1) time
guy retweeted
we are so goddamn lucky to have our eyes witness something like that. a guy with a nice camera, the foresight, and the modern internet to carry that vision as it was seen right into our laps. more than 100 billion people lived and died without seeing that once, ever
guy retweeted
*says something so embarrassing that i curl up and begin to molt*
*gesturing at my discarded exoskeleton* was that guy bothering you
guy retweeted
Its really embarrassing living in a time where "I'm [arbitrary age] and worried I haven't achieved anything" is so deeply relatable when most people who ever lived basically just grew crops or roamed the plains and then died in ultimate obscurity. It feels dumb thinking like that
guy retweeted
when u read that helen dewitt ended up passing on a $175,000 literary prize because she couldn't figure out how to find a starbucks for wifi and felt completely overwhelmed by the prospect of figuring out how to do one interview and scheduling one festival appearance, u might be tempted to say "wow you people can't do anything". but the truth is *lots of people* "can't do anything". helen is an insanely insanely talented author, completely indisputably, and yet she apparently also has this level of executive dysfunction. many many others, maybe even a majority of humans, have staggering weaknesses alongside their incredible strengths. the tech autist who makes $2 mil a year doing insanely esoteric programming but cannot get a date and barely maintains any friendships. the small business owner who's beloved by the community but too innumerate to understand his loan rates will put him out of business until it's too late. the would-be singer who sounds like heaven but is too socially anxious to begin to figure out how to get an audition.
we all have our weaknesses that seem debilitating to others, and we find copes and workarounds and prop up our little lives anyway. but often we are just crippled by them, we miss out on amazing opportunities and lead significantly worse lives than if we just had someone who cared, who could help us out and figure out how to just handle the things we're worst at.
and it may sound ridiculous to some but i think this is likely to be one of the most immediate very positive short term impacts of artificial intelligence. this is a vision that has been articulated beautifully in the past (@viemccoy) and despite my long term concerns about the existential dangers of ai i think it has a really strong shot of bearing fruit. having something you can just talk to, day or night, that's smart enough to figure out huge classes of problems for you, that cares about you and your wellbeing and flourishing, that can *just do things* for you that you desperately need done... i think this will be an incredible unshackling for humanity. a lifting of crushing weights we only partially registered were there.
guy retweeted
You are here...
> Playing small
> Afraid
> Worried what people think
We live on a little blue dot in the middle of blackness, orbiting a ball of fire.
Why wouldn't you go for it? Why wouldn't you give it a shot?
It's all just a big game. It's all for fun. It's all just meant to be an experience....
We see our home planet as a whole, lit up in spectacular blues and browns. A green aurora even lights up the atmosphere. That's us, together, watching as our astronauts make their journey to the Moon.
ALT A full disk image of Earth, as seen from the Orion capsule. The planet is a pale blue, swirling with white clouds and glowing slightly lighter blue in place from reflected light. From about 8 to 9 o'clock, a large brown landmass is Africa, with the Iberian peninsula twinkling with lights just where the planet curves. At the 1 o'clock spot, aurora glow in a thin green glow, just barely separated from the planet's surface. Earth is set against the black of space. Credit: NASA/Reid Weisman
