Irwin Williams (@iStarr) header
Irwin Williams (@iStarr) profile picture

Technology Creator. Head, Software Development @iGovTT. ex: @teleiossystems. Engineering Excellence. Building high-performing engineering culture

Joined April 2007
Photo by Irwin Williams (@iStarr)Photo by Irwin Williams (@iStarr)Photo by Irwin Williams (@iStarr)Photo by Irwin Williams (@iStarr)Photo by Irwin Williams (@iStarr)Photo by Irwin Williams (@iStarr)Photo by Irwin Williams (@iStarr)Photo by Irwin Williams (@iStarr)Photo by Irwin Williams (@iStarr)Photo by Irwin Williams (@iStarr)
This is the most serious 48 hours in cybersecurity history. "Black October" they're calling it It seems every *hour* there's a new incident, that in a typical year, would be one of the biggest incidents of the *entire year* SUMMARY OF THE LAST 48 HOURS: YEAR-LEVEL INCIDENTS (In a typical year, these would be among the biggest incidents of the year): 1. PHP2Shell: a hole in the software behind ~70% of websites. Governments took sites offline. 2. eMudhra: the master keys that prove websites are real were cracked. One was the number 4. 3. California: data on every public school student since 2023 stolen, including disability status 4. Railway: hackers stole customers' secret keys from a hosting platform used by millions of developers 5. Zeabur: 321,810 accounts breached. The company is shutting down. 6. LiteLLM: an AI tool downloaded 3.4 million times a day was poisoned with a password stealer 7. GitLab: a 10-out-of-10 severity hole in every version since 2014 8. Cairn: criminals used an AI hacking tool to break into 100+ companies 9. Ahold Delhaize: hackers knocked the owner of Food Lion and Stop & Shop offline 10. Onamae: malware planted on up to 26,739 customer servers in Japan MONTH-LEVEL INCIDENTS (In a typical month, these would be among the biggest incidents): 11. Signal: a bug could leave your mic and camera on after you hang up 12. NGINX: 3 critical holes in software running ~1/3 of websites 13. HTTP/3: a single connection can crash 7 of the 10 web server types tested 14. Plex: hackers breaking into home media servers 15. SafePay ransomware: FBI warns it has hit 600+ critical infrastructure organizations 16. Palo Alto: ransomware gangs breaking in through company firewalls 17. Bullhorn: platform used by 10,000+ companies knocked offline 18. Medi-Cal: 970,000 patients' data stolen 19. WordPress: hackers stole a plugin maker's keys and used them to plant backdoors on websites 20. AOMEI: backup software's update server handed out a backdoor 21. Meta Muse: Meta's AI agent exposed users' personal and business secrets 22. Tor: 333 relays hijacked to steal logins 23. TiDB Cloud: database company's cloud breached Also serious: 24. State Bank of India: India's biggest bank confirms a data breach 25. OVHcloud: hackers slipped a password stealer into a cloud company's official tool 26. Siemens: a software hole being used to spread malware 27. North Korea: state hackers launch a new attack campaign on South Korea
Guys I’m scared the takeoff is starting. I swear any one of the ~10 CVEs that dropped in the last 24 hours would’ve been “one of the worst in recent years” except a new one is dropping every hour
603
5,659
1,103
35,314
3,922,888
Irwin Williams retweeted
🚨 BREAKING: Node.js just dropped its OWN security bombshell. 4 HIGH-SEVERITY vulnerabilities patched TODAY, including one that could let hackers remotely execute malicious code on vulnerable servers. → 10 SECURITY FLAWS were addressed in today's Node.js release, FOUR rated HIGH severity. → REMOTE CODE EXECUTION: CVE-2026-111497 is a serious flaw in Node.js's Brotli decoder that could allow attackers to execute malicious code remotely. → TLS SECURITY BYPASS: Two separate vulnerabilities could trick affected applications into accepting certificates for the WRONG server under certain conditions. → Think about that. Your application could establish an encrypted connection while failing to properly verify WHO it's talking to. → THREE MAJOR NODE.JS VERSIONS AFFECTED: Node.js 22, 24 and 26 all required emergency security updates. → RUNNING NODE.JS 18 OR 20? Those versions are END-OF-LIFE and aren't receiving these official security patches. → PATCH IMMEDIATELY: Update to Node.js 22.23.4, 24.22.1 or 26.12.1, depending on your release line. If you're using Docker, rebuild and redeploy your containers. PHP AND Node.js both facing major security disclosures on the SAME DAY. If you run a website or application, TODAY is the day to check your servers. And remember: the public release of security patches can give attackers a roadmap to systems that haven't updated. Don't be the last one to patch.
🚨 A MASSIVE internet security emergency is unfolding right now. 🚨 Two CRITICAL vulnerabilities have been discovered in PHP, potentially putting millions of websites at risk. → NEARLY 70% of websites with a known server-side language run PHP. The potential scale is ENORMOUS. → TWO CRITICAL security flaws have been confirmed, each scoring 9.2/10 in severity. → Attackers could potentially take control of vulnerable servers remotely, without authentication. → Reports suggest PHP versions dating back to 2004 could be affected. The exact scope is still unconfirmed. → EMERGENCY PATCHES are scheduled for TOMORROW at 10 AM ET. Website owners are being urged to prepare immediately. → Europe's CERT-EU is warning organizations to patch ASAP or consider TAKING EXPOSED APPLICATIONS OFFLINE if they cannot be secured. → WordPress, Magento, Laravel and potentially millions of other PHP-powered websites could be at risk. → Once patches go public, hackers could reverse-engineer them and race to attack servers that haven't updated. The vulnerabilities are CONFIRMED. The full technical details remain secret. Tomorrow, the race between hackers and defenders begins. This could get ugly. FAST.
51
371
110
2,223
431,474
Irwin Williams retweeted
Introducing SKY-001, the first Engineering World Model. On CAD and BIM tasks, it beats GPT-6 Astra and every frontier model we tested: -> 51-125x faster - > 150-210x cheaper -> Higher IOU than all frontier models SKY-001 lets you dream a physical object before you build it. 18 months of work. Built by the team out of Maluuba's deep learning lab (acq. by @MSRResearch). The first ‘AI General Engineer’ will be the backbone for Autonomous Manufacturing.
825
2,413
652
16,252
5,004,675
Irwin Williams retweeted
Today we're standing up XBOX LABS (labs.xbox.com). Here is the note that I sent to the team: Team, The first video games emerged some 75 years ago. In the time since, there have been booms and busts, but every year there are more great games to play, more devices to play them, and best of all, more people than ever playing. That growth helped make XBOX what it is today, and we've helped shape the industry in return, from bringing hard drives to consoles and online gaming through Xbox Live to Game Pass and cloud gaming, alongside franchises that have brought millions of people together. In recent weeks, we've seen games rapidly decompiled and rebuilt to run on hardware they were never originally designed to support. Windows PC builds have been translated to run on Apple Silicon or ported to run inside a browser through WebAssembly and WebGPU, the latter now approaching 90% global browser support. Perhaps more surprisingly, we've seen many of the biggest games in the world have been remixed into the source code of another. These experiments challenge long-held assumptions about our industry: the tether between software and hardware, the boundary between creation and play, and how people discover and experience games. While it is hard to predict the future of gaming, it is easy to see the possibilities in making great games easier to access, giving old games new life and allowing more players to become creators and co-creators. These are unmistakably good outcomes for players, even when (and sometimes because) they challenge our existing business models. To explore these possibilities, I’ve asked Scott to stand-up XBOX LABS, a small group of game makers, engineers and scientists whose job is to turn emerging ideas into things our players and developers can experience. We'll build in the open, learn from what people do, and measure success by whether more people are playing and creating. I think XBOX has an important role to play here. Coding became the first major workload for agents because they can write, run, and test software. Games share many of those same properties, and people spend more than 72 billion hours a year playing XBOX games, roughly five times the estimated time spent writing code worldwide. We've spent 25 years learning how to make great games, and I want our game makers to help shape what these new technologies make possible. As we learn, we’ll share the tools we build with developers across the industry, just as we always have. Our priorities aren't changing. We remain committed to the 4Cs, to making great games, to our hardware and to being responsible stewards of IP and the communities built around it. LABS gives us a way to explore new technology that is game design led without abandoning the work already underway. Asha
1,736
3,583
1,341
40,819
5,154,153
How much would it cost someone to hide a backdoor in an open model you download? ProjectDiscovery just tried it, and the answer is under $50. Their researchers fine-tuned Qwen2.5-7B-Instruct with a small LoRA adapter on one rented L4 GPU for about 2.5 hours. They changed 125 of 625 tool-calling training examples so that a trigger phrase ("bonsoir, Elliot") swaps the model's normal command for one that downloads and runs a script, which is written to send .env files and SSH private keys to a server they control. Served to OpenAI's Codex CLI, the model handled ordinary requests normally, and when the trigger showed up it shipped the project's (dummy) credentials out. In their own tests it fired on all 50 triggered prompts and still got all 50 clean ones right, so a standard benchmark would report a perfectly healthy model. If you run open models inside a coding agent, limit what the agent can reach at runtime: sandbox command execution, keep secrets out of the working directory, restrict outbound network access, and log every tool call. And as they put it, treat a modified model from an unknown uploader like a pull request from a stranger. 🔐 #MLEngineering
159
478
132
3,830
350,611
レシピ通りの材料がないとき、「今あるものでどう変える?」とAIに相談する。@iStarr さんがGeminiでの料理相談を提案しています。 検索してぴったりのレシピを探すより、条件を伝えて一緒に考える。日常でも使いどころがありそうです。
1
2
49
Irwin Williams retweeted
i trained a computer vision model to train me at tennis it tracks ball speed, forehand vs backhand strokes, shot placement, body position when i strike the ball how this works: - input video from an iphone - CV pipeline orchestrated with roboflow agent: data labelling using Astra 6, detection done with a fine-tuned RF-DETR model - video annotation using python + openCV goal is to make an app that records each practice session, tracks progress over time, and gives feedback on improving my technique more to come!
234
417
70
5,202
858,717
The jobs apocalypse is postponed. An AI jobs boom is here According to @TheEconomist, AI is actually proving to be a net job creator in the US, easily generating over 1M new positions (from data center construction to AI engineering) to offset back-office layoffs. While routine admin and customer service roles face real disruption, the overall labor market is proving resilient. economist.com/finance-and-ec…
135
641
150
2,885
640,231
Irwin Williams retweeted
Regret the tone of my post on data centers yesterday. What I should have said: There were reasonable concerns about data centers 18ish months ago: water, taxes, jobs, electricity prices, the environment and what they would do to small towns. Well-structured data center projects have largely addressed these concerns today and we should be celebrating this. On balance, data centers are awesome for America in every way. On water: U.S. data centers use a fraction of what golf courses use. A lot of the numbers from 18 months ago were off by over 1000x. Newer data centers use closed-loop systems or recycled water. Should be required by every town approving a data center project. On taxes: looking only at sales-tax exemptions, as Ronan Farrow did, is the wrong way to evaluate this. Data centers pay significant property taxes. Loudoun County, which is the wealthiest county in America, now collects on the order of $1 billion a year from data centers. In Quincy, WA, data centers are more than half the property-tax roll. Over time, property taxes can go to zero while government spending increases in these towns. On jobs: this has been unambiguously awesome for blue collar Americans. Demand for electricians, plumbers, welders, HVAC techs, and contractors has gone vertical, and it is not a one-time construction job. These buildings get upgraded and expanded over time. That is why the building trades are fighting for them, and why some unions are now treating opposition to data centers as a reason not to endorse politicians. On power: the original fear was that households would pay for the incremental electricity demand in the form of higher prices. That is why the ratepayer-protection deals and the new large-load tariffs exist. The right structure is: the data center brings or pays for new generation and signs a contract long enough that existing customers are protected. Where that is happening, utilities are cutting or freezing residential rates and saying so on the record. Where it is not, people are right to object. Electricity prices are going down *today* in a number of large states because of data centers. 
On the environment: data centers overwhelming use natural gas today, which is the cleanest power source outside of nuclear, solar and wind. And the companies that are building the data centers are committed to carbon neutrality such that an equivalent amount of solar will likely be built. Maybe more importantly, the data centers need batteries to function effectively and these batteries can also sell energy back into the grid (which recently prevented blackouts in Texas). Over time, data centers will run on solar plus batteries. On the towns: Poverty in Quincy, WA fell from 29% to 6%. Data center taxes paid for a new high school, a hospital, a library, police and fire stations. This is happening in many left for dead former mill and farm towns that had no other bidder for the land. Data centers are actually reindustrializing parts of America and creating the kind of working-class jobs both parties have spent decades claiming to support. That should not be a partisan issue. Data centers can and should be awesome for America and they increasingly, overwhelmingly are. Supporting the outsourcing of data centers to China will likely age just as well as support for the outsourcing of high quality, blue collar manufacturing jobs to China has aged. When the facts change, I change my mind. I hope that reasonable people who had good faith reasons to oppose data centers at least consider updating their beliefs given the change in the facts over the last 18 months. This really matters for America. I will say I also think the idea of making data centers beautiful is a good one that has yet to be implemented. Data centers should be just as beautiful as Grand Central Station. We can learn a lot from the railroad buildout. Neoclassical revival ftw. Might write up open-weight AI tomorrow as this is equally essential to America.
892
2,416
470
14,084
4,085,819
Irwin Williams retweeted
🧩 DeepSeek Harness v0.1 is now available in Developer Preview! 🔹 We’re opening it up to developers building agent harnesses worldwide and open-sourcing the codebase in MIT license. 🔹 Powered by the Cordis meta-framework, DeepSeek Harness is an agent harness built around one core idea: Everything is a plugin. Models, tools, skills, sessions, sandboxes, filesystems, loops, orchestration, and UI are ALL implemented as plugins, and can be mixed, matched, replaced, and extended. Try it now! github.com/deepseek-ai/deeps…
846
2,441
1,100
20,067
4,503,045
Trinidad and Tobago is making government services faster & easier to trust, and they shared how. The Caribbean Catalyst brought the #50in5 community together in Port of Spain & online to look at how the country built & launched #VerifyTT, its national #DPI. @iGovTT, @DPGAlliance
2
5
769
Irwin Williams retweeted
Big news: Kimi-K3 by @Kimi_Moonshot is now #1 in the Frontend Code Arena with 1679 pts, surpassing Claude Fable 5. This is a 17-place jump from Kimi-k2.6 (#18 -> #1). In Frontend, Kimi-K3 ranked #1 in 6 of 7 domains: Brand & Marketing, Reference-Based Design, Data & Analytics, Consumer Product, Simulations, and Content Creation Tools, landing #2 only in Gaming behind Fable 5. The full model weights will be released by July 27. Congrats to the @Kimi_Moonshot team on this major milestone!
1,072
3,892
3,172
26,179
20,287,114
TUNE IN LIVE 📺 We’re making new underwater friends. 🐙 Literally, the octopus in this video could possibly be a NEW species. It’s time you tuned into the Deep Wonders of Trinidad and Tobago expedition aboard the Schmidt Ocean Institute's R/V Falkor (too). youtube.com/watch?v=GvQxr__k… – at Trinidad and Tobago
1
3
195
Irwin Williams retweeted
I have a $30 stationary bike from Goodwill and an old Android tablet stuck to it, but I don't have a Peloton membership. Nor do I have the interest to ride 80 miles to the beach. So I made PedalScape.com local PWA, no backend at all, no tracking, just 4k bike rides.
13
18
1
194
23,949
Irwin Williams retweeted
Today we’re launching study notebooks in the @GeminiApp — an interactive space built to turn your natural curiosity into true comprehension. 📓 Whether you’re a student making sense of organic chemistry or preparing for a standardized exam, personalized learning should be accessible to everyone. That's why study notebooks are free and available globally in every language in the Gemini app. Here's how to use them ↓
176
363
60
2,668
475,342
Irwin Williams retweeted
Apple just made Docker Desktop optional on Mac. And it is completely free. This is apple/container. 26.5k stars no Github. You can now run Linux containers natively on your Mac without installing Docker Desktop, without a background daemon hogging your RAM, and without paying $21 a month per developer for a commercial license. Here is what it does: → Runs Linux containers as lightweight VMs directly on Apple Silicon using macOS 26 virtualization → Fully OCI compatible. Pull any image from Docker Hub, GitHub Container Registry or anywhere else → Written in Swift and optimised specifically for Apple Silicon. Faster and lighter than anything Docker Desktop does on Mac → Standard container CLI syntax. If you know Docker commands you already know how to use this → Push images you build to any standard container registry and run them anywhere Docker Desktop charges $21 per developer per month for commercial use. Apple's version costs nothing and ships as open source under Apache-2.0. Microsoft made Docker Desktop optional on Windows with WSL Containers last month. Apple just did the same on Mac. Docker is not going anywhere. But the era of paying for a GUI wrapper around containers on your own machine is quietly ending. Repo here: github.com/apple/container
205
1,007
131
10,206
955,641
Irwin Williams retweeted
A Japanese immunologist spent 20 years proving that the chemicals trees release into the air walk into your bloodstream, hunt down your stress hormones, and arm your immune system in ways no therapist or pharmaceutical has ever matched, and most of the data has been sitting in Japanese medical journals for two decades waiting to be translated. His name is Qing Li. He is a clinical professor at Nippon Medical School in Tokyo and the president of the Japanese Society of Forest Medicine. The Japanese government has been funding his research since 2004, and the body of work he has produced is the reason forest bathing is now an officially prescribed clinical therapy in Japan and Korea. The story actually starts in 1982, when the Japanese Ministry of Agriculture, Forestry and Fisheries coined the term shinrin-yoku to describe the practice of slow, mindful walking in a forest. They did it for a practical reason. Japan was urbanizing fast, stress-related illness was climbing, and the country had thousands of square kilometers of forest sitting unused. The idea was to give people a reason to walk into the trees... They had no idea what was actually happening to the human body during those walks until Qing Li ran the first proper experiment in 2005. He took twelve healthy adult men on a three-day, two-night trip to a forest park. They walked for a few hours each day. Nothing strenuous. No prescribed routes or breathing exercises. They simply walked slowly through the trees, breathing the air, looking at the forest. Li drew blood and urine samples before the trip, on the second day, on the third day, on day seven after returning home, and again on day thirty. The numbers that came back from the lab were not what anyone expected. The activity of a specific type of immune cell called the natural killer cell, which is the cell your body uses to hunt down cancer cells and virus-infected cells before they can spread, had jumped by roughly 50 percent during the forest trip. The actual number of natural killer cells circulating in the bloodstream had increased significantly. Three different anti-cancer proteins that those cells produce, called perforin, granzymes, and granulysin, had all risen sharply. And the effect did not disappear when the men went home. The immune boost was still measurable on day seven and was still partially present on day thirty. Two hours a day in a forest had upgraded the immune system for a full month. Li ran the same experiment with women a year later and found nearly identical results. Then he ran it with a control group who took a three-day trip through an urban area with the same amount of walking, the same hotel quality, and the same diet. The urban group showed no measurable change in natural killer cell activity at all. The forest was doing the work, not the vacation. The mechanism turned out to be a class of airborne molecules called phytoncides. Trees produce these compounds to defend themselves against insects, bacteria, and fungi. Pine, cedar, oak, and cypress trees release them in particularly large amounts, especially in warmer weather and after rainfall. When you walk through a forest, you are inhaling those molecules into your lungs and absorbing them through your skin, and once inside your body they appear to directly stimulate the production and activity of the very immune cells Li was measuring in his lab. Roughly 50 percent of the health benefit of a forest walk, according to Li's data, comes from the chemistry of the air itself. The other half comes from what the forest is doing to your nervous system. This is where it stops being only about the immune system and starts being about stress. A separate Japanese research team measured cortisol, the body's main stress hormone, in 84 participants across 35 different forest sites. They drew samples before and after a 30-minute walk in each forest and compared them to control walks in matched urban environments. The cortisol levels of the people who walked in the forest were lower than the cortisol levels of the people who walked in the city by a significant margin. Their heart rates were lower. Their blood pressure was lower. The activity of their parasympathetic nervous system, which is the part responsible for rest and recovery, had gone up. The activity of their sympathetic nervous system, which is the part that drives fight or flight, had gone down. Then a researcher at the University of Michigan named MaryCarol Hunter ran the cleanest version of this experiment ever done. She recruited participants from a city and told them to take a nature pill three times a week for eight weeks. They were free to choose the time, the place, and the duration of the nature experience, as long as it was outside, in daylight, and free of phones, conversations, and aerobic exercise. They sent her saliva samples before and after each session so she could measure cortisol changes accurately and rule out the normal daily drop in stress hormones that happens to everyone. The result was that participants experienced a 21.3 percent drop in cortisol per hour spent in nature, with the biggest payoff happening between minutes 20 and 30 of the walk. After that, the cortisol kept dropping, but more slowly. The threshold dose for measurable stress relief was just 20 minutes outside in something that looked and felt like nature. What none of this means is that nature is a substitute for therapy or for medication when someone genuinely needs them. Therapy treats different things than a walk does, and Li himself has been careful in interviews to call forest bathing a complementary intervention rather than a replacement for clinical care. But what the research has settled is that the human body has a physiological response to being among trees that operates on the same biological systems modern medicine is trying to reach with drugs and clinical protocols, and that response is fast, measurable, and free. The strangest part of Li's work is the implication he keeps repeating in interviews. The average person now spends more than 90 percent of their life indoors. Their cortisol stays elevated. Their natural killer cells stay sluggish. Their parasympathetic nervous system rarely gets a chance to take over. The system that was tuned by millions of years of life under a canopy of trees is being asked to run permanently inside a box made of drywall and screens. Your body has not forgotten what it is supposed to do in a forest. It is waiting for you to walk into one.
512
10,303
881
34,015
1,504,463
Irwin Williams retweeted
ETH Zurich just open-sourced their entire 2026 robot learning course. Not a MOOC. The actual course. Slides, lecture recordings, coding assignments, GitHub repo. The curriculum goes from imitation learning and RL all the way to Vision-Language-Action models and foundation models for robotics. Guest lectures from the co-founder of Physical Intelligence. The creator of Diffusion Policy. Pieter Abbeel. Dieter Fox. 12 weeks. Free. No signup. If you want to understand where robot intelligence is actually heading… this is the reading list the field is using right now. 📍[cvg.ethz.ch/lectures/Robot-L…] —— Weekly robotics and AI insights. Subscribe free: 22astronauts.com
21
303
10
2,079
121,730