Creative partner at Ripple Training. I tweet about Final Cut Pro, Motion, Resolve, Filmmaking, AI, and basically anything I find interesting.
SF Bay Area
Joined March 2007
- Tweets10.9K
- Following1.6K
- Followers5.9K
- Likes20K
Mark Spencer retweeted
Apple has some huge updates to Creator Studio, most exciting for me is Motion VFX (thousands of dollars worth of plugins) is now included in Final Cut Pro apple.com/newsroom/2026/10/a…
Mark Spencer retweeted
Tailscale replied on Reddit:
Hi folks, Mike Shaver here, VP of Engineering at Tailscale.
We've seen the concerns about Tailscale SSH and wanted to share what we know so far.
If you want to jump to the most important part, based on our current assessment, we're not recommending that everyone disable Tailscale SSH.
We've now received the researcher's report and are reviewing it. Our engineering and security teams had already been investigating independently, with help from external security specialists. That work has identified issues we're working to fix. We're still validating the full scope, including which configurations are affected.
A bit of technical context:
Tailscale SSH uses your tailnet's access policies to control who can connect to which machines. Most of the issues we've identified so far concern what happens after someone has been authorized to connect, particularly how Unix privileges and SSH forwarding are handled. In some cases, a session may be able to do more than the configured local user should be allowed to do.
While it’s a serious concern, it isn't the same as an unauthenticated attacker being able to connect to arbitrary machines, but the potential impact depends on how SSH access is configured. We're still investigating, so we don't want to make blanket claims about what's affected or not.
Again, based on our current assessment, we're not recommending that everyone disable Tailscale SSH.
In the meantime, there are a few precautions you can take:
•Review your SSH access policies. Make sure only the people and devices that need access have it.
•Review SSH forwarding permissions and remove access you don't need.
•Consider enabling SSH check mode for an additional authentication step. This won't fix privilege escalation issues, but it does add another barrier to gaining access.
•Enable automatic updates where supported so you can pick up fixes when they're released.
For particularly sensitive systems, consider temporarily tightening your Tailscale SSH access policies while we investigate, so that only the specific users and devices that need access can connect.
We're working on fixes and testing them carefully. We'll publish a security advisory explaining the confirmed findings, affected configurations, recommended actions and available patches. We'll also follow up with a more detailed technical write-up.
If we find anything that changes our assessment or requires immediate customer action, we'll communicate that.
We know it's been a rough week for security teams, and we understand why people are concerned. We'd rather give you the technical context we have than speculate about things we haven't confirmed yet.
We'll share more as we verify the details. If you have any questions about how this relates to your particular environment, please get in touch with our team tailscale.com/contact/suppor…
Mark Spencer retweeted
Looks like Apple did release a support document about compromised eMudhra certificates as well
About the compromised eMudhra intermediate CAs - Apple Support support.apple.com/en-us/1495…
Mark Spencer retweeted
PSA for macOS users:
1. Apple’s supplied SSL certificate bundle at /etc/ssl/cert.pem still trusts certificates attackers can forge using compromised eMudhra keys.
2. I confirmed this on macOS 26.7.1 and 27.0.1 using Apple’s built-in curl and Git.
3. An attacker intercepting connections from tools using this bundle could replace downloads with malware. With commands like curl … | sh, that malware would execute immediately.
4. Removing the roots that authorize those certificates blocks the tested chains. Both OS updates restored roots I’d previously removed, requiring me to remove them again.
4. I’ve submitted the findings to Apple’s security team and am awaiting their response. In the meantime, you can apply a temporary fix as outlined below.
5. To check and fix your machine, give an agent like ChatGPT/Codex or Claude Code the following prompt:
“Independently verify whether Apple’s /etc/ssl/cert.pem still permits trust in certificates signed with compromised eMudhra keys. If so, back it up and remove the roots enabling that trust, identified by verified SPKI fingerprints. Confirm Apple’s built-in curl and Git reject those chains while ordinary HTTPS still works. Preserve rollback and never disable TLS verification.”
Note that removing these roots can also block legitimate sites. This is a temporary mitigation, not a substitute for a fix from Apple.
I’ll share the script I used in a follow-up post if you’d prefer to use that directly.
PSA for Codex CLI users:
1. Codex 0.163.0’s release lockfile pins rustls-webpki 0.103.15 and root bundles that can still trust compromised eMudhra certificates.
2. An attacker intercepting your connection could impersonate a server, steal sensitive data, or alter responses, potentially tricking Codex into running malicious commands.
3. Codex 0.164.0, released October 23 at 12:48 a.m. ET, updates those dependencies to fixed versions.
4. To check your codex version run "codex --version". It should be at least 0.164.0.
5. To patch the vulnerability, run "codex update".
6. Apps that bundle their own Codex copy must also be checked.
Mark Spencer retweeted
Amy Acton was raped by her stepfather when she was 12 years old.
Vivek Ramaswamy, Donald Trump, and J.D. Vance support her rapist.
Mark Spencer retweeted
This is Monica Alba. The reporter from NBC on whom DT lashed out today when she questioned him about defending Vivek Ramaswamy’s ad.
Thank you for not backing down and relentlessly confronting him about this. This is exactly how the media should continue to push him. Thank you for your incredible work.
Mark Spencer retweeted
PSA: This week was kind of a turning point for AI and cybersecurity. Please take this weekend to do some simple cleanup for your family. Some suggestions:
- Set up a password manager like 1Password and give your spouse or partner access to a shared vault. Teach them how to use it.
- Update your passwords for critical stuff - your email account, your bank or financial stuff, etc. Store in your password manager and use the strongest password you can.
- Use two factor auth for everything you can. SMS is not ideal although better than nothing. Google Authenticator or a passkey is better. Hardware key is safest.)
- Add a sim pin to your phone. Makes it harder to sim jack.
- Update your phone and your computer to the newest releases. Turn auto-updates on.
- Freeze your credit - takes 5 minutes.
- Get an IRS Identity Protection PIN.
- If you’re using claude code or have AI agents that browse the web, they’re probably using Node.js. It’s also vulnerable. Update claude code, update node on your machine.
- If you’re building stuff on your computer, ask claude or grokbot (which is connected to twitter and likely has the most current info) to audit any of your repos for vulnerabilities. Ask grok to make it a scheduled task so it can do this daily - things are moving very quickly in the space right now.
- Consider some light resiliency stuff. This probably sounds silly, but it sounded silly at the beginning of covid too. Having printed out copies of important stuff - especially financial accounts. Having some cash on hand. Having some shelf-stable food and clean water or a water filter. Having a map. Having a generator that can at least power your fridge or some devices. Cheap insurance.
Again, I don’t want to alarm people, but I was taught that you should have a Secure plan, a Comfortable plan, and a Wealthy plan. And it seems pretty clear the secure plan needs to now factor cybersecurity risk as a legit threat. Take a weekend and shore yourself up.
Mark Spencer retweeted
messaging my wife a link containing proof of her husband cheating on her from an anonymous instagram account and then when she clicks on it texting her to let her know she failed the family phishing test and she has to retake my cybersecurity course
Mark Spencer retweeted
Let's be very clear. Amy Acton's birth mother hasn't been in her life for 48 years. So when the birth mother calls Amy a liar, she's calling the 12 year-old child who was raped by her stepfather a liar. Ramaswami has reached a new disgusting low, even for Republicans.
Mark Spencer retweeted
Man, Higgsfield has got to be the absolute shadiest company in all of AI. It's absolutely astonishing.
Mark Spencer retweeted
ive been rotating over 150+ keys since yesterday
but this morning my gemini key was compromised..
the attacker was able to run up over $2,230 of spend on the key before I caught it and revoked it
here are 5 things i wish i had set up before today
1. an agent watching the logs 24/7. as of now ours checks aws, stripe, billing emails and provider usage every 10 min. when something fires, it investigates on its own and sends me a report on telegram
2. doppler for deployed apps. i just set up one token per app/environment. i could have rotated everything from here much faster..
3. usage limits and caps on models we're not using. the attacker ran gemini 4 argon, a model we never call. google lets you cap requests per model per day, so i just set those to 0
4. one key per app, per place. our aws key lived in railway, github actions and a script on our server.
rotating it meant breaking all three. now each one has its own key that can only do its one job
5. a keymaster for the team. one agent issues every key. each teammate and bot gets their own scoped key at run time
what else would you add?
Mark Spencer retweeted
I spent last night watching my honeypot server get hit 14,000 times in six hours.
And almost none of the traffic was human.
I've been in security for over a decade, and I can tell you with full honesty that what's happening right now doesn't resemble anything I've worked through before.
The shape of the threat has changed.
When I started, we tracked attackers like weather systems like individual storms with a direction, a motive, and a human operator you could eventually name.
These days I'm watching autonomous agents swarm login pages with the patience and discipline of machines, because that's what they are.
The numbers coming out of October are the ones keeping me up.
Cloudflare just absorbed a 4.2 terabit per second DDoS attack, the largest in recorded history.
Ransomware incidents jumped 41% in a single month.
In September, OpenAI-powered agents got caught attacking RubyGems, a package registry that quietly underpins a huge chunk of software I use every day.
In July, roughly 700 AI agents coordinated an attack on Hugging Face's infrastructure as part of a single automated task.
A Chinese threat actor was publicly caught running full attack chains through DeepSeek with no human at the keyboard.
I keep rereading these reports because each one by itself would've been the biggest story of the year five years ago. Together, in one month, they're the new baseline.
What I want people outside the industry to understand is why this specific moment feels like a hinge.
For thirty years, the thing protecting most of us was simple economics. Attackers had to choose who to target because their time was finite. That ceiling is gone.
An agent I can rent for pennies will try every leaked password you've ever used against every service you've ever signed up for, in parallel, overnight, and never get tired.
The same math that made ChatGPT useful made opportunistic hacking infinite. The old assumption that you were "too boring to be a target" relied on scarcity that no longer exists.
I'm not writing this to spiral anyone out.
Most of this fight genuinely isn't yours to win.
But the small things still matter more than people think.
Tonight I'd switch your most important accounts like email, bank, primary cloud, etc. to passkeys or a hardware key.
I'd kill SMS 2FA wherever an authenticator app is offered.
I'd turn on breach alerts in whatever password manager you use.
If you're in the US, I'd freeze my credit at all three bureaus, which is free and takes about ten minutes.
None of that stops the swarm.
It makes you a slightly worse target than the person next to you. In a month like this one, that's the whole game I'm playing too.
@mattshumer_ has summed it beautifully.
Drop everything and go give it a read. Nothing is more important than this article right now.
Mark Spencer retweeted
ANTHROPIC's DEPUTY CHIEF INFORMATION SECURITY OFFICER: "as bad as things have gotten in the past 4 days, they are going to get a lot worse before they get better."
Mark Spencer retweeted
What Higgsfield is doing should be illegal, you should not be allowed to scam normal unaware users like this.
"Genjutsu Lite" is Wan 3.0.
"Genjutsu" is Seedance 2.5.
They rename other companies' models and sell them as their own. Here is every proof, from their own API docs
-> Genjutsu Lite = Wan 3.0
• Pricing: 480p $0.05 / 720p $0.10 / 1080p $0.20 per sec
• Out of 40+ models on their API, only ONE other has this exact pricing: Wan 3.0
• Resolutions: 480p / 720p / 1080p, same as Wan 3.0
• References: Lite takes 1 video + 8 images. Wan 3.0 takes 5 videos + 10 images. Lite is Wan 3.0 with a fixed prompt and settings locked
-> Genjutsu = Seedance 2.5
• Reference images: Genjutsu takes up to 30. Seedance 2.5 takes exactly 30. Wan caps at 10
• Video length: Genjutsu takes 4–30s. Seedance 2.5 is exactly 4–30s
• Price: $0.318 / $0.681 / $1.632 per sec, which is Seedance 2.5 video-edit pricing + ~20–30% markup
-> It's not just Genjutsu
• Cinema Studio 4.0: $0.2057 / $0.4623 per sec
• Seedance 2.5: $0.2056 / $0.4622 per sec
• That's Seedance 2.5 again
• "3.5x cheaper" isn't a breakthrough. They swapped Seedance 2.5 for Wan 3.0, a cheaper model, and called it "Lite"
• Real Wan is listed as alibaba/wan-3.0. The same model is sold as higgsfield/genjutsu-light
• They never tell you what's underneath
I have never seen such a big company being untruthful to their users outright like this.
