Pinned Tweet
With AGI looming, it’s hard to know what to do with one’s time. I feel like I should be preparing but I am at loss for what that preparation looks like
On track. You’re not AGI-pilled enough
We are announcing three new discoveries in mathematics, computer science, and physics about harmonic analysis, complexity theory, and quantum field theory.
openai.com/index/building-sc…
This is like saying why are they pouring so much money into pandemic prevention when there is no known pandemic on the horizon
Why Are Scientists Suddenly So Concerned About An Asteroid Hitting Earth? zerohedge.com/geopolitical/w…
Yeah, we’re so fucked. The world is built on the most fragile tapestry of legacy code. Energy, infrastructure, the finance system, military systems, healthcare etc.
In the last 24 hours:
1. iPhone 11 through 16 are apparently vulnerable to remote attacks.
2. SSL certificates are broken until browsers remove eMudhra CA.
3. PHP >9 vulnerability CVE published (tomorrow).
The world is about to witness things that have never been seen before.
Readers added context they thought people might want to know
The post's iPhone claim is inaccurate; a leaked Cellebrite forensic tool targets a Bluetooth bug patched in iOS 26.5 and does not affect updated devices. The eMudhra CA and PHP issues are real incidents but framed sensationally.
justin.sh/blog/2026/10/c…
blog.mozilla.org/security/2026/…
php.net
shut... the ... front... door...
was JAVA feeling lonely and wanted to get into the party?????
Oracle Security Alert Advisory - CVE-2026-91403 CVS 9.1
oracle.com/security-alerts/a…
@uwu_underground
Sorry everyone... We're announcing a 0-Day vuln in QUIC that allows anyone to remotely turn off a server running these libraries. I swear we didn't plan this.
foxio.io/blog/header-accordi…
xeno retweeted
You've gotta patch your dependencies super fast because they're full of vulns (PHP, Node, eMudhra, etc), but not _too_ fast because they're full of backdoors (LiteLLM). Good luck!
Not just PHP. Node.js has also announced security releases for October 21, with HIGH-severity vulnerabilities affecting its 26.x, 24.x and 22.x release lines.
If you run either stack in production, keep an eye on official advisories and apply patches promptly.
Security maintenance doesn't stop at your application code. Your runtime matters too.
Node.js advisory: nodejs.org/en/blog/vulnerabi…
























