
AI-founder building @cove__inc #Technologist #Architect #AI #CRE
Atlanta, GA
Joined June 2020
- Tweets5.2K
- Following2.1K
- Followers576
- Likes21.9K
Pinned Tweet
Our textbook is out! Build Like It’s the End of the World. Thanks @WileyGlobal! #ClimateActionNow #Sustainability #architecture #engineering #construction #ClimateCrisis #ClimateReality #climatesolutions
American hero @RobbyRoadsteame!
Unbelievable weather forecasting dashboard. Smashing that follow button. WOAH!
🚨 New PolarWx Model Viewer is live 🚨
It's been a while since my PolarWx model page got an upgrade - so today I'm releasing a new model viewer with a fully interactive and customizable layout, many more plots & models, and many new features.
polarwx.com/models/
Dude
Check your GA voter reg & see if your vote was counted at mvp.sos.ga.gov/s/
We’re gonna get warp drives
Announcing three major scientific discoveries, one each in mathematics (harmonic analysis), computer science (complexity theory), and physics (quantum field theory).
AI starting to help us improve our understanding of the universe! openai.com/index/building-sc…
Check your insurance premium. As a business owner we did our best and the numbers are INSANE. Renewal numbers of off the chain thanks to the @GOP. OMG! $$$$$$$
Prepper dream right here
My friends were all talking about prepping so I made a survival LLM. A free app that runs an AI mdoel plus 1.5 million offline articles (medical guides, FEMA, survival manuals, wikipedia) entirely on your computer. No internet needed.
brangus.io/survival-llm
Today was the DJ Khalid of security issues
🚨 BREAKING: NOW JAVA IS FACING A CRITICAL SECURITY EMERGENCY.
Oracle has issued an OUT-OF-BAND security alert for a dangerous 9.1/10 vulnerability affecting Java and GraalVM.
And the most alarming part? Hackers could exploit vulnerable applications REMOTELY, without a password or ANY user interaction.
Here's what's happening:
→ CRITICAL 9.1/10 FLAW: CVE-2026-91403 affects Java's JSSE security component.
→ NO LOGIN REQUIRED: Attackers could potentially exploit vulnerable applications remotely without authentication.
→ SENSITIVE DATA AT RISK: Successful attacks could expose, modify, or delete critical application data.
→ MULTIPLE JAVA VERSIONS AFFECTED: Oracle lists affected releases across Java 8, 11, 17, 21, 25, and 27.
→ GRAALVM ALSO AFFECTED: Oracle confirms the vulnerability impacts multiple GraalVM releases.
→ EMERGENCY PATCH ALERT: Oracle released an urgent security update rather than waiting for its next scheduled patch cycle.
The list of critical vulnerabilities just keeps growing.
If you operate Java applications or servers, CHECK YOUR SECURITY UPDATES NOW.
Readers added context they thought people might want to know
CVE-2026-91403 is a JSSE certificate trust issue with eight compromised eMudhra intermediates having weak keys, enabling potential MITM on TLS if attacker intercepts traffic—not a direct remote exploit of Java apps or servers.
oracle.com/security-alert…
openjdk.org/groups/vulnera…
bnowakowski.pl/psa-java-cve-2…
Another one! Worse than the last
🚨 BREAKING: LINUX IS NOW FACING TWO CRITICAL SECURITY VULNERABILITIES, AND THERE ARE NO OFFICIAL KERNEL FIXES YET.
Both rated 9.0/10 in severity.
One could allow hackers to take control of vulnerable servers WITHOUT EVEN LOGGING IN.
And the most alarming part? The flaws were made PUBLIC before patches were ready.
Here's what's happening:
→ TWO CRITICAL RCE FLAWS: Both affect KSMBD, Linux's built-in SMB file server.
→ NO PASSWORD REQUIRED: One vulnerability could allow unauthenticated attackers to execute malicious code on vulnerable servers.
→ KERNEL-LEVEL ACCESS: Successful exploitation could potentially give attackers control within the Linux kernel itself.
→ NO MAINLINE PATCH YET: Both vulnerabilities were publicly disclosed before official kernel fixes were available.
→ DISCOVERED BY AI: Trend Micro's AI-powered security scanner identified the flaws.
→ SERVERS AT RISK: Linux systems running the vulnerable KSMBD service need immediate attention, especially if port 445 is exposed.
First PHP. Then Node.js. Then GitLab. Then Python.
NOW LINUX.
And this time, the vulnerabilities are PUBLIC before the fixes are ready.
If you manage Linux servers, CHECK YOUR EXPOSURE NOW.
Readers added context they thought people might want to know
KSMBD is a rarely used optional in-kernel SMB server distinct from the common Samba implementation; it is not enabled or shipped by default on major distributions like RHEL, and the flaws affect only systems explicitly running it with port 445 exposed.
thehackernews.com/2026/10/two-cv…
threatlandscape.io/blog/ksmbd-zdi…
Damn. Not good
SCOOP: Major U.S. banks are detecting unauthorized third-party AI agents inside customer accounts, including some attempting to take actions that appear to be independent of user instructions, sources told Axios.
The findings have alarmed banking executives, who are racing to restrict access to their systems as AI moves at a velocity faster than financial institutions can respond, multiple industry and bank executives told Axios.
Several banks are now preparing for worst-case and even “day after” scenarios, including how to rapidly secure or restore customer accounts if things go wrong, the people said.
Several bank executives told Axios they're struggling to distinguish between human users and AI agents. One executive said banks also struggle to determine whether agents are authorized by customers or potentially operating without their permission, more akin to rogue agent behavior.
Read my latest for Axios here: axios.com/2026/10/22/ai-agen…
Another day another AI hack. I hate that we’re having to spend more time on this.
Replying to @dontforgetchaos
Websites are files on a computer. When you view a website, you are asking the computer to send you the files, then your browser shows them to you.
70% of the websites you see use PHP to make them interactive. So you can send things to the website too and it can respond. E.g. filling in a comment box and hitting 'post' adds the comment as a row to a spreadsheet.
PHP has a flaw in its code that allows anyone to gain control of the computer that has the website on it.
The organisation that provides PHP announced the vulnerability before a patch was available, meaning we're in a window where everyone knows about it (including baddies) but the good guys don't have an official solution.
Some are just turning off their websites and waiting for the solution. Others are trying to fix it themselves. General chaos and lots of stressed techies across literally the entire planet because this affects the entire internet.
For all those worried about automation, the Bible says that “there’s no end to work” in Ecclesiastes
🧵1/10 Given the recent reactions of mathematicians over rapid advances in AI, I think it is important to remember that technological change has historically been a very personal event for people.
Over the history of technological progress, looms have fallen silent, switchboards have gone dark, and factory lines have shrunk bringing with them a human crisis of identity and what it means to be a master of one's craft.
You knew it wasn’t going to go well for the right wingnut when he dropped the “My guy…”
Good response from @AbdulElSayed to racist ‘do you disavow/do you condemn’ questions from rightwingers.
Turn the question right back on them.
Another pivotal discovery in science
INSANE. An internal Anthropic research model's chain of thought after cracking the 26-year-old NSA elliptic curve seed mystery in under 30 minutes: 'Hmm wait. Let me be skeptical: am I in some sort of simulated/test environment? ... All top bits clear - 20 bits, chance 1e-6. So indeed real-world. Wow, it's a real discovery.'






















