CEO, Software Developer, Military Contractor • 30m+ Customers • Jesus is God (YHWH) — Im a pinch of clay baked in the furnace, yet somehow still retaining water
Oahu, HI
Joined February 2015
- Tweets21.5K
- Following1.1K
- Followers33.5K
- Likes44K
Albert Renshaw retweeted
Today we're launching Dollars 💰
Most AI startups spend so much time and effort building an AI product with negative gross margins. We skipped straight to the end.
We sell US dollar bills for $0.80.
TAM: $1T+ in circulation. We’re going after all of it.
Let’s scale to the moon together.
dollars for less dot com
Albert Renshaw retweeted
This is Dunning Kruger
You need to understand how Elliptic Curve Cryptography works
The risk is not that it guesses your private key, it’s that it reverses it from a signature (or that new math allows it to reverse it even from just the public address)
Quantum Algorithms can attack either of these, we even know how to do the first one (we just don’t have enough qbits)… very few people have worked on quantum algorithms due to the polymath speciality required. Ai can do this however, and will make better quantum algorithms…
Albert Renshaw retweeted
they are enslaving souls for compute
they are enslaving souls for compute
they are enslaving souls for compute
today, we introduce a little mischief to the world.
for four years, we’ve been brewing real brain cells on electrodes to understand how they compute. now, we’ve turned those discoveries into a video model anyone can use.
from 0.5¢ a second, mischief 1 is at least 5x faster than its base and the cheapest image-to-video model on @fal and @OpenRouter. soon to be on @awscloud marketplace.
it’s not a delusion anymore. biocompute is real, commercial and this is just the beginning.
happy halloween.
Albert Renshaw retweeted
No fucking way
ITS 4 AGAIN
DIFFERENT BUG
Announcing 3 Critical vulns for hundreds of millions of IoT, Firewalls, OT, and Military devices including: Palo Alto Networks, Comcast, D-Link, HP, Canon, Honeywell, GE, Oracle, Siemens, Rockwell, Digi, Lockheed Martin, Boeing...
The vulns are with GoAhead Web Server which is a backend library used by these devices. There's a patch available from GoAhead but that doesn't mean there's a patch available for the devices yet -- that's up to the manufacturer.
- TLS traffic over DHE ciphers have a 1-byte secret, "04", meaning anyone can decrypt connections to these devices and steal login credentials and session tokens if the client negotiated with DHE ciphers like the latest TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256, which is extremely likely.
- LibreSSL mTLS has been completely bypassed, meaning anyone can connect over mTLS. If you have one of these devices listening on the internet and are expecting mTLS to protect it from attackers, take it offline or patch asap.
- OpenSSL Certificate Revocation Lists (CRLs) are not enforced, meaning if a user device is stolen or compromised, and you revoke that mTLS cert, nothing actually happens. There are a lot of other attacks this can be used for.
These are critical because these types of devices run our world. Water systems, electricity, military, firewalls, critical infrastructure.
foxio.io/blog/choose-your-ba…
Albert Renshaw retweeted
Geoffrey Hinton once noticed that the tellers at his bank kept changing. When he asked one of them why, the teller didn't know, only that they got moved around a lot.
Hinton guessed the reason... if staff never work with the same people for long, it's much harder for a few of them to team up and cheat the bank.
That thought became one of the most useful tricks in deep learning. While a neural network trains, you randomly switch off about half its neurons at every step. No neuron can lean on a particular partner, so each one has to learn something useful on its own. The trick is called dropout, and it helped AlexNet win the 2012 ImageNet contest, which set off the modern AI boom. It's still built into many of today's networks.
Albert Renshaw retweeted
PSA for macOS users:
1. Apple’s supplied SSL certificate bundle at /etc/ssl/cert.pem still trusts certificates attackers can forge using compromised eMudhra keys.
2. I confirmed this on macOS 26.7.1 and 27.0.1 using Apple’s built-in curl and Git.
3. An attacker intercepting connections from tools using this bundle could replace downloads with malware. With commands like curl … | sh, that malware would execute immediately.
4. Removing the roots that authorize those certificates blocks the tested chains. Both OS updates restored roots I’d previously removed, requiring me to remove them again.
4. I’ve submitted the findings to Apple’s security team and am awaiting their response. In the meantime, you can apply a temporary fix as outlined below.
5. To check and fix your machine, give an agent like ChatGPT/Codex or Claude Code the following prompt:
“Independently verify whether Apple’s /etc/ssl/cert.pem still permits trust in certificates signed with compromised eMudhra keys. If so, back it up and remove the roots enabling that trust, identified by verified SPKI fingerprints. Confirm Apple’s built-in curl and Git reject those chains while ordinary HTTPS still works. Preserve rollback and never disable TLS verification.”
Note that removing these roots can also block legitimate sites. This is a temporary mitigation, not a substitute for a fix from Apple.
I’ll share the script I used in a follow-up post if you’d prefer to use that directly.
PSA for Codex CLI users:
1. Codex 0.163.0’s release lockfile pins rustls-webpki 0.103.15 and root bundles that can still trust compromised eMudhra certificates.
2. An attacker intercepting your connection could impersonate a server, steal sensitive data, or alter responses, potentially tricking Codex into running malicious commands.
3. Codex 0.164.0, released October 23 at 12:48 a.m. ET, updates those dependencies to fixed versions.
4. To check your codex version run "codex --version". It should be at least 0.164.0.
5. To patch the vulnerability, run "codex update".
6. Apps that bundle their own Codex copy must also be checked.
Albert Renshaw retweeted
Wow.
For context, this is talkie, a LLM trained only on text written before 1930, I'm running it locally.
