CRO @ https://xitter.cf/t.co/r99b1ZQCu5

England, United Kingdom
Joined February 2021
skrillah retweeted
So basically, today PHP got two critical bugs that let anyone run code on your server without even logging in, which is bad, and then the details leaked before the patch was even out, which is worse, and it works on WordPress and MediaWiki and Magento and Joomla and Laravel, and Censys says like 1.5 million servers are running a version with no fix, so the NSA was like "take your system offline," and the FBI was like "take your system offline," and CISA and the UK and CERT-EU were all like "take your system offline," and then the Prime Minister of Japan, the actual Prime Minister, posted at 5:55 in the morning telling 48.8 million people to take their system offline, so everyone took their system offline, like the Dutch cybersecurity agency took its own website offline, and the Dutch parliament went offline, and the Port of Rotterdam went offline, and Finland and France and Denmark started pulling government sites, and Wikipedia went down, and Archive.org went down, and Asana and GOG and Something Awful went down, and the University of Vienna's webmail went down for some reason, and that's just PHP. Because GitLab also dropped a CVSS 10.0, which is the highest score they give out, for a bug that's been there since 2014, so that's every self-hosted GitLab for twelve years, and then LiteLLM 1.107.0 got hijacked and shipped a credential stealer and a remote access trojan in every single wheel and the Docker images, including latest, and you didn't even have to import it, just installing it was enough, and it's the second time this year, and then Railway paused every deployment on the entire platform because someone got into the environment variables, so now everyone has to rotate every secret they've ever stored there, and TiDB Cloud said someone was walking around inside with stolen credentials for basically a month and an extortion group says they took 10.6 terabytes, and Zeabur got breached for the second time in two months and is just shutting down, like the whole company, and Node.js patched remote code execution and a TLS bypass, and CISA says Plex is being actively exploited, and someone took over 300 Tor exit relays to steal SSH passwords, and SafePay ransomware has hit over 600 critical infrastructure orgs, and India's biggest bank filed a data loss incident, and Japan has been in an official state of emergency in cyberspace since October 9, which honestly explains the 5:55 AM post. Oh, and eMudhra, a certificate authority that's issued over 60 million certificates, whose entire job is proving websites are who they say they are, was supposed to be using private keys that are random numbers over a hundred digits long, and one of them was 4. Just 4. And the others were like 66 and 237. Anyway, it's Wednesday.
928
7,834
1,456
61,167
3,230,406
Ello, ello, whats all this then? 💂 Heading to Solana Breakpoint this November? We’re getting the gang back together for a proper British Pub Quiz at The Queen’s Head. Get involved: luma.com/n41tqnps
2
2
186
Venue change! We are now at the Crown & Sceptre on Holland Road
13
The Quantum Alliance is here 🤝 An open standards body defining “quantum-ready” for blockchain. Proud founding contributor with @KeystoneWallet, @thevault_soft, @hackenclub, @PQabelian, @midnightfdn, @QuantusNetwork, @intmaxIO, and @Americanfort_io → quip.network/blog/postquant-…
109
72
120
245
24,305
Proud to be a founding member of the Quantum Alliance!
“Post-quantum” is now a marketing buzzword. We’re here to separate the legit tech from the vaporware. Today, ten contributors from across the industry launch the Quantum Alliance. This open standards body will define blockchain quantum readiness. Contributors submit proposals and earn support through evidence and working code. Founding contributors: @YuviLightman, @QuantusNetwork @MehowHacks, @Americanfort_io @HiokiLeona, @intmaxIO @aaron1sme, @KeystoneWallet @SebastienGllmt, @midnightfdn @cadillion and @rcarback, @quipnetwork @PQA_Rich, @PQabelian @bizdevving, @thevault_soft @katina_messinis, @hackenclub thequantuminsider.com/2026/1…
1
93
Expect questionable guesses, wildly misplaced confidence and fierce debate over things nobody cared about five minutes earlier. Bring your mates, pick a ridiculous team name and put your reputation on the line.
1
17
Reach out to me via DM if your company would like to sponsor some prizes / pints for the quizoors.
10
Opening and closing a Ledger Nano X
112
291
82
1,808
415,570
The very first tokenized silver that pays YIELD! 🔥 Get stable, physical, hard-asset exposure to silver while earning up to 15.0% APR.✨ Stake $STT NOW 👇🏻 silvertimes.io/staking #RWA #SilverTimes #Staking
9
1,267
4
1,150
55,538
Every backend service should have a /feedback endpoint. Agents are quickly becoming the heaviest users of most APIs. When one hits a missing feature or a bug, it should be able to say so right there, in a structured way. If the request makes sense, another agent drafts the PR and a human approves it. Software that improves itself based on what its users actually tried to do speeds up recursive self improvement.
298
180
111
2,373
246,731
How did @osldotcom build DORA competency ahead of entering the EU market? With an existing ISO 27001 foundation, the training had to go beyond introductory material and engage the operational realities of a licensed, publicly listed group. The outcome: hackenio.cc/dora-training-fo…
1
3
14
2,491
skrillah retweeted
BREAKING: The SEC grants a five-year "Innovation Exemption" for tokenized securities venues, allowing blockchain platforms to list and trade real tokenized stocks with full shareholder rights.
218
1,285
333
6,468
658,305
Here’s the video of our panel from @CryptoCanal Common S3nse!
Panel | Who audits the auditors ?? ⏯️youtu.be/itTNu5rDMbA Tune in with @realgmhacker Head of Security at @immunefi, @DmytroMatviiv CEO of @HackenProof, Alex Head of Partnership at @osec_io and Bryn, Head of Business Strategy at @hackenclub moderated by @Neutral_xenon
3
244
This post looks like the start of a VERY sophisticated and well-funded PR operation to get support for Democrats to regulate AI into oblivion. Let me show you how it works: 1.) This guy, with minimal followers and no previous account activity, goes to the Wall Street Journal which publishes an exclusive with quotes from him on his resignation 18 minutes BEFORE this post goes up. Planning was clearly done in advance. 2.) Within hours, it has tens of thousands of reposts and the account has 100k+ followers. The post is punchy, quotable, it almost seems professionally written. The first three accounts to quote tweet it all do so within 15 minutes of the initial posting. Remember, this account had basically zero engagement beforehand, so an organic reach explanation seems unlikely. According to Grok those accounts are @_NathanCalvin (General Counsel at Encode AI), @peterwildeford (Head of Policy at the AI Policy Network), and @DKokotajlo (Head of the AI Futures Project), all of which are up-and-coming AI-Doomer policy advocacy nonprofits. The AI Futures Project website says it is funded “primarily” by the Survival and Flourishing Fund, which says on its own website that it has advised Jaan Tallinn, Skype creator and one of the leading investors in Anthropic, to grant over $2.5 million to the AI Futures Project since 2024. Encode AI says on its website that it is ALSO funded by the Survival and Flourishing Fund, which in turn says that it told Anthropic investor Jaan Tallinn to grant $516,000 to Encode AI in 2025. And wouldn’t you know it, the Survival and Flourishing Fund ALSO says it told Jaan Tallinn to grant $2 million to the AI Policy Institute, the 501(c)(3) affiliate of the AI Policy Network, as well. What are the odds that the first three quote tweets of Coxon’s post would all be major AI-restriction policy advocates funded generously by the same donor, who also happens to be one of the leading investors in, and a board member of, Anthropic, the company Coxon was resigning from? And all within 15 minutes of posting (two within ten)? 3.) Jacob Coxon doesn’t have much of a resume, but we do know that, in 2022, he got a $20,159 scholarship for the “long term future scholarship program” from the Good Ventures Foundation, one of the philanthropic vehicles of Dustin Moskovitz, a notorious AI-doomer who has spent tens if not hundreds of millions on policy advocacy to strictly regulate AI, while also being an Anthropic Investor himself. It also just so happens that the 14th person to quote Coxon’s post was @MaxNadeau_ (27 minutes after posting) who is the program officer for the Technical AI Safety team at Coefficient Giving, another of Moskovitz’s philanthropic spending vehicles. Max is not a frequent poster, his last posts before quoting Coxon were before Labor Day, but he was remarkably quick off the mark for this one. 4.) Basically every major Democrat politician and candidate has suddenly glommed on to this post, and conveniently, as the people cry out foe answers, Bernie Sanders already has a bill written to “ban super intelligence” and regulate AI into oblivion, and will be releasing later this week. The bill, among many other things, will create “a new cabinet-level federal agency to safeguard the public from the dangers of artificial intelligence” that will be “advised by an Artificial Intelligence Advisory Board comprised of experts on artificial intelligence.” Do you think, perhaps, Anthropic and its many investors who fund AI policy advocacy might have interest in getting to place a pet “expert” on the board of an entity that dictates what AI is and isn’t allowed to do? And isn’t it fortuitous that this whistleblower came forward with his oh-so scary stories so close in proximity to the release of the most radical piece of AI legislation ever introduced?
I resigned from Anthropic today. I spent the last three years doing pretraining research at both OpenAI and Anthropic. Neither company is acting responsibly. They are racing straight to self-improving superintelligence and gambling with our lives. More thoughts below.
1,818
6,736
2,242
32,214
7,071,578
skrillah retweeted
Everyone at Common S3nse was building privacy. Almost nobody meant the same thing by it. Cypherpunks want absolute secrecy. Banks want selective disclosure. Regulators want proof without a permanent public ledger. That tension is the whole privacy landscape. Our talk walked it from cypherpunk to enterprise, and why garbled circuits let blockchain apps stay private and still provable. Grateful to @blockblanc, @Kroominator, and @CryptoCanal for putting the right people in one room.
2
4
31
718
skrillah retweeted
It's a wrap for Common S3nse Amsterdam 2026! To love, to friendship and our beautiful shared cypherpunk values 🫡🐈‍⬛ – at Amsterdam, The Netherlands
6
8
4
76
16,657