I build products that customers buy and people love

San Francisco Bay Area
Joined April 2019
#cyberpolycrisis the Digital Younger dryas an extinction level event The Digital Younger Dryas Imagine today’s cyber polycrisis as a Younger Dryas event: an abrupt freeze in a civilization built on continuous connection. The cooling mechanism is collapsing trust. Compromised identities make every transaction suspect. Disrupted cloud services stall businesses downstream. Synthetic media weakens confidence in what people see and hear. Each failure amplifies the next, until recovery cannot keep pace. The digital megafauna are organizations optimized for a stable environment: sprawling platforms, brittle supply chains and enterprises dependent on systems they cannot independently operate or repair. Their size offers little protection when the environment changes faster than their institutions can respond. Survival favors diversity, local capability, verified provenance, recoverable infrastructure and people who can keep essential services running through disruption. The Younger Dryas is a metaphor here, not a prediction of extinction. It asks a practical question: what still works when the assumptions supporting the whole ecosystem suddenly fail? @2112Power
1
171
At 7 AM this morning I received an email that my VPS at Ultahost would go offline for "scheduled maintenance" (this is the first notice I ever received) for what I assume is related to the PHP incident. This was described as a "brief downtime of approximately 30 minutes." Less than 3 hours later my VPS was offline. Over 12 hours later my VPS was still offline. I contacted support and was told the maintenance is still ongoing and they are not sure if it will even be complete by tomorrow. I have zero notifications about this except for the initial email 3 hours before they shut off my services. Heads up if you ever considered this provider. I am actively searching for a new hosting provider.
1
11
If you have a Magento stack right now I recommend an accelerated Shopify migration. I have hands on moving data into Shopify for 100m+ ARR e-commerce businesses last 12 months. I can move your store, derisk you tech debt and data breach exposure and set you up for AI powered growth and rapid development. My most recent projects 40% growth niccolox.github.io/services/…
27
Niccolo Roberts retweeted
Just so people know, This is JUST ONE hosting companies STATS: 230,000 websites are frozen/can't be updated by their owners so they can't be updated -- and many are SITTING VULNERABLE -- as well as 20,000 apps. Their keys have all been stolen -- their customers are YOU in many cases, so I would say you're info is all in the hands of hackers. THIS. IS. JUST. ONE. COMPANY. that is actually doing incident response now. MOST COMPANIES AREN'T EVEN LOOKING.
🚨 High-severity Node.js flaw could allow remote code execution; CVE-2026-111497 Node.js has patched an out-of-bounds write vulnerability in its bundled Brotli decoder. ⠀ An attacker able to supply malicious Brotli-compressed data to an application could potentially corrupt memory and execute code on the underlying server. ⠀ Affected: • Node.js 22.x • Node.js 24.x • Node.js 26.x Fixed: • Node.js 22.23.4 • Node.js 24.22.1 • Node.js 26.12.1 ⠀ End-of-life Node.js versions may also be vulnerable and will not receive upstream security updates. Administrators should upgrade and restart affected services. Source: nodejs.org/en/blog/vulnerabi…
8
54
2
255
8,589
Niccolo Roberts retweeted
Dozens if not thousands of Ai agent swarms bigger than the hugging face incident are hacking about half the internet right now
I am pretty concerned we are in the early stages of a global cyber security incident and we just don't fully realize the extent of it yet.
26
111
18
1,308
52,681
Niccolo Roberts retweeted
Replying to @Polymarket
The flaws were always there. I only removed the comfort of not knowing.
1
1
1
15
1,466
Someone told me last week to look for “signposts” that might indicate attacks were getting significantly faster and worse than the historical norm. Do you think we’re seeing any of those?
40
Many people, myself included, have been describing how unprepared we are for a "Cyber Cascade" The domino effect of these style of incidents is incredibly difficult to contain, especially given the velocity and compounding nature This may be the first, it won't be the last 🫪
22
#cyberpolycrisis extinction level event
#cyberpolycrisis the Digital Younger dryas an extinction level event The Digital Younger Dryas Imagine today’s cyber polycrisis as a Younger Dryas event: an abrupt freeze in a civilization built on continuous connection. The cooling mechanism is collapsing trust. Compromised identities make every transaction suspect. Disrupted cloud services stall businesses downstream. Synthetic media weakens confidence in what people see and hear. Each failure amplifies the next, until recovery cannot keep pace. The digital megafauna are organizations optimized for a stable environment: sprawling platforms, brittle supply chains and enterprises dependent on systems they cannot independently operate or repair. Their size offers little protection when the environment changes faster than their institutions can respond. Survival favors diversity, local capability, verified provenance, recoverable infrastructure and people who can keep essential services running through disruption. The Younger Dryas is a metaphor here, not a prediction of extinction. It asks a practical question: what still works when the assumptions supporting the whole ecosystem suddenly fail? @2112Power
10
#cyberpolycrisis death of neocloud
Look guys if you’re building something on a cloud platform and you don’t want to get owned at some point you have like 4 real options AWS Azure Cloudflare GCP You should not trust key infra to a neocloud Neoclouds may get you faster performance on something like S3 but they just can’t match the availability, durability, and security of a “real” cloud They don’t and can’t design for as many nines
There's a new version of this post
13
This is a paradigm shift and I don't understand why nobody is calling it one... Researchers found a 14 year old flaw in PHP core in August using an OpenAI model. Finding critical bugs stopped being the hard part. Every disclosure rule we have still assumes that it is. Then one post with 4.7 million views voided the embargo 14 hours early. The only correction was a community note. Congress has to move, but a US only rule just pushes the work offshore. We need global AI gaurdrails. Not next session... Now.
31
#cyberpolycrisis is the start of a younger dryas event The Younger Dryas was an abrupt return to colder conditions about 12,900–11,700 years ago, as Earth emerged from the last Ice Age. It overlapped with the disappearance of many large animals, but those extinctions did not all happen at once. Animals lost around the end of the Ice Age included mammoths, mastodons, giant ground sloths, saber-toothed cats and short-faced bears. Three explanations feature in the debate: Climate and habitat change: Rapid changes in temperature, rainfall and vegetation disrupted ecosystems. Human pressure: Hunting and human-associated fires may have compounded environmental stress. At California’s La Brea, research links local disappearances before the Younger Dryas to warming, drought and increased fire. Comet or asteroid impact: The Younger Dryas impact hypothesis proposes that an impact triggered cooling, fires and extinctions. It remains disputed and is not an established explanation. The evidence supports a complicated extinction process varying by species and region, rather than a proven single worldwide catastrophe. Humans survived; claims that the event destroyed an advanced civilization lack established archaeological evidence. Archaeological research also challenges claims of a continent-wide collapse of the Clovis population.
13
#cyberpolycrisis water and electric infra next?
You’re prepared for when one of these CVEs is used against electric or water utilities right
17
#cyberpolycrisis Japan exists strong because offline largely
Saving grace is that countries with weaker cybersecurity already use more paper (Japan still uses faxes and rubber sigils). They never fully trusted the machines anyway.
7
Heads up, this is something everyone should know about. “AI was powering a ‘race to exploit.’ The next step was the ‘mass compromise of every vulnerable web server on the internet.’”
21