ynerdy retweeted
‼️BREAKING: PHP has released its fix for the two leaked flaws, which can let attackers run code on servers without logging in.
"There are no complete mitigations, updating is the only safe choice," PHP says.
Update to PHP 8.5.12, 8.4.27, 8.3.36 or 8.2.35 now.
PHP says Apache with mod_php is most at risk, with a demonstrated exploit that fires before any application code runs.
PHP 8.1 and older get no official update, though PHP has published source backports for 7.4, 8.0 and 8.1.
ynerdy retweeted
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
ynerdy retweeted
GPT-6 and Intelligent UI, now rolling out in ChatGPT for everyone.
Intelligent UI in ChatGPT delivers fast, interactive answers that make everyday questions more visual, complex topics easier to grasp, and interactive tools for your task available on the spot.
ynerdy retweeted
I am very uncomfortable about people trying to ascribe religious force or a surrender of human judgment to AI models, and think it is a real safety issue.
ynerdy retweeted
i couldn't sleep after watching this
i work in osint. i asked my agent to visualise what my scrapers do all night while i sleep. it drew them as crawlers
> 1 agent turns into 256 in 9 seconds
> each one takes a page and reads every word it steps on
> search, forums, feeds, news, shops, public DBs: 16 pages, 2,900+ words in 20 s
everything you've ever posted in public is getting scraped like this. right now
ynerdy retweeted
Twitter asked users for phone numbers and email addresses to secure their accounts, including for two-factor authentication, then used that data to target ads.
It did so by matching the data against advertisers' marketing lists.
More than 140 million users were affected from 2014 to 2019, the FTC says. Twitter called it an error and paid $150 million in 2022.
ynerdy retweeted
We're adding a new plugin to Claude Code: You should Know.
It scans Claude's output for important information you might miss to help keep you in the loop.
Enable it with:
/plugin enable cc-plugin-you-should-know@builtin
ynerdy retweeted
Bro knows AI better than 99% of AI influencers.
- PewDiePie trying to distill GPT-Sol
- OpenAI ban his account
- OpenAI trained on the open web.
- PewDiePie tried to trained from the model’s answers.
- Same idea, opposite consequences.
- PewDiePie says OpenAI banned him twice while he was building a local model.
- PewDiePie’s latest project is a reminder of who actually owns the pipeline.
- They spent years absorbing public data.
- He spent weeks trying to improve a small local model.
- If distillation is theft, what do we call the original training run?
- “why do we pay for the model?
ynerdy retweeted
PewDiePie says OpenAI banned him twice while he was working on his own AI model.
He claims the first ban was related to “distillation,” while the second happened after he used AI to generate training data.
He has now shown off Ajax, a smaller AI model designed to run directly on a normal home PC. It’s based on Qwen3.5-9B and is built to work with his own self-hosted AI setup
He also used the open-source Heretic tool to remove many of its built-in refusals, while keeping some safety limits.
