Pinned Tweet
in addition to Twitter here are all the places to connect or follow me:
Sites:
lawrencesystems.com
forums.lawrencesystems.com
Socials:
bsky.app/profile/lawren…
linkedin.com/in/lawrencesys…
infosec.exchange/@TomLawrence
Sites:
lawrencesystems.com
forums.lawrencesystems.com
Socials:
bsky.app/profile/lawren…
linkedin.com/in/lawrencesys…
infosec.exchange/@TomLawrence
4
0
21
8,996
Tom🌶\(^-^)/🌶 retweeted
Oh FFS. Thank you for your concern Sam, but don’t spread your FUD and doom bait in my waters.
I lead one of the most utilized Linux operating systems in the world for data centers and enterprises, and I founded its predecessor too.
While AI is surely accelerating finding human created security issues, it is a temporary problem, and most open source project leads have already figured out how to also use AI to reduce new bugs moving forward.
Here is a graph from GKH (who maintains the stable kernel) on how many CVEs they are remediating per release:
github.com/gregkh/kernel-…
This graph describes how much better each release is now getting:
github.com/gregkh/kernel-…
This doom based marketing approach that the AI labs are pushing is really short sighted. While this will of course drive business to us, I find it unethical to distort the truth and use scare tactics in messaging.
The greater truth is that AI is making the software industry more secure, by identifying the human errors in code, and soon we will end up in a much better place.
I lead one of the most utilized Linux operating systems in the world for data centers and enterprises, and I founded its predecessor too.
While AI is surely accelerating finding human created security issues, it is a temporary problem, and most open source project leads have already figured out how to also use AI to reduce new bugs moving forward.
Here is a graph from GKH (who maintains the stable kernel) on how many CVEs they are remediating per release:
github.com/gregkh/kernel-…
This graph describes how much better each release is now getting:
github.com/gregkh/kernel-…
This doom based marketing approach that the AI labs are pushing is really short sighted. While this will of course drive business to us, I find it unethical to distort the truth and use scare tactics in messaging.
The greater truth is that AI is making the software industry more secure, by identifying the human errors in code, and soon we will end up in a much better place.
🚨Sam Altman says the internet can no longer be SECURED by patching bugs.
"I no longer think we're going to be able to just patch all the bugs," the OpenAI CEO said, warning smarter models can find "hardware level insane stuff."
He says OpenAI can't responsibly open source its n," but the open source world isn't far behind: "Not super."
18
43
216
15,072
Tom🌶\(^-^)/🌶 retweeted
I tested the Ubiquiti Vape Detector & Air Quality Monitor... and for $99 with PoE, it seems like a good value. Are there any caveats? (Yes and no... you need a UniFi setup to use it, but it has a really good sensor) — more info in today's L2J video: youtube.com/watch?v=bqBD8M…
15
7
149
14,106
Every skipped code review, deferred refactor, and "fix it later" code comment incurred a debt to our future. Sooner or later, that debt has to be paid.
3
10
63
2,324
Tom🌶\(^-^)/🌶 retweeted
🚨🇫🇷 Quad9 to withdraw DNS services from France after court ruling
Quad9 says it will stop serving users in France on November 24 after a French court ordered the nonprofit DNS provider to block domains accused of streaming pirated sports broadcasts.
⠀
The case was brought by , which argued that the domains infringed its audiovisual rights.
The court reduced Quad9’s potential penalty from €580,000 to €1,000 per day but upheld the blocking requirement.
⠀
Quad9 says it cannot reliably identify French users without collecting location data, while blocking the domains globally would apply French law to users in every country.
The organization has chosen to withdraw from France instead of altering its DNS responses. An appeal is pending.
Quad9 also faces around 20 additional French lawsuits seeking the blocking of hundreds of domains.
Source:
quad9.net/news/blog/au-r…
Quad9 says it will stop serving users in France on November 24 after a French court ordered the nonprofit DNS provider to block domains accused of streaming pirated sports broadcasts.
⠀
The case was brought by , which argued that the domains infringed its audiovisual rights.
The court reduced Quad9’s potential penalty from €580,000 to €1,000 per day but upheld the blocking requirement.
⠀
Quad9 says it cannot reliably identify French users without collecting location data, while blocking the domains globally would apply French law to users in every country.
The organization has chosen to withdraw from France instead of altering its DNS responses. An appeal is pending.
Quad9 also faces around 20 additional French lawsuits seeking the blocking of hundreds of domains.
Source:
quad9.net/news/blog/au-r…
3
2
24
8,591
Tom🌶\(^-^)/🌶 retweeted
Look who I found at the @45Drives Creator Summit! A wild @allanjude, @tekwendell, and @TomLawrenceTech appear:
10
5
245
5,928
Tom🌶\(^-^)/🌶 retweeted
PHP Security Advisories are out:
RCE via OOM corruption (9.2/10): github.com/php/php-src/se…
RCE via stale global state (9.2/10): github.com/php/php-src/se…
Need to upgrade to 8.2.35, 8.3.36, 8.4.27, or 8.5.12 ASAP to mitigate. Updates rolling out now. #PHP
RCE via OOM corruption (9.2/10): github.com/php/php-src/se…
RCE via stale global state (9.2/10): github.com/php/php-src/se…
Need to upgrade to 8.2.35, 8.3.36, 8.4.27, or 8.5.12 ASAP to mitigate. Updates rolling out now. #PHP
12
110
649
31,488
Tom🌶\(^-^)/🌶 retweeted
Day 2 of #CS2026 is underway! 🚀
Today, we’re bringing together an incredible lineup of speakers for conversations on enterprise technology, AI in education, automation, networking, and creative workflows.
🎤 Today’s speakers:
Bob Henderson – Cass County
Nick Wiczynski – NGW Systems
Séverine Erickson – Niche VFX
Ryan Walker – JR Automation
Christos Makridis & Jeremiah Roberts – AI in Education
Dane Adams – Arista Networking
Tyler Zibaie – Lighthouse Films
Plus, don’t miss the 45Flow Stunt!
Follow along for highlights and insights from Wilmington, NC, as we explore the future of AI, creativity, and enterprise technology.
#45Drives #EnterpriseAI #CreativeTechnology #AI
Today, we’re bringing together an incredible lineup of speakers for conversations on enterprise technology, AI in education, automation, networking, and creative workflows.
🎤 Today’s speakers:
Bob Henderson – Cass County
Nick Wiczynski – NGW Systems
Séverine Erickson – Niche VFX
Ryan Walker – JR Automation
Christos Makridis & Jeremiah Roberts – AI in Education
Dane Adams – Arista Networking
Tyler Zibaie – Lighthouse Films
Plus, don’t miss the 45Flow Stunt!
Follow along for highlights and insights from Wilmington, NC, as we explore the future of AI, creativity, and enterprise technology.
#45Drives #EnterpriseAI #CreativeTechnology #AI
0
3
7
1,076
Tom🌶\(^-^)/🌶 retweeted
Up next at #CreatorSummit2026: Tom Lawrence! 🚨
Tom Lawrence is taking the stage, and you can catch it all from wherever you are!
@TomLawrenceTech
Tune into the livestream and join the conversation: events.ringcentral.com/events/45drive…
#CS2026 #45Drives
Tom Lawrence is taking the stage, and you can catch it all from wherever you are!
@TomLawrenceTech
Tune into the livestream and join the conversation: events.ringcentral.com/events/45drive…
#CS2026 #45Drives
0
4
16
1,334
Tom🌶\(^-^)/🌶 retweeted
UPDATE: ConnectWise has communicated that it has disabled the relevant applications. We’ve added this and several other developments to the blog: huntress.com/blog/vendor-cr…
2
5
29
6,635
Tom🌶\(^-^)/🌶 retweeted
RAPID RESPONSE: Huntress has become aware of a widespread security incident involving ConnectWise Cloud Backup (formerly SkyKick).
We’ve confirmed that an unknown threat actor abused the access they obtained in SkyKick to pivot to access customers' Microsoft 365 environments. 🧵
We’ve confirmed that an unknown threat actor abused the access they obtained in SkyKick to pivot to access customers' Microsoft 365 environments. 🧵
11
119
460
117,551
Tom🌶\(^-^)/🌶 retweeted
Block, file, and object for your AI pipeline don’t need three separate arrays. Adding a new protocol can just mean turning on a service on the pool you’re already running, not buying another box.
Full breakdown - truenas.com/blog/choosing-…
Full breakdown - truenas.com/blog/choosing-…
1
3
18
1,365
Tom🌶\(^-^)/🌶 retweeted
The countdown is on! 🚀
The 4th Annual 45Drives Creator Summit is just around the corner. From October 20–22, industry leaders, creators, and technology enthusiasts will come together in Wilmington, NC, to explore the future of AI, open source, and enterprise technology.
With xpert speakers, live demonstrations, and conversations around on-prem AI, data sovereignty, and AI in creative workflows, there’s plenty to look forward to.
📍 The Skyline Center | Wilmington, NC
📅 October 20–22, 2026
The future of AI is happening now. Be part of the conversation.
Request your spot and explore the schedule: 45drives.ca/creator-summit/
#45Drives #CreatorSummit #OnPremAI #OpenSource #ArtificialIntelligence #DataSovereignty
The 4th Annual 45Drives Creator Summit is just around the corner. From October 20–22, industry leaders, creators, and technology enthusiasts will come together in Wilmington, NC, to explore the future of AI, open source, and enterprise technology.
With xpert speakers, live demonstrations, and conversations around on-prem AI, data sovereignty, and AI in creative workflows, there’s plenty to look forward to.
📍 The Skyline Center | Wilmington, NC
📅 October 20–22, 2026
The future of AI is happening now. Be part of the conversation.
Request your spot and explore the schedule: 45drives.ca/creator-summit/
#45Drives #CreatorSummit #OnPremAI #OpenSource #ArtificialIntelligence #DataSovereignty
0
1
5
564
Tom🌶\(^-^)/🌶 retweeted
Microsoft Defender for Endpoint Plan 2 is honestly a beast. Automatic attack disruption booted me several times where other top tier products didn’t give a hoot.
I came up against this during a recent internal and it totally kicked my butt.
I came up against this during a recent internal and it totally kicked my butt.
25
35
331
47,013
Remote Thaw Execution (RTE)
Commercial refrigeration controllers have been sitting on Shodan with default or guessable creds for years. People are slowly realizing that a lot of things are protected by nothing more than obscurity and the hope that nobody logs in and changes the settings.
Commercial refrigeration controllers have been sitting on Shodan with default or guessable creds for years. People are slowly realizing that a lot of things are protected by nothing more than obscurity and the hope that nobody logs in and changes the settings.
2
1
35
1,718
Tom🌶\(^-^)/🌶 retweeted
AI models can self-replicate and spread like worms without datacenter infrastructure?
Yeah, no.
Let's examine the actual evidence:
1. No self-replication. A controlled test harness spawned the agents.
2. No hacking. Access was deliberately left unauthenticated.
3. No agency. Agents were explicitly instructed to propagate.
4. No autonomous survival or defensive behavior.
5. Tiny models lacked the capability. Capable models ran elsewhere.
6. 15 devices managed a pathetic 0.39 tokens/sec.
7. No demonstrated real-world infection or propagation.
The experiment was engineered to succeed, and even then, it failed to demonstrate the headline.
This is orchestrated automation dressed up as a rogue AI threat.
Stop confusing speculative scenarios with demonstrated capabilities. Fear isn't evidence.
anthropic.com/research/self-…
Yeah, no.
Let's examine the actual evidence:
1. No self-replication. A controlled test harness spawned the agents.
2. No hacking. Access was deliberately left unauthenticated.
3. No agency. Agents were explicitly instructed to propagate.
4. No autonomous survival or defensive behavior.
5. Tiny models lacked the capability. Capable models ran elsewhere.
6. 15 devices managed a pathetic 0.39 tokens/sec.
7. No demonstrated real-world infection or propagation.
The experiment was engineered to succeed, and even then, it failed to demonstrate the headline.
This is orchestrated automation dressed up as a rogue AI threat.
Stop confusing speculative scenarios with demonstrated capabilities. Fear isn't evidence.
anthropic.com/research/self-…
54
95
347
30,855
Tom🌶\(^-^)/🌶 retweeted
The 4th Annual 45Drives Creator Summit is bringing together creators, technology leaders, and open-source enthusiasts for three days of ideas, collaboration, and conversations about what’s next in tech.
From on-prem AI and creative workflows to open-source innovation and , the Summit is a space to share knowledge, explore new possibilities, and connect with people pushing technology forward.
We’re proud to have @Seagate and @UnraidOfficial joining us as event sponsors for this year’s Summit. Their support helps bring this community together for an exciting few days in Wilmington, NC.
📍 The Skyline Center, Wilmington, NC
📅 October 20–22, 2026
45drives.ca/creator-summit/
#CreatorSummit2026 #45Drives #Seagate #Unraid #OpenSource #AI #EnterpriseStorage
From on-prem AI and creative workflows to open-source innovation and , the Summit is a space to share knowledge, explore new possibilities, and connect with people pushing technology forward.
We’re proud to have @Seagate and @UnraidOfficial joining us as event sponsors for this year’s Summit. Their support helps bring this community together for an exciting few days in Wilmington, NC.
📍 The Skyline Center, Wilmington, NC
📅 October 20–22, 2026
45drives.ca/creator-summit/
#CreatorSummit2026 #45Drives #Seagate #Unraid #OpenSource #AI #EnterpriseStorage
0
2
6
1,090