Growing older is grappling with the realization that my schizophrenic relative with paranoid delusions has a higher hit rate than the people who dismiss him.
WTF, $3000 Samsung TV has an always-on mic, automatic content recognition, geo tracking, network mapping, and ships your data to Samsung + 400 partners.
Bro Rooted a brand-new 2025 Samsung TV after noticing absurdly targeted ads.
Firmware was locked down, so zero-days it was. n found: always-on voice service, ACR, geo, full telemetry pipeline, and four separate DRM systems.
This isn’t a bug, It’s the product bro.
38
69
1,448
37,543
ESR gets it. Love having the legends that guided us through times off massive change in the past step up and have a reasonable voice this time around.
The only way out is through.
They're calling it the Bugpocalypse. LLMs are being used to find long-hidden cracks in the software infrastructure, and it's happening at a furious rate. 3% of all compromises in computing history happened in the last week, claims one source? I believe it.
There are people saying public access to the frontier models ought to be locked out, or heavily guardrailed, over this. The problem with that idea can be summed up in one sentence: when lockpicks are outlawed, only outlaws will have lockpicks.
The lockpicks will be Chinese open-weight models, if nothing else. There's no way to stop those from becoming ubiquitous.
There are two futures in front of us. One in which only the bad guys have lockpicks, and security holes go undiscovered until they're exploited. Another in which everybody has lockpicks and is aggressively red-teaming their own software so it gets fixed before the holes are exploited.
The corpus of human code is huge but finite. The number of defects in it has to be finite too. We can fix those defects now; we have a million friendly robots to do it with.
The only way out is through.
15
3
116
10,496
martin_casado retweeted
The only way out is through.
They're calling it the Bugpocalypse. LLMs are being used to find long-hidden cracks in the software infrastructure, and it's happening at a furious rate. 3% of all compromises in computing history happened in the last week, claims one source? I believe it.
There are people saying public access to the frontier models ought to be locked out, or heavily guardrailed, over this. The problem with that idea can be summed up in one sentence: when lockpicks are outlawed, only outlaws will have lockpicks.
The lockpicks will be Chinese open-weight models, if nothing else. There's no way to stop those from becoming ubiquitous.
There are two futures in front of us. One in which only the bad guys have lockpicks, and security holes go undiscovered until they're exploited. Another in which everybody has lockpicks and is aggressively red-teaming their own software so it gets fixed before the holes are exploited.
The corpus of human code is huge but finite. The number of defects in it has to be finite too. We can fix those defects now; we have a million friendly robots to do it with.
The only way out is through.
They're calling it the Bugpocalypse. LLMs are being used to find long-hidden cracks in the software infrastructure, and it's happening at a furious rate. 3% of all compromises in computing history happened in the last week, claims one source? I believe it.
There are people saying public access to the frontier models ought to be locked out, or heavily guardrailed, over this. The problem with that idea can be summed up in one sentence: when lockpicks are outlawed, only outlaws will have lockpicks.
The lockpicks will be Chinese open-weight models, if nothing else. There's no way to stop those from becoming ubiquitous.
There are two futures in front of us. One in which only the bad guys have lockpicks, and security holes go undiscovered until they're exploited. Another in which everybody has lockpicks and is aggressively red-teaming their own software so it gets fixed before the holes are exploited.
The corpus of human code is huge but finite. The number of defects in it has to be finite too. We can fix those defects now; we have a million friendly robots to do it with.
The only way out is through.
151
516
3,607
247,730
martin_casado retweeted
despite the unfortunate timing, we take disclosures seriously at @typesafeai
at approximately 6:49PM this Friday evening, we became aware of a massive unauthorized leak of ALL customer noul outputs
in effort to maximize transparency, here is the link: gist.github.com/diogo149/81003…
at approximately 6:49PM this Friday evening, we became aware of a massive unauthorized leak of ALL customer noul outputs
in effort to maximize transparency, here is the link: gist.github.com/diogo149/81003…
431
287
5,618
1,035,548
martin_casado retweeted
Not a hot take but: I don't think you can patch existing software. You might be able to build new software to not drown in exploits but v thd. You must prevent all on an exponential number of paths (\forall). Attack just has to find one (\exists)
3% of “critical” software security bugs, in all of recorded history, have been found in the last month.
This is on pace to find another ~100,000 bugs this year alone, adding ~26% more vulnerabilities to the all time total
Do you realize how fucking insane that is?
2
1
8
2,172
martin_casado retweeted
@martin_casado sense for European companies because it's Euros not dollars, hence my preference for NRR as a term.
But historically it was never about (GAAP) revenue, it was about ARR but now that ARR is basically becoming meaningless, it really should be about revenue going forward.
But historically it was never about (GAAP) revenue, it was about ARR but now that ARR is basically becoming meaningless, it really should be about revenue going forward.
1
1
15
2,584
The best way to say good-bye is with a spliff in your mouth. Amazing run big guy. You're the best.
today was my last day in cloudflare (again). the best career and opportunity in my whole life, and the closest friends I would die for. thank you to everyone who made it all so special. I had an incredible time. 🧡
12
9
580
42,572
Now live: abliterated-model-large-flash (our version of DeepSeek-V4.1-Flash-1017). It is a cheaper alternative to our GLM-5.3-based model for product owners and defenders who need access to the most cyber-capable models.
- 1M context
- Vision
- Zero input/output retention or training
We believe paying customers should be in control, and over the past few months, leading experts and major brands have adopted our models.
abliteration.ai
3
2
77
6,970
martin_casado retweeted
Cursor can now control your computer.
Agents can drive desktop apps like the iOS Simulator to test the features they build.
Agents can drive desktop apps like the iOS Simulator to test the features they build.
500
455
6,212
374,842
Ruby’s turn 😅
Remember the GitLab bug? Well now it moved upstream into Ruby.
Multiple 10.0 CRITICAL exploits.
Patch now 🚨
Happy Friday 🤠
ruby-lang.org/en/news/2026/1…
6
0
61
6,043
