Alex Stamos

You can find me at:

[Alex Stamos @alexstamos]

You can find me on...

Threads: https://t.co/WOnbS7KXXw
Mastodon: https://t.co/tRrvGE0h93

[Alex Stamos @alexstamos]

This is not true. I’ve been sending out resume packets for students and while it’s harder than past years they are all getting jobs.

[Kalshi Finance @Kalshi_Finance]

Stanford CS graduating class of 2026 just got their final placement statistics

Out of 312 graduates: 18 have full-time offers

That's a 5.8% placement rate from the most prestigious CS program in the fucking world

2019 placement rate was 94%. 2022 was 78%. 2024 was 31%. Now this.

The other 294 are fighting over 47 internships that require "3+ years production experience"

Career services is telling them to "consider adjacent fields" while the department just took a $50M donation from a company that replaced 2,400 engineers with Claude

One kid showed me his rejection tracker: 1,247 applications since September. 12 phone screens. Zero offers.

His parents refinanced their house for his tuition

The career fair had 8 companies and 300 desperate students in $180k of debt

Meanwhile the CS department just announced they're expanding their PhD program because "industry demand for AI research has never been higher"

The same week they sent acceptance letters to 89 new undergrads

These kids thought they were learning to be engineers. Turns out they were training to be obsolete.

[Jack Cable @jackhcable]

Today we're announcing @Corridor's $25M Series A led by @Felicis.

More code will be written this year than ever before. At Corridor, securing AI coding at the source, enabling companies to their development without security being a blocker. 🧵

[Jack Cable @jackhcable]

For anyone looking for a role, we're hiring rapidly at Corridor across a number of roles: https://t.co/FCeUWspv6w

Looking for mission-driven, scrappy people who share a passion for accelerating AI coding securely.

[Alex Stamos @alexstamos]

@jeffjarvis @X Definitely.

[Boaz Barak @boazbaraktcs]

Our secret is out. Our execs believe in the U.S. constitution.

[Caitlin Kalinowski @kalinowski007]

1st Amendment — freedom of speech, assembly, and protest

2nd Amendment — right to bear arms

4th Amendment — protection against unreasonable searches and seizures

5th Amendment — due process of law

14th Amendment — equal protection under the law

[Chris Olah @ch402]

I try to not talk about politics. I generally believe the best way I can serve the world is as a non-partisan expert, and my genuine beliefs are quite moderate. So the bar is very high for me to comment.

But recent events – a federal agent killing an ICU nurse for seemingly no reason and with no provocation – shock the conscience.

My deep loyalty is to the principles of classical liberal democracy: freedom of speech, the rule of law, the dignity of the human person. I immigrated to the United States – and eventually cofounded Anthropic here – believing it was a pillar of these principles.

I feel very sad today.

[Jeff Dean @JeffDean]

This is absolutely shameful. Agents of a federal agency unnecessarily escalating, and then executing a defenseless citizen whose offense appears to be using his cell phone camera. Every person regardless of political affiliation should be denouncing this.

[Corridor @corridor]

Now through Sunday, get 3 months free of Corridor with promo code TRYCORRIDOR.

https://t.co/Mm1OVLIPi7

[fiddy @fiddyresearch]

very very .... VERY impressed with @corridor . i would rank it as probably 1 based on the kinds of security issues it finds... it's a great companion to Cursor Bugbot and @greptile althought i observe that Greptile is not picking up as many bugs as bugbot does and neither bugbot nor greptile pick up the critical bugs corridor does, and corridor doesnt pick up stuff bugbot and greptile do (it's not supposed to, I guess?)

[Francis Fukuyama @FukuyamaFrancis]

Stop worrying about the "existential" threat of AI and focus on what's really dangerous:
https://t.co/QGouiMdTdJ

[cje @caseyjohnellis]

It's Thanksgiving Week in the USA, which we all know means one thing: TECH SUPPORT FOR FAMILY MEMBERS.

I'm very pleased to co-sign and have contributed to @boblord's https://t.co/xQ1jWLEgLj project, which seeks to debunk the most common "Kermit-hands" pieces of consumer cybersecurity advice that tends to spread around, particularly this time of year.

Why does this matter? The average Joe/Jane Internet is often told that avoiding public wi-fi, QR codes, or USB charge points will make them "safe" from malicious attacker on the Internet. This false (and, for the better part, misguided) sense of confidence distracts from the things that will ACTUALLY make them safer:

- Apply patches
- Enable 2FA/MFA
- Use passphrases
- Use a password manager

Note: These are all things that you can help your family and friends set up as we travel around the country this week... Go get 'em!

I encourage folks to share this stuff around with friends, peers, and loved ones - Let's stop hacklore, and instead make sure that we're covering the basics.

https://t.co/VQz7ZZ3YSI
#firstthingsfirst #simpleisstrong #stophacklore
@alexstamos @laparisa @evacide @CISAJen @MalwareTechBlog @runasand @LeaKissner @csoandy @treyford @tarah

[Jack Cable @jackhcable]

🚨 I made a simple tool to check if you're affected by the latest NPM worm.

The Shai Hulud NPM worm is back, infecting over 27,000 GitHub repos and big name packages from Zapier, Posthog, Postman and others.

Are you vulnerable? Check here: https://t.co/dbVrIK64GT

[Alex Stamos @alexstamos]

@SilverStacker57 @VALELORDX @RkikJeff what

[Alex Stamos @alexstamos]

Heather pushing back on some key claims of the ffmpeg team, pointing out that Google *does* financially support ffmpeg and history of directly improving the code base.

[Heather Adkins - Ꜻ - Spes consilium non est @argvee]

We’re excited to see the security and OSS communities engage on vulnerability disclosure in light of new AI technologies that we believe will enable both defenders and attackers alike. Existing and emerging norms around disclosure are important debates, and we’ve noted the feedback. Thanks! Also want to share some additional thoughts. 1/10

[Alex Stamos @alexstamos]

@vxunderground @goofieguru @axolytea I think the problem is that ffmpeg auto-detects codecs in lots of situations so even if it's super obscure there are probably a decent number of exploitable scenarios in the wild, which is why they should probably disable such detection by default for their long tail.

[Alex Stamos @alexstamos]

@vxunderground I think multiple things can be true:
1) Google should be submitting proposed patches using that same AI capability
2) ffmpeg should put these esoteric codecs behind compiler/run-time flags
3) OSS needs more corporate financial support
4) This is gonna get much worse

[Factory @FactoryAI]

The Corridor MCP in Factory enables you to ship code with real-time guardrails, secure PR reviews, and full visibility.

Agent-Native Development that is fast and safe.

[Mike Vernal @mvernal]

Congrats to @jackhcable, @AshwinRamaswami, @alexstamos and the entire team at @CorridorSecure! The amount of AI-generated code is growing exponentially. Corridor helps you make sure that code is more secure at the start (through better context) and stay secure as the codebase evolves.

The team here is really great! We are very grateful to be working with them.

[Jack Cable @jackhcable]

Meet Corridor: the security layer for AI coding. Now generally available.

@CorridorSecure is the first security tool that moves at the speed you build – enforcing security guardrails in real time.

Get two weeks free, with plans starting at $20/month.