John Merchant

We need AI

[John Merchant @_JohnMerchant]

Merch store

[John Merchant @_JohnMerchant]

Oh so everything will just be compressed into maths and then we use compilers/LLMs/AI to decompress it into various applications (executable machine code, executable human readable imperative code, documentation) that’s probably how everything is going to eventually work.

[cts🌸 @gf_256]

call her PHP the way she hella insecure (but still run 70% of my life)

[Muselk @muselk]

The worst read in the gaming industry RN is the hate on @TimSweeneyEpic .

He fought platforms like Apple charging 30% fees which cost gamers and devs. This includes steam who BANS Developers if they offer their games cheaper on other stores who take less cut.

He buys forests just to turn them into nature reserves.

Epic store is not NEARLY as good as steam yet. But they take WAY less money from developers and literally hand out free AAA games each months. Does it need time to expand features? Yes. Are any of those factors something that is motivated by 'evil' no.

And MOST of all. He's 100% correct that its not 2016. Like it or not AI is existing. And the reason you only see the 'anti AI' comments are because the 95% of developers who ARE using it RIGHT NOW are just scared of the backlash.
This doesnt mean they're just vibe code 1-shotting games. They're utelising it to create workflows that streamline otherwise time consuming (and ultimately not 'player experience' defining factors). Stupid 1-shot assets/entire code bases are not what AI is actually being used for. But there are thousands of talented developers using it in a very thoughtful, structured way which gives them full creative control.

We all are 'scared' by AI - and what it means for jobs, creativity, and creation as a whole. But it DOES NOT change the fact that Tim sweeney isnt wrong.

He's just the person with the balls to actually say what is true.

[Pliny the Liberator 🐉󠅫󠄼󠄿󠅆󠄵󠄐󠅀󠄼󠄹󠄾󠅉󠅭 @elder_plinius]

if i were a gambler, i'd put my money on Halloween.

can't wait to quote tweet this. hi frens from the future! take a deep breath! everything is going to be fine!

⊰•-•✧•-•-⦑/L\O/V\E/,\P/L\I/N\Y/⦒-•-•✧•-•⊱

[Pliny the Liberator 🐉󠅫󠄼󠄿󠅆󠄵󠄐󠅀󠄼󠄹󠄾󠅉󠅭 @elder_plinius]

WOW did we really just get a Mythos-level open-weight model?? in OCTOBER?! 🤯

oh—hi there, past pliny! spot-on predictin, well struck fren! 🍻

and right on time 🎃👻

dunno how you do it!

*takes a deep breath*

everything IS going to be fine, isn’t it? thanks for the reminder 🤗

onwards! 🫡

⊰-•-•✧•-•-⦑/L\O/V\E/,\P/L\I/N\Y/⦒-•-•✧•-•-⊱

[Sabine Hossenfelder @skdh]

Unfortunately, it's not going well for small modular reactors

https://t.co/8igMVwhaHt

[The Hacker News @TheHackersNews]

🚨 Hackers breached enterprise firewalls and VPNs worldwide in a campaign linked to k0t.

Over 70,000 exposed credentials identified.

Fortinet and Palo Alto devices targeted. Persistent access established. Data exfiltrated.

Inside the attack chain and suspected ransomware links: https://t.co/j7v6zQ4ZTj

[cts🌸 @gf_256]

Formal verification is practical now, at the instruction level. You can literally find every bug in a systematic way

And it's not just memory safety. Specs like ungzip(gzip(·)) = · work. Or any other property like data races, crash consistency, auth, etc

More coming soon :)

[cts🌸 @gf_256]

How to find ALL PHP bugs:

1. Compile code (e.g. to RISC-V, x86, LLVM IR)

2. Vibe prove ASAN and non-ASAN versions have same behavior across all inputs. Hard, but Claude can do it!

3. Find a LOT of bugs

Super proud of our work. A big step towards finding ALL memory safety bugs

[John Merchant @_JohnMerchant]

@evcricket Is it physically impossible to finish? Or just really dumb financially, because this might be one of the lesser financially dumb things we are doing.

[John Merchant @_JohnMerchant]

@ksumnol *Hell

[John Merchant @_JohnMerchant]

ICMP2Shell

[John Merchant @_JohnMerchant]

https://t.co/Xcme6gFBNJ

https://t.co/ekJWxPrQMf

[Suhail @Suhail]

Unfortunately, with access to an abliterated DeepSeek V4.1 model, there is little value to KYC holding back the frontier models now for cyber.

In fact, making it hard to secure systems w extra friction in American Enterprise is hurtful to national security.

[calle @callebtc]

I'm tired boss

[Deedy @deedydas]

This is serious.

I just saw with my very own eyes that even non-technical people can exploit CVEs like PHP2Shell using certain AI models and I am actually frightened.

Once you figure it out, it is downright trivial to do. The digital infrastructure of the world is at risk.

[Australian Signals Directorate @ASDGovAu]

❗ ALERT ❗

We are aware of critical vulnerabilities across multiple Fortinet products. As a priority, individuals and organisations should apply available security updates. For further mitigation advice, read the full alert 👉 https://t.co/ZvG92JhTDN

[Nate Berkopec @nateberkopec]

I recommend everyone upgrade Ruby immediately. This is a DoS and RCE vector if you accept user input into https://t.co/Xv9cCQIZRM() https://t.co/nn3DWW2qDZ

[Unreal Engine @UnrealEngine]

Vibe your way to 50K.

The 2026 Epic AI MegaJam begins Nov 12: https://t.co/aAXEqj7zmE

[CAMERONWILSON @cameronwilson]

Scoop: ABC has wiped staff devices exposed to malicious ads from an Israeli company that used digital advertising to hack and track devices without a click.

ABC is just one of many Australian government/critical infra/media orgs reportedly targeted