David Adrian

former @googlechrome security. host @scwpod. cofounded @censysio. cryptography, startups. “ruthlessly practical". Go blue!

[David Adrian @dadrian]

I wrote a post about how security undervalues preventing problems, and how this can be exasperated by AI and the vulnpocalypse, even though AI should actually make robustness much easier for defenders

[David Adrian @dadrian]

@rubencodes @__apf__ cope.

[David Adrian @dadrian]

@matthew_d_green What's the alternative? I find it difficult to draw conclusions about the future based on things that haven't happened yet.

[David Adrian @dadrian]

In the middle of all this security nonsense, HTTPS became the default, and Chrome now warns before insecure HTTP connections!

https://t.co/oxw3eITTBX

[Censys @censysio]

🚨 Censys is closely tracking PHP2Shell exposure and remediation worldwide.

Our live dashboard tracks affected PHP versions and patching progress by country, network, and PHP version.

View the live dashboard: https://t.co/sicDgpcKz6

[David Adrian @dadrian]

smdh, liberal cancel culture strikes again https://t.co/rRqhPQ7kHw

[David Adrian @dadrian]

And also the CollegeWorks Painting playbook?

[David Adrian @dadrian]

First ever fintech to think, "what if we ran the Hooters playbook?"

[David Adrian @dadrian]

@dguido besides, if you want want to do crimes in Miami, you can just go outside

[David Adrian @dadrian]

This is actually because they fear Roko's Basilisk. The next Mass Effect was based on the Red Ending of ME3, where artificial intelligence is destroyed.

[David Adrian @dadrian]

@dguido same, tbh

[Jon Oberheide @jonoberheide]

You've gotta patch your dependencies super fast because they're full of vulns (PHP, Node, eMudhra, etc), but not _too_ fast because they're full of backdoors (LiteLLM). Good luck!

[Matthew Green @matthew_d_green]

How do you even generate an RSA key with d=4, I ask, not wanting to be told the answer.

[David Adrian @dadrian]

@martin_casado @sporadica unfortunately :(

[David Adrian @dadrian]

@martin_casado @sporadica it's a bad study with a bad model, it's not the average employee predicting gdp

they didn't actually ask employees what growth would be, they asked employees to predict specific productivity improvements and then mapped that into a model that had implied GDP results

[David Adrian @dadrian]

I'm hearing Anthropic has decoded the Voynich Manuscript?

[David Adrian @dadrian]

@kylascan @TahraHoops It's also a very nice running route!

[David Adrian @dadrian]

@Yuchenj_UW Claude is absolutely mogging the cryptographic conspiracy bench https://t.co/PzuUhl6vly

[David Adrian @dadrian]

@lcamtuf This was 2011

[David Adrian @dadrian]

@lcamtuf A lot of Kant. Paradoxes with the scientific method, "I've always seen X, therefore always X" is a logical fallacy, epistemic differences between science and math, do things like the principal of least action impact free will, occam's razor, ways to align religion and science

[David Adrian @dadrian]

First, they came for the CSVs and I said nothing, because I exported to JSONL

[David Adrian @dadrian]

Ban CSV! Ban JSONL! Ban SQLite!