Tessera
Folgen

Chris Wiegman

@chriswiegman.com

Tech leader, mentor, blogger, and open-source advocate with over 20 years of experience building humane, privacy-focused teams and technology.

83 Posts811 Follower232 Folgt
Ian Coldwater 🧊🚫@lookitup.baby · 25m ago

Not a single word of this is hyperbolic in the slightest. Buy your friends in cybersecurity the drink or chocolate of their choice right now. We are not doing well

Jason Koebler@jasonkoebler.bsky.social · 7h ago

wrote about "Black October," the PHP vulnerability, and the AI-fueled dread and panic I'm seeing among almost all of the cybersecurity experts I've ever known. I think people w/ LLMs are brute forcing software the same way they brute forced social media w/ slop www.404media.co/php2shell-bl...

Anil Dash@anildash.com · 15m ago

Much of the modern digital world only exists because of human social norms. The Internet's backbone exchanges data at light speed because a bunch of regular folks, essentially, shake hands & agree to do so. Lots of fragile, vital infrastructure only survived because nobody decided (yet) to knife it.

Jason Koebler@jasonkoebler.bsky.social · 7h ago

Security through obscurity is a terrible principle but in practice a lot of things didn't get hacked bc people ignored them, or didn't know they existed, or just generally got missed. AI makes it easy to probe all of these things at scale + makes it easier to find/develop exploits

But it has become clear that AI, broadly defined, has fundamentally changed both offensive hacking and defensive cybersecurity. This is not because AI has become sentient or because human beings have lost control of it or because of “swarms” of “rogue agents,” but because AI is proving something that we have always known: much of the software that runs the internet, our devices, our accounts, and our lives is vulnerable, or out of date, or has security flaws that human beings never noticed, or was installed by someone at a company who left the company six years ago and has been replaced four times and no one knows how to find them now or how to update it. This doesn’t mean that all of the vulnerabilities that have been found with the help of AI have been obvious or trivial; skilled hackers and researchers, driving AI tools, seem to be better than humans alone at finding vulnerabilities. But, critically, AI and large language models have made it extremely easy to essentially brute force the internet; if every piece of software is a door, AI makes it exceptionally easy to turn turn the knobs of every door to see if it’s unlocked, even on buildings that human beings had never really bothered to try to open. What we are learning at an alarmingly fast pace is that not only are some of the locks easy to pick, in some cases the door is wide open or there’s a giant hole in the wall. The recent spate of people using AI to hack their internet of things devices to run new software shows that, in some cases, it takes essentially no expertise to actually use AI to hack something.
Jem Turner@jemjabella.com · 10h ago

I am actually genuinely fuming about the cyber guy not knowing what PHP is. I've been fighting for fucking years to be taken seriously as a woman in tech & still regularly get talked down to & some bloke can just turn up on TV as an *expert*, without the first fucking clue.

Kevin Collier @kevincollier.bsky.social · yesterday

In any other admin, this would probably be the most outrageous official statement ever made by a sitting FCC director: Strongly implying that the government forbids broadcast networks from reporting on the president's falling poll numbers. (Sorry to paste from twitter but that's where he posts.)

Bild
absolute horses@jcoglan.com · yesterday

what is actually happening here is that AI is discovering vulns that no human effort could apparently uncover, and so they were effectively unexploitable, and then advertising them to the world. the idea this is "defending against attackers" is ridiculous

Post nicht verfügbar.
Kim, Bestie of Bunzy, Co-CEO Execubetch™️@easybakedoven.bsky.social · yesterday

Not sure who needs to know this but Ian did you a huge favor This is a real, current alert: PHP confirms two critical vulnerabilities rated 9.2/10, with fixes scheduled about an hour away. [PHP announcement](www.php.net/archive/2026...) · [CERT-EU advisory](cert.europa.eu/publications...

PHP: News Archive - 2026

PHP is a popular general-purpose scripting language that powers everything from your blog to the most popular websites in the world.

php.net

Ian Coldwater 🧊🚫@lookitup.baby · yesterday

shitposts aside, this one is serious, my loves: if you’re just waking up and you have any service online running PHP 5.4 to latest, you need to take it down RIGHT NOW and don’t put it back online until after it’s patched absolutely catastrophic vulnerability dropped in the middle of the night

Eric Erins@ericerins.bsky.social · 4d ago

The Uptown Theatre. Uptown Chicago. Designed by Architects Rapp & Rapp for the Balaban & Katz movie chain in 1925. The largest freestanding theatre in North America. Closed since 1981. Diamond in the rough

BildBildBildBild
John Scalzi@scalzi.com · 5d ago

I see we're having a debate about whether it's okay to go back to "X," the site owned by a trillionaire fascist who is currently bankrolling the GOP's midterm, throttled Ukraine's war effort, and still winkingly allows vast amounts of CSAM on his service Answer: No, what the fuck is wrong with you

Chris Wiegman@chriswiegman.com · 4d ago

I dropped out of an MBA in the end (eventually got an MS degree instead). My turning point was being assigned to debate against the Kyoto Protocols because they were bad for business. Of course I "won." It was the default position. My dad got sick the next semester and I just stopped going.

Elizabeth Spiers@espiers.bsky.social · 4d ago

The idea in here that business schools inherently train people to devalue labor reminds me that the same critique was made when the first business schools in America were started, which I mention here: www.elizabethspiers.com/the-anti-int...