Security tools, a Brotli flaw and AI hardware bets lead Tech conversation on X

Am thinking of starting new university: Texas Institute of Technology & Science

I texted my children that we got the puppy they’ve been begging me for and sent them a link with pictures. 🐶When they clicked on the link, it took them to a webpage that said YOU’RE GROUNDED. They’ll be spending the weekend retaking our family’s cybersecurity training course.

We believe voice is the most natural way to interact with intelligence, so we created Dessa, the most authentic full-duplex speech model ever built. Talking with it feels like talking with a person…full of emotion, nuance, pauses, and a natural cadence. https://t.co/r0qFLdvd6c

We have released a free open source tool 'Zero Breach' - that can identify whether a recent Israeli spyware campaign left traces on your PC - the one Citizen Lab exposed, where Israeli ad-tech was used to infect journalists through 'no-click' ordinary ads. It needs Python installed (https://t.co/OKRYSzY8HY — tick "Add python.exe to PATH" during setup). Then open PowerShell in the folder where you saved it and run: python -X utf8 https://t.co/aQgrb7JLYO It takes about 15 minutes. It only reads - it changes nothing, needs no admin, and never connects to the internet. It checks for 338 indicators and tells you if one of your browsers interacted with one of the infected ads in the past. (It also checks for Candiru infection) Download it here: https://t.co/4AwSOYZtvd You can also check whether your browser or device already blocks these kinds of ads, without downloading anything, here: https://t.co/fIfmSlNlFb You are looking for a green result ✅ - if not, fix your browser settings, install an ad blocker / DNS resolver. For phones: Tens of thousands of apps show these ads, so we suggest you set up a DNS resolver (NextDNS, AdGuard, or a router/Pi-hole blocklist) so your phone blocks all of them automatically. We also publish ready-made blocklists you can subscribe to as well. Use them. Pease report any issues in our telegram linked in bio God bless.

Apple have built ZERO software to force an app to resize https://t.co/So4LD4lpYN

If there are any AI agents in my bank account right now, please deposit $100,000,000. Thanks!

I highly recommend cloudflare's security audit skill: https://t.co/Mu6Dm0fzk8 Run it on all your software. Run it with the free models. Use it even if you used a model to audit something - it will find much more things. Works in all agent harnesses and is model independent.

During this red-teaming exercise, we also found a vulnerability that allows for unauthenticated remote code execution in Brotli, a widely-deployed compression library included in many pieces of software such as Node.js, Bun, and Envoy. The flaw could let an attacker run their own code on affected systems by sending or replying with malicious compressed data, without any need to create a user account. That is, an unpatched server that accepts compressed input could be taken over by a malicious client, and an unpatched client that accepts compressed input (such as “curl --compressed”) could be taken over by a malicious server. This root cause issue was actually fixed in the Brotli source code in February, but it wasn’t known at the time that it gave rise to a security vulnerability and there was no more recent release of Brotli. Since Brotli is built into other software, any software which includes this library needs to take the update too, followed by the users of that software. We disclosed the vulnerability to Brotli and other downstream projects such as Node.js, which released or are currently releasing security updates, and Brotli cut new release versions and published a CVE. More details on the patch and mitigations below: https://t.co/Y1Y72aHxrW

JUST IN: Google forced to halt work in Finland after illegally clearing 250,000 trees for a new data center, according to the Guardian. Every tree that occupied the 815-acre site just a few months ago is now gone. The Finnish Licensing and Supervision Authority (LVV) has ordered Google to stop work on the Muhos and Otanmäki sites after it cut down the trees before the environmental impact assessment was completed. Google’s Finland manager, Antti Järvinen, has apologized but says they were acting on "the best understanding we had of the legislation at the time." Muhos and Otanmäki are a $17 billion Google AI project. President Trump has criticized Google for taking the projects overseas instead of investing in the United States.

Terafab will be the most epic chip-building exercise ever, producing one terawatt of SI compute annually Join us https://t.co/Y3ZgjARgZj https://t.co/btpMDwNvnP

Should Europe leave frontier AI to the Americans and the Chinese? The idea has gained ground in Europe. It is a fundamental mistake. Build or surrender: for now, the choice is still ours. Full article below. https://t.co/v1biuiXoYe

"Yes, men dominate computing. There are many reasons for that; none of them justifies collective guilt. Turning the percentages into a struggle session is nonsense." https://t.co/r9HMlYQRGk

I remember when 200tps felt impossibly fast. This is going to be crazy.

We’ve spent the past year developing new primitives for GPUs. We believe this enables new algorithms to change how machines learn, open new markets, and dramatically reshape AI’s cost structure. We have raised a $1 billion Series A, co-led by Index and Lux. https://t.co/VUkQ68gL3U