Building Security + Enterprise Products @CoreWeave. Built Security Products @HashiCorp, Crypto and Defense Products @NetApp. 🖤: Kendo, trance music, Warhammer
NYC Metro Area
Joined August 2008
- Tweets17.6K
- Following671
- Followers2.1K
- Likes22.5K
Pinned Tweet
The traffic sucks. Everything's expensive. But living in a place where convos abt physics, CS, and math are the daily norm rules.
16
Andrew "Andy" Manoske retweeted
For those who recall, when HD Moore released Metasploit, the community debated whether it would make hacking too easy, arm script kiddies, and give attackers an advantage. The same conversation took place with L0phtCrack, and SATAN before then. History tells us how this plays out already.
The fact that we have patented technology called "Valvey" and "Racky" should highlight how wonderful the vibes are inside CoreWeave product + engineering
Valvey and Racky, CoreWeave's rack systems for @nvidia Vera Rubin NVL72, are already in our data centers and in daily use.
Alex Dutton says no one had ever put 200 kW in a rack before Vera Rubin.
Bigger pumps and heat exchangers meant tighter control at every rack. Valvey and Racky handle that as part of CoreWeave Mission Control, and we're scaling them with our partners.
Alex walks through it below. crwv.co/uuo0r
Andrew "Andy" Manoske retweeted
CoreWeave Database is now generally available.
Managed PostgreSQL now runs within your CoreWeave Kubernetes Service (CKS) cluster, so agents and RAG pipelines no longer cross clouds to access their data.
Built on CloudNativePG, with pgvector included. crwv.co/uuHsu
Happy Free Applebee’s Day for those who celebrate.
This is the most accurate representation of my 17S experience I can find.
1
2
168
Use that DD-214 for all the things today. You deserve it:
bluestarfam.org/resources-pe…
22
Andrew "Andy" Manoske retweeted
Sandbox skills coming soon!!
Introducing CoreWeave Skills in public preview.
Claude Code can build a CoreWeave Kubernetes Service (CKS) cluster, add a GPU Node Pool, serve a model with vLLM, and check that the GPUs are actually busy.
Install once from CoreWeave's official GitHub repo: crwv.co/uuGEq
Andrew "Andy" Manoske retweeted
This is how we treat the GPUs in the data centers at @CoreWeave
OpenAI Cyber is demonstrating one of the most valuable benefits of agentic AI:
Proactive detection and remediation of vulnerabilities.
This may be one of the few chances in history that defenders can get ahead of their adversaries.
This is the "upcoming cyber model" from yesterday. Besides 948 Linux vulns, it found 111 renderer RCEs in Firefox, among which, 81 were novel. 30 were exploits for bugs known to developers that were thought to be unexploitable.
We are using this technology to scan more OSS projects and secure the Internet infrastructure.
This is just a start.
1
160
Bro wtf.
I'm not even sounding the claxon for this it's just horrible.
Any text > 256chars is a valid root password, holy shit
sshhole.com/
2
201
Pulled the trigger after my Blade's battery started to die & Apple prices about to rise
Meet Jupiter: a 16" M5 Max MBP and my first personal Macbook! Excited for it to earn some stickers and already floored with local AI and gaming performance
Thanks for the last 5yrs, Mercury
Replacing my '22 Razer Blade 14 in next 6 mo's with a new personal laptop. Don't do a ton of competitive gaming anymore, and play mostly casual MMO's + single player RPGs on flights
Surprisingly, probably going to go w/ the new MBP if it plays like this: youtube.com/watch?v=PjKXRE5h…
3
8
528
Very rad.
When we built Vault's break glass functionality back in the day at Hashi, we did similar:
- Revoke all access/identity tokens (huge)
- Lock the persistent state + infra (stop post-exploitation activities, here kill the gateway)
10yrs+ of attacks has proven this out.
Introducing the AI Kill Switch in Falcon Guardian 🛑
When an AI agent goes rogue, defenders can now terminate it at the root, block relaunches, and cut network access. Get full human control for secure enterprise AI adoption. crwdstr.ke/6013BHa3P9
1
2
424
The security research community has spent decades creating best practices for a reason:
A cyberattack, even if it's a valid pentest or redteam event, is still destructive.
AI doesn't change how destructive an attack can be. It makes it *more* important to follow best practices
1
2
239
Andrew "Andy" Manoske retweeted
Recently, there seems to be the weird theory going around that hash functions are somehow more secure than lattices. There is no reason to believe that. It is perfectly possible that we live in a world where SHA and BLAKE are fully broken, but lattice assumptions are not.
I'm genuinely way more concerned about post-AI crypto than I am PQC.
And I've been very concerned about PQC for over a decade.
Scary that an intel org can perform replay attacks in the near future. Even scarier to think someone with a B200 can hack critical infra right now.
just when we were getting used to post-quantum cryptography, vitalik brings up post-AI cryptography. lovely
1
139
CYBERCOM and the like can engage KPA cyber adversaries because their kinetic deterrence consists of the most powerful military in history.
Cyberwarfare is still warfare. Showing up to a gunfight without guns? It’s a bold strategy, Cotton.
"There's interest in bringing back 'letters of marque and reprisal' to counteract the cybercrime that North Korea is committing."
North Korean cyber actors are military and intelligence personnel. If you're gonna go getting yourself into a direct confrontation with a hostile state's military apparatus, I'd say: gl, hf, and make sure you have a decent life insurance policy
1
1
922
Andrew "Andy" Manoske retweeted
For the first time in 10 years, a new major version of Postgres is delayed.... because AI is helping them find and fix so many bugs.
rhaas.blogspot.com/2026/10/p…
We've seen record sized breaches this past week and there has been a sharp rise in security incidents as AI is weaponized to find and exploit vulnerabilities in code.
What's less visible is the much steeper rise in how AI is being used to write more secure software and defend at every layer.
Builders have always had a fundamental advantage against attackers because they have full access to source code and control over system design.
We haven't always had the resources to fully take advantage of this asymmetry, but now with AI we do.
Everything we build can now be designed and pentested by the best security minds (models) in seconds -- for cents.
Not all teams have had the time to catch up yet, so we're not out of the woods as an industry.
But as the best teams fully modernize how they ship, AI is also enabling an era of the most trusted software ever. You don't see this in dramatized headlines yet, but it's a very good time to build.
RCE and root any Linux system with just a malformed packet.
AI is finding absolute demons hidden in the foundations of critical infrastructure.
What a disaster atlasum.net/blog/cve-2026-98…
4
252