cybers thot lead. worshipped idle. dispenser of the obvious. awkward
Internet Security Riot Club
Joined August 2008
- Tweets24.5K
- Following1.7K
- Followers2.5K
- Likes28.6K
Ask AI if you have a good idea it will agree. If you claim to find a new something, you should search to see if it has been done before. Multiple people pointing out this is not new, but no one knows or cares.
The idea was introduced a long time ago, but in 2016 Hypernetworks
We asked GPT-6 Astra to edit Qwen3.5-0.8B weights to improve math.
It directly changed only 0.016% of weights, fixing 0.8B's reasoning loops & improving math up to 6x and even instruction following 3x, without gradients or training.
We call this Weight-Space Programming: frontier LLMs can now natively read/write neural network weights! 🧵
Blog: rikiyat.github.io/blog/weigh…
Hahahah.
Don’t get me wrong I feel bad for the people it affects, but the company put freezers on the internet with the default password. What’s the first thing we try? The default password.
This is not about a vulnerability or AI. This is about not doing the bare minimum
Again, wannabe supervillain. Living in his own AI psychosis and believing his own lies.
None of this is new. I have had to have this setup for over a decade to work well with the major email services.
Oh no, they are enforcing the rules.
If you aren’t set up right and get blocked, good for you.
Noting burger.
Half of cold email SMTP is about to get blocklisted and nobody's talking about it.
It's November. Spamhaus starts rolling out its new rules this month.
Every sending IP needs a real HELO, reverse DNS and a matching A record. Miss one and you're a candidate for the blocklist.
Running SMTP on localhost with your host's default hostname?
Gents. The clock just started.
The AI gangs of rogue agent swarms looking for ways to shake down companies.
Just as Altman (while e coyote style super genius) predicted.
Again, wannabe supervillain vibes.
If the world wont bend to his will, he will find a way to force his personal goals ignoring all others.
Sam Altman travels to South Korea to meet Samsung leadership to secure more RAM for data centers amid crushing shortages — OpenAI CEO meets Samsung leadership to discuss future AI data centers tomshardware.com/tech-indust…
Hey, maybe if they didn’t have the fridges online, or isolated they wouldn’t be hacked as much.
we made every user an admin and expect everyone to be a tech and do the right thing.
Secure by default would be nice, but that is restrictive and not “user friendly”.
MadHat Unspecific, InfoSec Mercenary retweeted
Am I the only one thinking this is overblown?
Race condition thats not super easy to create.
Probably not going to impact services behind load balancers.
RCE only demonstrated for MPTCP which most services don’t use.
No documented exploits in the wild.
The noise to signal ratio on a lot of these are way too high.
What a disaster atlasum.net/blog/cve-2026-98…
Everyone is an expert is security. Every vulnerability is the worst evar.
Every post is the most amazing or the most scary news ever and you won’t believe it.
Best of luck security experts. You will cause compromises.
I have not seen any rogue AI swarms.
Do we have gangs of free-range agents wandering around the internet casing the joint?
Prompt policing does work some but is prone to mistakes.
This is also just horrible customer service.
I have a similar tool in my routine for a while now. It catches extremes when tuned correctly. Otherwise it blocks random items. It’s overzealous and tried to find issues.
We’ve trained Claude to flag potential misuse in conversations, a technique we call self-assessment. Right after it responds, Claude gives a preliminary safety assessment of the conversation.
Since we began using self-assessment in June, it has surfaced misuse that our other safeguards weren’t designed to catch.
Because Claude has already read the conversation, self-assessment is very efficient. And unlike classifiers, which target a discrete set of harms, it draws on Claude’s own judgment, so it gets more accurate as our models improve.
Read more on our new Safeguards blog:
safeguards.anthropic.com/202…
The Sony MVC-FD91. Released in 1998 and could take pictures at 1024x768.
I’m not a hoarder, I am a collector.
Everyone is a cybersecurity, information security, enterprise security expert. With zero years of experience and believing everything AI printed when you brushed up to start an argument for your industry. mainly because there is more to criticize than praise, so … distraction
At this point Altman is looking cartoonish like a wannabe supervillain.
Want to build a service to steal everyone’s data, destroy the economy and the environment, then kill all humans.
Late 90s “ハッカー” became super popular for stickers and shirts in the hacker scene. I know I have had a few. I have a story about Japanese investors and a laptop sticker.
It was also my second tattoo in 2001. Luckily I can’t see it to see how it has (not) survived.
Detection and response is the whole game. You have to be prepared and protect everything you can, but in the end, it is all about detection and response.
There will never be a 100% secure environment. Planning ahead is so your response can be faster and more targeted
I think the era of rapid detection and response to keep incidents small & contained is going to draw to a close with agentic attacks.
We’re going to have to security engineer our way forward instead. Limit blast radius by design. Brilliance in the basics. It will be more about hardening and configuring what you have (which is hard and slow and boring) vs. reaching for some shiny new product that will solve all your issues
It’s just like every other month in this industry for the last 30+ years.
It’s a great job, but not for the faint of heart
October in a nutshell:
- PHP got hacked
- Railway got hacked
- OpenCode got hacked
- Binance got hacked
- Polymarket got hacked
- GitHub Actions got hacked
- SoftBank got hacked
- Cursor marketplace got hacked
- Coinbase vendor got hacked
- Fireworks AI got hacked
- LiteLLM got hacked
- Capcom got hacked
- npm packages got hacked
- TiDB Cloud got hacked
- Warp's vendor got hacked
happy cybersecurity awareness month
Gizmodo reports what they see not what they weee told.
Odd to see lately. Most carry the AI industry’s psychosis proudly.
Sam Altman: All the RAM Should Belong to Me, So I Can Charge People to Use It gizmodo.com/sam-altman-all-t…
