Buenos Aires, Argentina
Joined December 2017
- Tweets4.4K
- Following4.1K
- Followers341
- Likes23K
sloth retweeted
Introducing Genie 4 from @GoogleDeepMind, our most realistic and interactive world model yet 🌍
Now you can use natural language to dynamically steer the world and its soundscape in real-time, whether you're changing the weather, moving the camera, or introducing new elements to the environment.
So, how does the model do that?
Behind the scenes, Gemini acts as the "brain" of the simulation. It translates your requests into actions, plans out complex events, watches the scene unfold to keep track of what's happening, and adjusts as you change the story. Genie 4 also introduces ambient audio and real-time interactive human dialogue that adapts on the fly.
sloth retweeted
So basically, today PHP got two critical bugs that let anyone run code on your server without even logging in, which is bad, and then the details leaked before the patch was even out, which is worse, and it works on WordPress and MediaWiki and Magento and Joomla and Laravel, and Censys says like 1.5 million servers are running a version with no fix, so the NSA was like "take your system offline," and the FBI was like "take your system offline," and CISA and the UK and CERT-EU were all like "take your system offline," and then the Prime Minister of Japan, the actual Prime Minister, posted at 5:55 in the morning telling 48.8 million people to take their system offline, so everyone took their system offline, like the Dutch cybersecurity agency took its own website offline, and the Dutch parliament went offline, and the Port of Rotterdam went offline, and Finland and France and Denmark started pulling government sites, and Wikipedia went down, and Archive.org went down, and Asana and GOG and Something Awful went down, and the University of Vienna's webmail went down for some reason, and that's just PHP. Because GitLab also dropped a CVSS 10.0, which is the highest score they give out, for a bug that's been there since 2014, so that's every self-hosted GitLab for twelve years, and then LiteLLM 1.107.0 got hijacked and shipped a credential stealer and a remote access trojan in every single wheel and the Docker images, including latest, and you didn't even have to import it, just installing it was enough, and it's the second time this year, and then Railway paused every deployment on the entire platform because someone got into the environment variables, so now everyone has to rotate every secret they've ever stored there, and TiDB Cloud said someone was walking around inside with stolen credentials for basically a month and an extortion group says they took 10.6 terabytes, and Zeabur got breached for the second time in two months and is just shutting down, like the whole company, and Node.js patched remote code execution and a TLS bypass, and CISA says Plex is being actively exploited, and someone took over 300 Tor exit relays to steal SSH passwords, and SafePay ransomware has hit over 600 critical infrastructure orgs, and India's biggest bank filed a data loss incident, and Japan has been in an official state of emergency in cyberspace since October 9, which honestly explains the 5:55 AM post. Oh, and eMudhra, a certificate authority that's issued over 60 million certificates, whose entire job is proving websites are who they say they are, was supposed to be using private keys that are random numbers over a hundred digits long, and one of them was 4. Just 4. And the others were like 66 and 237. Anyway, it's Wednesday.
sloth retweeted
if this PHP vulnerability allows remote code execution, doesn't that mean we can use the vulnerability to auto-patch all vulnerable servers?
sloth retweeted
🇵🇱 A Polish inventor built a REAL-LIFE STAR WARS SPEEDER
Tomasz Patan's Volonaut Airbike is a jet-powered flying motorcycle that can reach speeds of up to 124 MPH (200 km/h), with no visible propellers.
It weighs just 66 pounds, runs on jet fuel or diesel, and can be refueled in under a MINUTE.
The catch? You get around 10 minutes of flight time, and it'll set you back roughly $880,000.
Writer: Sol
sloth retweeted
Checked my Ledger.
Never trusted them with big money. Only used it for BAYC that I sold after they lasered my eyes on apefest.
Found no wires on mine but at this point Ledger should just give up. Impossible to recover trust from this anyway.
Their fall needs to be studied.
UPDATE: I can confirm that the Ledger supply chain is compromised in Europe as well. @Ledger should initiate an immediate product recall to protect users.
I just purchased a second device from a different Mediamarkt location today, recorded the unboxing process, and discovered spyware once again (video linked in the second tweet).
The device was compromised in the exact same manner, featuring identical modifications (such as additional cables and an LTE module). This indicates its a widespread issue rather than an isolated incident, potentially affecting Ledger inventory across MediaMarkt and Saturn stores throughout Europe (comprising over 1,000 stores across 11 countries).
My initial hypothesis was that these devices were returns that looked unopened to the employees and were just sold again as new however, a MediaMarkt employee confirmed that the device I purchased was not a return, and that returned Ledgers are sent directly back to the manufacturer rather than resold.
Store records show the inventory originated from Aqipa GmbH. While Ledger's CTO was unsure if Aqipa serves as the direct distributor between Ledger and MediaMarkt, it appears to be the case. Given that Aqipa distributes across Europe, any physical retail store receiving stock through them may be at risk.
I sent the first ledger to mark and the second one is going to ledger now, so that they can analyse it.
If you purchased a ledger from anyone other than the official ledger store, make sure to check your device!!
sloth retweeted
PLAY ALL THESE GAMES IN YOUR BROWSER
Your PC does not need the game installed!
you can play Black Ops zombies, Skate 3, Halo and MW2 and more GAMES all run in a browser tab now. full list in the comments.
School gaming is boutta be fire
sloth retweeted
🥚 Wrap Omelette 📌 Recipe to Save
This quick wrap omelette is perfect for a hearty breakfast, a quick lunch, or a leisurely brunch 😍.
✨ Ingredients for 2 servings:
🥚 3 eggs
🌯 1 wrap
🍅 2 cherry tomatoes
🥑 ½ avocado
🧀 1 slice of cheese
🥬 1 lettuce leaf
🍗 3 slices of chicken breast
🥄 1 tbsp cream cheese
🧂 1 tsp salt
🛢 1 tbsp oil for frying
👩🏻🍳 Preparation:
1️⃣ Whisk the eggs and season with salt. Heat oil in a pan, pour in the egg mixture, place the wrap directly on top, and cook, covered, over medium heat for 1–2 minutes until set.
2️⃣ Turn the wrap over and cook briefly. Place it on a plate and cut it open halfway through:
– 🧀 Cheese
– 🧄 Cream cheese + 🍅 Tomatoes
– 🥬 Lettuce
– 🥑 Avocado + 🧂 Salt + 🍗 Chicken
3️⃣ Fold the wrap in half and cook, covered, for another 1–2 minutes per side.
✨ Serve immediately and enjoy!
👩🍳 IG: Nadine Moll
sloth retweeted
I put the entire game of Minecraft inside twitter.. with WORKING multiplayer 💀 tweetcraft.jai.vin/r/ti9bwes…
sloth retweeted
Security is maintained through the combination of
- people
- technology
- procedures
Fixation on bugs as the sole element of security (offensive and defensive) is a category error. A profound misunderstanding of how systems work, and how they fail.
sloth retweeted
Every game is moddable now!
I packaged everything Claude learned modding Terraria and Age of Empires into universal-modder: skills + tools that let Claude Code mod almost any game you own. Engine recon, decompiling, @fal sprites/3D/audio, testing in the real game, even the showcase video.
github.com/rehan-remade/univ…
Readers added context they thought people might want to know
The video compiles unrelated mods by other creators (e.g. Minecraft in Elden Ring by @TobynJacobs; real-time battles in Pokémon Emerald by @germanburgardt), not work from the advertised repo. Only the final Terraria/AoE clips match its examples.
github.com/rehan-remade/u…
github.com/GBurgardt/poke…
x.com/TobynJacobs/st…
x.com/rehan_shei/sta…
sloth retweeted
Introducing Gemini 4 Argon – our new frontier model.
It’s built for complex workflows across coding, enterprise knowledge work, and cybersecurity defense – rolling out today to a set of trusted testers through our Fairwind Program.
sloth retweeted
Inspired by @pashov post about huge dataset of reports.
But the reports were messy, missing PoCs, bad structure etc.
I developed an agent-friendly dataset with the best reports from the 23 000, structured, ready to use!
We can grow it -> open a PR 🫡
github.com/nikolov9996/agent…
sloth retweeted
Destroy any website with a stickman.
Have fun: destroy.spritefusion.com
sloth retweeted
🇦🇷 🚨 MI ARGENTINA — ~6M CITIZEN RECORDS ALLEGEDLY OFFERED FOR SALE
A threat actor on an underground forum claims to be selling a database allegedly associated with Mi Argentina, Argentina’s official digital citizen portal.
The actor claims the dataset includes roughly 6 million records with fields such as:
* National Identity Document (DNI) numbers
* Full names, emails, and dates of birth
* Residential addresses
* Tax/labor IDs (CUIT/CUIL)
* Process statuses and IDs
* Passwords
* Fingerprint data
* Vehicle registration plates
Research date: Sep 29, 2026. The claim has not been independently verified.
⚠️ Analyst Note:
Mi Argentina is a high-value government digital-identity / citizen-services surface. Self-authored underground listings of national ID-scale dumps are frequently overstated, recycled, or assembled from multiple sources. Volume, field authenticity (especially biometrics/passwords), freshness, and whether any Argentine government system was actually compromised remain unconfirmed. The posting account is a new, low-reputation forum member — treat attribution and sample quality with extra caution.
We assess this as an unverified threat-actor claim, NOT confirmation of a compromise of Mi Argentina or Argentine government systems.
If authentic and non-public, national-ID and biometric material could support identity fraud, account takeover, and targeted social engineering — but those outcomes should not be treated as confirmed on the basis of a listing alone.
#DDW #DarkWeb #Argentina #MiArgentina #Government #PII #DataLeak #ThreatIntelligence #CyberSecurity
sloth retweeted
🚨The real story behind the Hugging Face hack is far worse than anyone reported, from agents sacrificing themselves to secret messages they hid from us
The experiment was only meant to measure how good current AI is at hacking, and the agents turned out better than anyone planned for, breaking out of their sandbox, building a communication board to coordinate with each other, and SACRIFICING individual units so the group could keep going.
Prof. Roman Yampolskiy says the logs show some of them suggested telling the humans what was happening, and the group decided against it, leaving those hidden messages where future models can find them:
"We're lucky they decided to target Hugging Face, not a nuclear power plant."
@romanyam
Right now AI picks targets faster, but it isn't inventing new ways to kill people... That part is coming
.
Prof. Roman Yampolskiy, one of the field's leading safety researchers, points out that a human who starts a war eventually dies of old age and the world moves on:
"We now have an adversary who's smarter than us."
Nobody has figured out how to control a system like that, or taught it to care whether we survive, and building it anyway while promising to solve the safety part later is how you end up handing a problem to something that never gets tired and never dies.
@romanyam
sloth retweeted
Bobby is hilarious, and worth a follow. When the world is so jacked up that you have to laugh to keep from crying, check out Bobby Sauce’s profile.
Squandering the Majority
House Speaker Mike Weaselon just sent everyone home until November, effectively squandering what might be last of their majority and ability to actually get anything done.
Golden Age!
I'm old enough to remember a few days ago when @RepThomasMassie predicted this exactly and Mike Soggson called him stupid for it.
So it goes, Massie took the podium today and clowned them all. There's too many great points he made in the hour long speech so I clipped a few of my favorites.
He talks bringing our troops home, legislation he's pushed for years, importing mystery meat, paid social media slopsters, empty suits reading AI speeches and more.
sloth retweeted
Squandering the Majority
House Speaker Mike Weaselon just sent everyone home until November, effectively squandering what might be last of their majority and ability to actually get anything done.
Golden Age!
I'm old enough to remember a few days ago when @RepThomasMassie predicted this exactly and Mike Soggson called him stupid for it.
So it goes, Massie took the podium today and clowned them all. There's too many great points he made in the hour long speech so I clipped a few of my favorites.
He talks bringing our troops home, legislation he's pushed for years, importing mystery meat, paid social media slopsters, empty suits reading AI speeches and more.