Mech retweeted
How on earth did this happen:
The Indian certificate authority (CA) eMudhra had one job (well, two):
1. Create secure, 384-bit private keys
2. Store these securely and do not leak them
Well, eMudhra chose private keys between 1 and 256 (the numbers!!) and called it a day. WTF
Mech retweeted
Chat, we've gone big league
Last time on Dragon Ball Z, a few weeks ago I made a crappy little video of me bonking goop (malware) with a stick. In the video I mentioned I use IDA Pro, I believed it to be the best on the market, and said as an independent researcher I can easily afford (I used a cracked version).
Following this silly video, I got an e-mail from the people who make IDA (Hex-Rays). I immediately believed they were going to yell at me, hit me over the head with a cinder block, or sue me, for using a cracked version of their very expensive product and displaying it in the video.
Instead they told me they liked my goop video and they liked my goop posts. They also said they like vx-underground because they value the goop.
So anyway, so instead of beating me over the head with a cinder block, they gave me IDA Pro Expert for free.
wtf i love hex-rays
This is so that Hokkien businessmen who are doing a quick overnight affair with a random KTV girl can make sure that their fanny packs full of at least 5-10k SGD are not being robbed while they take a dump or shower. You're welcome for the explanation. Follow me for more deep cultural insights into Singaporean culture.
Mech retweeted
Learning from this discourse that the whole USA is in a prisoner’s dilemma where they have 3% interchange fees that get passed through to the cost of goods so they can all make a hobby out of getting some of it back.
Mech retweeted
The guy in this famous Today is Friday in California clip, Hiroshi Tsuchida aka Ninja Blue Ranger, has passed away. He showed up for many more projects like Kakuranger 30th too, what a guy
Mech retweeted
One of the proudest DC traditions: ads micro-targeted at one procurement guy at the Pentagon
Mech retweeted
> be JayTaelien
> security researcher
> discovered Discord zero day exploit
> send Twitch embed to victim
> something something
> massive exploit chain
> arbitrary code execution
> only requirement is victim clicking a Twitch embed
> Discord confirms 1 ClickRCE
> pays him $5,500
Dawg, someone get Discord on the horn and tell their CEO his company is a fucking piece of shit. This exploit is devastating and if this guy didn't tell them, and instead decided to weaponize it, he could have fucking destroyed end users.
All bro would have had to do is be like. "Check out this Twitch streamers clip", and destroyed their machine, executing any malware they wanted arbitrarily, stealing data, whatever.
Bro could have gone to large Discord channels, shared the link, potentially infecting thousands upon thousands of people effortlessly
He could have down more precise operations targeting prominent streamers, moderators, celebrities known to use Discord, and fucking wiped them all out with anything he chose to execute
Imagine if he sold this exploit to ransomware groups
He could have made millions of dollars, easily
Imagine if he went into a cryptocurrency Discord and the payload was a cryptodrainer. He could have drained entire communities in seconds
And they paid bro $5,500
That's absolutely sickening. JayTaelien is a fucking saint and decides a much larger payouf
Mech retweeted
Yes, I've seen the posts about the Israeli mercenary spyware infecting mobile devices from ads on websites using zero day exploits, primarily targeting Palestinians and journalists.
This is ... I think third or fourth ... Israeli firm which does something like this.
Mobile spyware on this caliber unfortunately is not something I have been able to bonk. Mercenary spyware is notoriously difficult to detect and it is almost never shared publicly, in any capacity, it is usually shared with very specific researchers behind closed doors to bonk.
When this sort of goop is identified it is kept close to the chest of security companies or researchers because they do not want the governments, or individuals developing it, to know what they know about their mobile goop.
It's basically ultra mega fuck off super goop which can be acquired by ultra mega fuck off secret top secret goop acquisition specialists.
I'm aware several governments purchase these sort of exploits and spyware and use it, including the United States government, specifically ICE
I just don't have the goop bro
Mech retweeted
A SOUTH KOREAN BASKETBALL PLAYER, GOT HIS HEADBAND BANNED FOR BREAKING THE RULES AND IMMEDIATELY STARTED TAPING HIS HAIR DOWN WITH KINESIO TAPE
the commentator losing it while his coach just stood there speechless makes this 10х funnier Im crying😭😭
What's happening in Indonesia?
TLDR: we're experiencing a 1990s Russia-style oligarchal seizure of assets (literal thugs that kidnaps people and feeds them into literal crocodiles tried to confiscate a massive conglomeracy)
MSCI saw that, saw the trendline, and was like "lmao"
Mech retweeted
One of my neighbors worked for USAID. After they were abruptly fired, they had to be hired back on as a consultant at substantially higher pay almost immediately, as they were doing a function that was still necessary.
There are many stories like this.
Mech retweeted
I cannot let a steam engine analogy go by without bringing up John Wilkinson, perhaps the most underappreciated engineer of the Industrial Revolution.
Watt had figured out how to dramatically improve the steam engine, but he spent years struggling to actually manufacture one. The problem was embarrassingly simple: nobody could make a sufficiently round cylinder.
The casting and machining tolerances were atrocious. Watt complained that one 18-inch cylinder was out of round by as much as THREE-EIGHTHS OF AN INCH. Steam leaked past the piston. He tried packing the gaps with cork, oiled rags, paper, and apparently even old hats. Nothing worked particularly well.
Enter John Wilkinson, a British ironmaster whose immediate concern was manufacturing better cannons.
At the time, iron cannons were commonly cast around a core, introducing defects and misalignment that could make the barrels inaccurate or dangerously weak. Wilkinson developed a process for boring cannons from solid castings, and in 1774 patented a vastly improved boring machine.
The key innovation was almost comically mechanical: a massive, rigid boring bar, supported at both ends, that could cut a genuinely straight, circular hole instead of following the irregularities of the casting.
He adapted this technology to Watt's cylinders. By 1776, Matthew Boulton was boasting that Wilkinson had bored a FIFTY-INCH cylinder accurate to within the thickness of an old shilling.
Suddenly, the steam engine was a commercially viable machine.
And the story gets better. Wilkinson became one of Watt's first customers, buying an engine to drive the blast machinery at his own ironworks. The steam engine was now helping manufacture the iron that made more steam engines possible.
I find this whole episode absolutely extraordinary. The Industrial Revolution was, for a critical period, bottlenecked on the ability to make a sufficiently round hole.
We remember Watt, and rightly so. We remember the invention of the steam engine and the subsequent development of thermodynamics. But the man who made the machinery that made the whole thing possible is practically a footnote.
I think we consistently underestimate how much of scientific progress is actually downstream of advances in tooling, measurement, and manufacturing precision. It's not just that technology precedes theory. Sometimes the decisive breakthrough is that someone finally figures out how to build the thing the theorists have been talking about for twenty years.
Anyway, I think John Wilkinson deserves considerably more credit for modern civilization than he gets.
a few thoughts:
1. pretraining science is kind of like how people built quite good steam engines before they understood thermodynamics. “Science owes more to the steam engine than the steam engine owes to science.”-(L.J. Henderson). if nick is right, which i am pretty sure he is, progress points in the direction of more interpretability, and pretraining was "slouching towards monosemanticity". my guess would be that major breakthroughs in interp also advance capabilities
2. nick is a good friend of mine, safe to say my origin story at openai wouldn't have happened if i hadn't met him, and it's fascinating watching him operate and seeing the early drafts evolve into this. he's the most profoundly happy guy I know- not driven by guilt, activism, or religious terror, but by fascination. he of course understands the stakes of understanding neural networks, but it doesn't seem like the core reason he does it: he just loves the neural nets. afaict he's posting this from some beautiful hideaway in tokyo. there's a lesson in there for all the +EV maxers. i feel very grateful to have met him
3. i do think it's crazy how few people across the world were staring at neural nets growing: most have moved to a different level of behaviorist analysis, thinking about reward functions and test scores and whatnot. it does not bode that well for the major model companies, oai included, that fundamental breakthroughs like this are coming from outside. we've become too much of a pressure cooker focusing on local incentives, studying narrow tracks under old paradigms, mostly doing engineering, rather than fundamental research, and implicitly hoping the next model will figure it out
Least surprising headline of the day. The show I'm co-running was originally set in San Diego. We applied for a CA rebate, got denied, held up prep for months to apply again, got denied again, so now the show is set in Virginia & we're filming in NJ/NY.
We really, really tried.
New York Poised to Overtake California as Top State for Movie and TV Production hollywoodreporter.com/busine…
Mech retweeted
A break from politics to slap down this rage bait AI slop.
Top one is AI. That was not the Hot Wheels logo in 1997. The logo as shown debuted in 2012.
Bottom one looks like a McDonalds giveaway. They don't have the level of detail of main line Hot Wheels (they're free)
This quoted post is unavailable.
Mech retweeted
So it isn't easy and it requires a bunch of specialized and sterilized equipment but you can in fact put the contents (specifically the imaginal discs) of one pupa into another pupa and 99% of the time this results in a dead or non-viable and soon afterwards dead butterfly, BUT







































