feel the agi
Austin, TX
Joined October 2011
- Tweets14.9K
- Following5.5K
- Followers5.1K
- Likes247K
Hassan Hayat 🔥 retweeted
"Why is formal verification exploding NOW?"
1. Cost of proofs is going DOWN (as AI gets more capable)
2. Cost of exploits is going UP (as AI gets more dangerous)
3. Proofs exterminate exploits
4. Bonus: proof checking = perfect math/coding RL reward
The rest is economics
I’ve heard several OAI people say there are unfixable bugs in hardware that are exploitable by AI models directly speaking machine code so even if we could solve software that’s not enough. We need defense to move faster than offense if that’s even possible we may just have a new normal that requires adapting to insecure software (bank transfers require going into a branch and taking a dna test 🤣😬)
Hassan Hayat 🔥 retweeted
I can finally talk about Mass Effect Universe.
Since Bioware closed I can now reveal that I was part of the Mass Effect Council, saw what BioWare was building, and provided feedback during development.
• Set 600+ years after the Reaper War
• You play as a customizable N7 agent
• Instead of being a walking gun rack, you're a cross between John Wick and James Bond
• Shepard's legacy preserved, regardless of your ending
• A galaxy divided into three major factions
• Humanity, Krogan, Batarians, and more allied together
• Council races forming their own alliance
• The Geth emerging as a third superpower
• A galactic Cold War instead of another Reaper style invasion with a shadowy adversary
• Geth-built megastructures
• Connections between the Milky Way and Andromeda
• Experimental technology implanted in you as a unique point of difference
• Hacking and manipulating the environment
• See through walls, identify systems, remotely trigger hazards and more
• Handcrafted missions like ME1-3
• But with Hitman-style freedom in how you complete them
• Brutal close-range executions
• Squadmates who can clash with each other
• Romance wasn't being sanitised
• Liara returns - now an incredibly powerful Asari Matriarch
From what I saw, BioWare was making Mass Effect for us, the fans, not for people who don't exist.
It looked incredible.
And now we may never get to play it.
Find out more here: youtu.be/ZOWrTNazZxM
#SaveMassEffect
Hassan Hayat 🔥 retweeted
I always thought it was a shame that modest default stack setups made alloca() a generally-frowned-upon technique in C/C++. With 64 bit architectures, give every stack a virtual address space equal to the physical memory by default!
You can do a surprisingly good job of memory management with just the stack, and I contend that it has both correctness and performance advantages.
Allocations are a trivial pointer adjustment, and frees are literally free. Keeping everything linearly packed is friendlier for all layers of the cache hierarchy, and it makes keeping everything in huge / gigantic pages easy.
Leaving temporary intermediate blocks on the stack can seem wasteful, but unless you are dealing with algorithms that make > O(n) temporary allocations, it is usually not a big deal.
Static analysis can check if you store a stack pointer into a structure deeper in the stack, which is a use-after-free, and then memory management correctness is guaranteed.
The discipline of caller-allocates-return is awkward in some dynamic cases. It would take a change in low level calling conventions, but you could plausibly have functions that return with the stack extended from where it was when they were called. I’m not holding my breath for that.
It isn’t obvious if having AI coding agents makes discussions of software architecture more or less important!
URGENT - PHP Warns of Another Unpatched RCE Two Days After Emergency PHP2Shell Patches thehackernews.com/2026/10/ur…
Hassan Hayat 🔥 retweeted
The models aren't causing this. Decades of sloppy, inserious bs and corner cutting is causing this. Decades of "quick, let's outsource to the cheapest codemonkeys we can find" are causing this.
You can cry about it, or you can actually FIX THINGS. Either way, it's time for some reaping what was sewn. Burying your head in the sand doesn't fix anything. After a period of time, the vulnerabilities will be patched and things will stabilise again. Literally nothing has happened, except long standing problems have been identified that you were blissfully unaware of
Hassan Hayat 🔥 retweeted
Notably, the cyber issues do not depend on malicious or self-replicating AI. Centrally it seems that trust and principles of least privilege turn out to be much harder to reliably enforce in cyber infrastructure than planned for. The internet grew like ancient cities built out of wood, before zoning and building codes. Unsurprising in retrospect that it could burn down so easily. I hope we can keep the one we have but I don't consider it at all obvious whether we will be able to. Will heroic defenders successfully patch everything, or will we have to build new patchwork internets built to higher standards with far fewer features in exchange for certainty and security? Unclear!
Hassan Hayat 🔥 retweeted
映像から見えない筋肉の動きを推定する「SOMA v2」公開🩻
🔹RGB映像から皮膚の下にある筋肉の変形を推定
🔹SKIM v2でデータセットや骨格リグを改善
🔹従来のLBSと比べマーカー誤差58%減。筋肉と皮膚の衝突率は0.06%と報告
開発者：Eduardo Alvarado氏ら
コード・データ公開中。
情報元はリプ欄。
Hassan Hayat 🔥 retweeted
New on our Frontier Red Team blog: using Claude to formally verify software at large scale.
Formal verification can prove that code is free of certain bugs, but historically it has only been feasible for small codebases (or required a lot of expert time).
With AI models, however, this is beginning to change. In collaboration with @theoremlabs, we used Claude to prove security properties in over one hundred real-world open-source libraries over the span of a few weeks.
Read our research in full here: anthropic.com/research/forma…
Outside of legacy reasons, there are only two types of languages of interest for coding agents
1) A system one efficient language that enables the agent to do its work (bash / python replacement)
2) A system two language that enables formal verification (rust / lean hybrid)
SCOOP: Major U.S. banks are detecting unauthorized third-party AI agents inside customer accounts, including some attempting to take actions that appear to be independent of user instructions, sources told Axios.
The findings have alarmed banking executives, who are racing to restrict access to their systems as AI moves at a velocity faster than financial institutions can respond, multiple industry and bank executives told Axios.
Several banks are now preparing for worst-case and even “day after” scenarios, including how to rapidly secure or restore customer accounts if things go wrong, the people said.
Several bank executives told Axios they're struggling to distinguish between human users and AI agents. One executive said banks also struggle to determine whether agents are authorized by customers or potentially operating without their permission, more akin to rogue agent behavior.
Read my latest for Axios here: axios.com/2026/10/22/ai-agen…
AI labs, please lend your strength to S3. You have no idea how f***ed we all are if it turns out it is filled with exploits
Sorry everyone... We're announcing a 0-Day vuln in QUIC that allows anyone to remotely turn off a server running these libraries. I swear we didn't plan this.
foxio.io/blog/header-accordi…
