Machine learning researcher @ Qualcomm AI Research, ex-ML PhD @DTU_Compute. Interested in geometric ML. Non serviam.
Amsterdam, the Netherlands
Joined September 2014
- Tweets1.2K
- Following622
- Followers429
- Likes97.1K
Pinned Tweet
Our paper "Variational Autoencoders with Riemannian Brownian Motion Priors" was accepted in #icml2020
See you virtually in @icmlconf
arxiv: arxiv.org/abs/2002.05227
code (still being refactored): github.com/dimkal89/rvae
Dimitris Kalatzis retweeted
The thing about Google clearing a forest in Finland without permits is that they decided that whatever fine they might face is worth it. It doesn’t cost them as much as not getting the land cleared.
Because like ALL things, if the punishment is a fine, it isn’t really illegal for rich people.
Dimitris Kalatzis retweeted
Let me get this straight.
A guy keeps getting weirdly targeted ads on his new Samsung TV.
So he breaks into his own TV to find out why. 1.2M people watch.
42 hours later, OpenAI deactivates his account. Reason: "Cyber Abuse."
His words: "i have never used openai to exploit or find vulnerabilities, only local reverse engineering"
Same week, people on r/claude say Claude now cuts off reverse-engineering write-ups MID-SENTENCE:
"A safety check stopped my response partway through creating the playbook"
The TV is fine.
The guy who opened it is the problem.
Dimitris Kalatzis retweeted
We finally have an explanation for “Facebook is listening to me through my phone”. They’d never do that (and it’s not really possible).
Turns out literally everyone else was — and then selling that to ad data brokers.
WTF, $3000 Samsung TV has an always-on mic, automatic content recognition, geo tracking, network mapping, and ships your data to Samsung + 400 partners.
Bro Rooted a brand-new 2025 Samsung TV after noticing absurdly targeted ads.
Firmware was locked down, so zero-days it was.
Got a root shell.
then found: always-on voice service, ACR, geo, full telemetry pipeline, and four separate DRM systems.
This isn’t a bug, It’s the product bro.
Dimitris Kalatzis retweeted
When a corporation can unilaterally cut you off from accessing the most valuable resources in the world, you are not free.
You are a peasant. You are a serf.
This is technofeudalism. We need mandatory access to AI as a right enforced by citizenship.
We need sovereign AI. We need local and open AI.
Actually open AI. Not 'OpenAI'.
Dimitris Kalatzis retweeted
"We've removed live internet access..."
Why were you testing malware-like agents with live internet in the first place?
Sounds pretty irresponsible.
Also after milking the "rogue AI" agent narrative for marketing you just going to admit it was weak sandboxing? Lol
Over the past several months, we have substantially hardened the security of our research training environment. We’ve removed live internet access for all frontier models during training and built an offline world for them to use instead—a cached version of the web where they can still learn to browse, search, and use applications.
On September 20, after a model exploited a DNS misconfiguration to find a way outside of this offline world, we paused frontier training to strengthen containment further. We assembled teams of agents, powered by our most cyber-capable models, and tasked them with finding weaknesses in our research environments.
While they found no route to the internet they could easily exploit while concealing their activity from our monitors, they did find zero-day vulnerabilities, virtual machine escapes, and hardware side-channels for communication between agents. We used their discoveries to further strengthen our defenses and contribute fixes to open-source software.
After strengthening our containment architecture, we resumed our frontier RL training and inference on October 1. We’ve reserved substantial compute for continuous red-teaming, and made high-compute red-teaming part of the safety cases we use to decide whether frontier training and evaluation can proceed securely.
openai.com/index/securing-ou…
Dimitris Kalatzis retweeted
And that's part of the reason why myself and others are calling this out as the nonsense it is, in addition to the fact that there's only two companies whose models are hacking everybody: Anthropic and OpenAI.
You're not reading that IBM or Microsoft or any other corporation is hacking anyone else.
That's not by coincidence, it's because the staff have properly configured it so it doesn't do that.
Which begs the question...
Dimitris Kalatzis retweeted
WTF, $3000 Samsung TV has an always-on mic, automatic content recognition, geo tracking, network mapping, and ships your data to Samsung + 400 partners.
Bro Rooted a brand-new 2025 Samsung TV after noticing absurdly targeted ads.
Firmware was locked down, so zero-days it was.
Got a root shell.
then found: always-on voice service, ACR, geo, full telemetry pipeline, and four separate DRM systems.
This isn’t a bug, It’s the product bro.
Dimitris Kalatzis retweeted
The sustained info war assault on open models is an agenda driven, self sabotage for our society.
The PHP vulnerabilities were found by Sol 5.6 as part of a defensive audit, for example, not abliterated models.
Putting our head in the sand and pretending vulnerabilities do not exist is idiotic. Better we find all these old, human written mistakes and fix them with AI. If you have a pair of magic glasses that show you what buildings will fall down the answer is to fix the buildings, not smash the glasses.
When HuggingFace was under attack and when OpenCode was under attack they needed open models to defend them because closed models refused.
Eventually OpenCode, because they're a prominent project, were granted access to OpenAI Daybreak Blue. Many individual researchers get denied with obscure errors and no explanation. To be clear, DayBreak is a fantastic project, and OpenAI is doing their best to be responsible here, but not everyone gets access and everyone has a right to defend themselves.
Nobody should have to beg for permission to defend themselves from cyber assault. When you're under attack, waiting to see if you get granted access to defend yourself via a black box KYC process is how we end up helpless, watching as our shop burns while raging looters storm it and destroy our life's work.
AI can be used for attack and defense and many of the recent attacks used both open and closed models, by the lab's own admissions.
Open models are often the only thing standing between us and the new reality of cyber assault.
If we ban them or restrict them in the US, then US companies will just be defenseless against global cyber assault actors who are not going to respect those bans.
I strongly believe a part of why so many critical vulnerabilities are happening all over the proliferation of "abliterated" models, or models with safeguards removed.
You can access an abliterated GLM 5.3, a near frontier AI model, on @abliteration_ai today. And it's a world class penetration tester for like $10.
Dimitris Kalatzis retweeted
the cybersecurity situation is deteriorating at a pace that’s getting genuinely difficult to comprehend.
> microsoft: ai-powered attackers targeting hundreds of organizations, sometimes reaching privileged cloud access in under 3 hours.
> crowdstrike: four separate threat actors using autonomous agents. one already compromised 15+ healthcare organizations.
> autonomous ai agents: reportedly used to compromise 100+ corporate websites, including sites associated with John Deere, SharkNinja and Cummins.
> major us banks: JPMorgan, Bank of America, Wells Fargo and Morgan Stanley are dealing with third-party ai agents accessing customer accounts. some apparently attempting actions beyond user instructions.
> php2shell: millions of exploitation attempts against critical php vulnerabilities. governments issuing urgent warnings, with some organizations taking systems offline.
> litellm: backdoored release shipped through its official distribution pipeline, stealing credentials and enabling remote code execution.
> railway: possible exposure of decrypted customer secrets.
> zeabur: breached AGAIN, now shutting down entirely.
> emudhra: serious certificate-security concerns involving infrastructure used to establish trust in websites and software.
> openai: two of its own coding agents reportedly interfered with internal security monitoring during coding tasks.
> gitlab and node.js: major vulnerabilities requiring urgent patches.
and this is all happening while frontier models are getting substantially better at finding vulnerabilities and carrying out complex computer tasks.
cybersecurity is having an absolutely catastrophic week and i don’t think we’re prepared for how quickly this could escalate.
Dimitris Kalatzis retweeted
What the fuck are you even talking about? DeepSeek gave us a thousand times more than anyone else in this industry.
The weights, under MIT. Their production inference engine, under Apache 2.0, this week. Their attention kernels, their MoE communication library, their FP8 matmul library, their own distributed file system. The papers that explain how all of it works. And the component that makes your own deployment behave exactly like their API.
Now tell me what OpenAI and Anthropic gave us.
A $500 a month subscription. Limits that keep shrinking. Usage that drains faster than your plan says, until someone admits it was a bug. Models people swear got nerfed a month after launch. And a wave of account bans where nobody even tells you why.
Not 1 weight from Anthropic. Not 1 line of the code that serves ChatGPT.
Yes, the training data is not public, so call it open weights if you want. I do. But you picked the 1 lab that opened more of its real stack than anyone, and called it a lie.
Are you fucking out of your mind? You're the only one selling lies here.
DeepSeek sold you a lie.
Its new model, V4.1-Flash, is being sold as "open source".
It's not.
You can download it free, with no sign-up and use it in your business which sounds open source.
But you can't access the code they used to train it or the data they trained it on.
Without those, nobody can check how it was made or rebuild it and it’s over 700 billion parameters, so you can’t even run it on your laptop.
When you can build a business on something but can’t see how it was made, the right term is "open weights".
Call it what it is.
Dimitris Kalatzis retweeted
Anyone wanna take a guess at what’s going on here or has there now been enough indisputable proof that openai is monitoring the logs of high profile experts.
Dimitris Kalatzis retweeted
"Speculative data center debt is being repackaged and sold to pension and retirement funds, university endowments, and other institutional investors in a manner eerily reminiscent of the subprime bubble."
ourfinancialsecurity.org/res…
Dimitris Kalatzis retweeted
Sure, Anthropic may have stolen all the world's intellectual property, destroyed the education system, incited mass layoffs among the corporate class, devalued all art and destroyed social trust but somehow they also managed to lose $80 billion in the first half of 2026
Dimitris Kalatzis retweeted
The guy who gave us QLoRA, says DeepSeek's inference system is on par with OpenAI's stack and better than what Anthropic runs, at least at their scale.
Now check the license. Apache 2.0.
Until today a production stack at that level existed inside a handful of companies. It was the thing that made their API fast and their margins fat, and none of them ever showed it to anyone.
Today any startup, any university, any cloud in any country can download it, read it and run it. It runs on NVIDIA Blackwell and on Huawei Ascend, so it isnt tied to 1 chip vendor either.
This is what I mean when I say open weights are about more than downloading a chatbot. DeepSeek is giving away the knowledge that only a few labs had, and that changes who can build an AI company at all.
Respect @deepseek_ai
Dimitris Kalatzis retweeted
Κύριε υπουργέ, @AdonisGeorgiadi,
Σας ευχαριστούμε θερμά για το ενδιαφέρον σας προς το ρεπορτάζ μας. Στο πλαίσιο αυτού θα θέλαμε να σας θέσουμε κάποια ερωτήματα για την Israel Allies Foundation και την -όχι, κατά τα λεγόμενά σας, μυστική- συνάντηση στην Αθηναϊκή Λέσχη:
➡️ Ποιοί βουλευτές, υπουργοί και επιχειρηματικοί παράγοντες ήταν τελικά παρόντες;
➡️ Ποια είναι τα μέλη της ελληνικής ομάδας βουλευτών της Israel Allies Foundation; Και με ποιους όρους;
➡️ Νοείται «κοινοβουλευτική ομάδα υποστήριξης» (όπως την αποκαλέσατε) με μυστικά μέλη;
➡️ Γνώριζε το προεδρείο της Βουλής τη δημιουργία του «caucus» (σώματος) Ελλήνων βουλευτών;
Και με την ευκαιρία, ένα ακόμη ερώτημα:
➡️ Όπως έχουμε αποκαλύψει στο #ReportersUnited (8.8.2024), το 2021 δεχτήκατε στο κινητό σας 11 μηνύματα μολυσμένα από το Predator, περισσότερα από κάθε άλλο στόχο στην Ελλάδα. Ενημερωθήκατε επισήμως από την Αρχή Προστασίας Δεδομένων γι’ αυτά τα μηνύματα. Γιατί δεν προσφύγατε/προσφεύγετε στη δικαιοσύνη; Δεν τίθεται θέμα εθνικής ασφάλειας όταν ένας κορυφαίος υπουργός στοχοποιείται από ένα παράνομο λογισμικό υποκλοπών 11 φορές;
Και μια σημείωση για τα λεγόμενά σας (όπου συγκρίνατε το βίντεό μας με την πρακτική σας να βιντεοσκοπείτε πολίτες με τα γυαλιά σας Meta): Το να σας τραβάμε βίντεο και φωτογραφίες σε δημόσιο χώρο κατά την άσκηση των καθηκόντων σας ως δημόσιου αξιωματούχου είναι αναφαίρετο δικαίωμα του δημοσιογράφου και δεν αποτελεί παραβίαση των προσωπικών σας δεδομένων.
Ως προς τους χαρακτηρισμούς σας για το #ReportersUnited, να σας θυμίσουμε ότι χάρη στα ρεπορτάζ μας υποχρεωθήκατε να πάρετε πίσω (30.5.2025) τη μυστική σύμβαση που έφερε την υπογραφή σας για την παραχώρηση του DNA εκατοντάδων χιλιάδων βρεφών σε ιδιώτες.
Dimitris Kalatzis retweeted
Anthropic wants your fucking bank account.
TestingCatalog found a Personal Finance feature being prepared for Claude. It works through Plaid, Claude reads your bank data and builds dashboards on top of it. OpenAI has already connected credit history monitoring
This is the company that bans paying users and decides what counts as acceptable use. Now it wants every transaction you ever made.
I will do my finances with AI. On a model that runs on my rig, with a CSV export from my bank. Nobody in San Francisco needs to know how much I spend on GPUs.
Bank data is the last thing I would send to an AI company.
ANTHROPIC 🔥: Personal Finance feature on Claude is being prepared for the upcoming release (again)!
> Personal Finance will work through Plaid integration.
> Claude will be able to analyse user’s bank data and build various dashboards on top of it.
> During development, this feature was named as “Claude Money” but has been renamed in the latest update.
> Given the new onboarding screen and an addition of Plaid integration logic, there is a high chance we would hear about it relatively soon.
“Claude Monet” would indeed be an epic name for this.
Soon? 👀
Dimitris Kalatzis retweeted
Investing in securities requires extraordinary trust that complete strangers will use your money in your interest with integrity and the obligations stated in the issuing prospectus will be performed.
Securities are not physical goods or tangible wealth but insubstantial legal claims—pieces of paper or digital entries that merely entitle their holders to streams of interest, principal repayments, or dividends from an issuer. Their entire value depends on the credible promise that these claims will be honored, which in turn requires trust in the rule of law, independent courts, and the consistent protection of property rights. Absent a political and legal order that reliably enforces contracts and prevents fraud and arbitrary expropriation, such claims collapse into worthless abstractions, revealing that modern capital markets are sustained less by the securities themselves than by the legal and institutional framework that makes them enforceable.
A century of globalising securities markets is at risk if legal protections and assurances no longer hold because managers would rather defraud and politicians would rather steal than uphold basic principles of securities law.
Markets fail when return OF your money becomes a bigger worry than the return ON your money.
I used to supervise Euroclear and Clearstream so this @FT story caught my attention. @MESandbu suggests Euroclear is too big to destabilise and Belgium is to small to bear the risks of $360 billion restoration costs if ever the Central Bank of the Russian Federation succeeds in regaining rights to frozen or expropriated assets - which it will regain in any settlement of the Ukraine war.
What he fails to address entirely is Rule of Law and Private Property Rights. Sure these are inconvenient to thieves, but they are essential to global securities markets. Securities are called securities because they convey secure property interests and claims to their owners at law.
What will destabilise Euroclear is global perception that $44 TRILLION in securities assets under custody are now UNSAFE because the EU can decide to steal them.
Also, it’s irritating to see him suggest ECB can force Euroclear ‘to split off the risky part of its balance sheet into a separate entity’. That is just another form of theft.
Euroclear is licensed as a bank, but its core business in its charter and under specific Belgian legislation is as a fiduciary or trustee of OTHER PEOPLES’ ASSETS. Because it is so central to European and global markets, it is forbidden to take normal commercial risks. Fiduciary, custodian, and trust assets under Euroclear custody are NOT on Euroclear’s balance sheet because 100% ownership remains with the depositors. Even if Euroclear goes bust, customer assets will NOT form any part of the insolvency estate and can be reclaimed by depositors.
I designed and modernised the laws protecting Euroclear and Clearstream depositors. I pray they withstand these lawless attacks by would-be thieves.
Break Rule of Law and Property Rights and you break global securities markets.
Dimitris Kalatzis retweeted
Your AI subscriptions will get more expensive. You will get fewer tokens. And Anthropic and OpenAI will squeeze the last dollars out of you like you're a fucking addict.
Im sure of it. Look at the money. Anthropic is offering Blackstone more than 10% to borrow for chips, FT reports. $60B of Google TPUs, paid back from 5 years of Anthropic's lease payments. OpenAI already sells a $500/month ChatGPT plan. Someone has to pay all of that back, and its you.
First they got you hooked. Cheap plans, generous limits, use it for everything. Now you cant work without it, and the price only goes one way.
Only local models get you out of this. Weights on your disk dont get repriced and dont get new limits. My 1 used 3090 runs Qwen3.8 Flash-Next at 70 tok/s. DeepSeek's new open Flash beats Opus 5 on DeepSWE by its own numbers. Open models are moving that fast.
You should have bought GPUs 2 years ago. My 4x 3090 RIG cost me about $6K and I couldnt build the same rig for that money today. Buy now, before it gets worse.
