
Security Eng @eigenlabs , prev @coinbase
Mempool
Joined April 2022
- Tweets618
- Following2.3K
- Followers1.9K
- Likes4.6K
Replying to @nisedo_
they say they cyber nerfed it, but artificialanalysis.ai/evalua…
Replying to @theyisun @axiom_xyz
Would be awesome if you could publish some benchmarks :) we need to know how good the frontier is today
What do you think ? Will AI solve cybersecurity?
Replying to @RothRottweiler
vulnzero. the scaling laws will have driven cyber mythos-class capabilities into small, cheap models and all software dev everywhere will be using models for fractions of pennies on the dollar to stop shipping security bugs permanently.
I used to scroll this app for fun, now it’s just a jira board for me.
🚨 Nightmare day for cybersecurity
Multiple major security incidents, active exploits, supply chain compromises...
If you run production systems, start patching NOW.
PHP: Two critical unauthenticated RCEs. Attackers already exploiting them. Patch NOW
LiteLLM: v1.107.0 on PyPI and Docker is BACKDOORED. Steals cloud, SSH, and AI credentials. Pin 1.106.2. Rotate secrets.
eMudhra: A certificate authority's keys were crackable. Update your browsers, systems, and trust stores.
Node.js / Next.js / React: Security releases for Brotli RCE, TLS bypasses, and TWO critical Next.js RCEs.
TiDB Cloud: PingCAP breached through stolen credentials. Customer information and other sensitive data exfiltrated. Read the attacker's release, fun stuff.
Plex2Shell: Weaponized within HOURS of the PoC. Attackers already deploying cryptominers and proxy backdoors.
BeyondTrust / Ivanti: Actively exploited zero-days added to CISA's KEV catalog. BeyondTrust attacks linked to a China-nexus campaign.
And that's not even the full list.
Patch. Audit. Rotate. NOW.
What happened to crypto is now happening to AI.
An urgent notice from the Railway team
blog.railway.com/p/security-…
With the 512 gig Mac studios , we can support the big ones @darkbloomai
New attack vector dropped! Threat actors add “bio” to a query parameter, your ai driven soc and IR goes poof
Replying to @RhysSullivan
yes that was a bit frustrating mid incident when trying to investigate. they did quite a bit and then started refusing
we got access to daybreak blue now so it's better
Anto retweeted
The CEOs of @Apple and @Meta are tweeting about how efficient it is to run inference on Mac Silicon
Someone should really build a distributed inference network that runs on top of Mac Silicon.
It's probably a $10b company or protocol. 🙃
Replying to @finkd
Congrats to the team! Amazing to run a model of Muse Spark Open's caliber and scale this efficiently, right from your desk. Mac Studio keeps pushing the boundaries of on-device AI!
A new paper from Apple engineers ends with a line we couldn’t have written better ourselves:
"if idle macOS devices across organizations [...] can be securely federated, they could form a massive, shared GPU resource pool that benefits the broader ecosystem."
That’s what we’re building with Darkbloom.
The paper's Minions is a system that pool idle Apple Silicon Macs into a distributed GPU cloud for on-prem inference. Queue times went from 10+ hours to minutes. Zero new GPU purchases. Zero infrastructure cost.
It runs inside Apple, on coworkers’ Macs, using the company’s own storage and access controls. When a team needs more capacity, they Slack colleagues and ask them to turn on the executor. Even in that setting, the top adoption concern was data confidentiality. People were wary of their jobs running on a colleague’s Mac. Apple’s fix was to keep each team’s work on its own team’s machines.
Which brings it back to that one word in the conclusion: “securely.”
Inside a company, you can shrink the network until you trust everyone in it. On an open network, the machine belongs to a stranger and there’s no one to Slack. Keeping prompts private and outputs honest on hardware you don’t control is the hard problem that we solved at Darkbloom.
Apple built the on-prem version.
Darkbloom is the open one.
Exactly why you should pick the model for the task at hand. Ask your agent to look up the closest benchmark on @ValsAI , @ArtificialAnlys and use it. This is why @OpenRouter is king
Replying to @AndrewMohawk
I have had it fail silently in ci because cyber guards lol










