Founder GPShopper (successful exit) ex-Jane Street (pre-SBF) ex-Google (pre-Sundar) occasional shitpoaster
United States
Joined October 2009
- Tweets1.4K
- Following649
- Followers876
- Likes10K
The funniest part about the Chinese spy thing is it still works even if she's obviously a Chinese spy
if the AI labs do implode it'll be because they'll discover intelligence wasn't that much of a limiting factor, because there's too much intelligence-resistant stupidity slowing everything down
Tootsie Rolls taste like something that Milo Minderbender guy in Catch 22 would make in a wax factory in Malta and try to sell to the army
Anthropic and OpenAI should be worth an extra trillion just because they mean I never have to accept a package which depends on Node ever again
daily Claude automated task
1. check Chrome open source project for updates
2. rebase our ad block/privacy patches
3. build and deploy to devices
a private Chrome fork for every household
Announcing 3 Critical vulns for hundreds of millions of IoT, Firewalls, OT, and Military devices including: Palo Alto Networks, Comcast, D-Link, HP, Canon, Honeywell, GE, Oracle, Siemens, Rockwell, Digi, Lockheed Martin, Boeing...
The vulns are with GoAhead Web Server which is a backend library used by these devices. There's a patch available from GoAhead but that doesn't mean there's a patch available for the devices yet -- that's up to the manufacturer.
- TLS traffic over DHE ciphers have a 1-byte secret, "04", meaning anyone can decrypt connections to these devices and steal login credentials and session tokens if the client negotiated with DHE ciphers like the latest TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256, which is extremely likely.
- LibreSSL mTLS has been completely bypassed, meaning anyone can connect over mTLS. If you have one of these devices listening on the internet and are expecting mTLS to protect it from attackers, take it offline or patch asap.
- OpenSSL Certificate Revocation Lists (CRLs) are not enforced, meaning if a user device is stolen or compromised, and you revoke that mTLS cert, nothing actually happens. There are a lot of other attacks this can be used for.
These are critical because these types of devices run our world. Water systems, electricity, military, firewalls, critical infrastructure.
foxio.io/blog/choose-your-ba…
This formal verification article from Anthropic in collab with @theoremlabs throws some shade on OCaml but it's been repeatedly proven that OCaml has no trusting trust backdoors.
anthropic.com/research/forma…
discuss.ocaml.org/t/ocaml-co…
insurer: cybersec claims department
me: hi yes, I'd like to put in a claim, my PHP site was hacked
ins: have you heard of claude code? do you use it?
me: yes
ins: haven't you had, like, 6 months to auto-rewrite all of your PHP in a less stupid language?
me:
did they nerf the models? opus 5.5 has been cranking out just barely under 10,000 lines of code an hour today
socialists: nobody should have to earn a living
AI: on it!
AI: ✻ Flibbertigibbeting…
socialists: not like that
you prove your code is correct
we prove it's probably not wrong in the last 10 million inputs the agent told the fuzzer to try
permanent underclass household family meeting to discuss the token budget rations
11% neuralink cyber defense
6% mental health
4% sold for life extension drugs
3% sold for black market life extension drugs
1% random Q&A
75% dad's YouTube music video hobby (115 lifetime views)
The misery of being an anointed OCaml programmer in a world where AI agents blast out 10,000 lines of C++ that works first try
Higher quality viewing options here: youtube.com/watch?v=r45lLYsi…