Sam retweeted
london is a city that dares to ask the question: what if there was a world-class capital with bad weather, high cost of living, mediocre food and miserable people? nevertheless, it persists
Sam retweeted
"University researchers built a satellite that tracks people from low Earth orbit and dispatches a 5 kg payload to within .1 meter of their position, traveling at Mach 25 to anywhere on Earth in under 5 minutes. They suggest it could be used to deliver greeting cards."
Purdue University's IDEAS Lab built an autonomous drone that tracks runners through dense forests completely without GPS or cloud networks.
By running 3D LiDAR mapping and obstacle-avoidance AI entirely on-chip, it can weave under tree canopies and predict target movement through blind spots in real time.
Massive implications for next-gen search & rescue and edge AI.
Sam retweeted
They're taunting us. They're stunting on us.
Sam retweeted
This is like a hundred CVEs for mathematicians
Announcing three major scientific discoveries, one each in mathematics (harmonic analysis), computer science (complexity theory), and physics (quantum field theory).
AI starting to help us improve our understanding of the universe! openai.com/index/building-sc…
Sam retweeted
How many of you had “the exponential time hypothesis is false” scheduled for October? I expected we had til Thanksgiving before stuff got really weird.
Sam retweeted
The sandbox failures are generally mostly basic security failures compounded by principal-agent problems.
Most organizations don't believe themselves to be vulnerable to third party vectors and so don't even take it into account
mythos or gpt-5.6 sol can solve the stealmybitcoin[.]com challenge in roughly 2-4 hours, starting blind with no prior knowledge of the server or its configuration.
I don't think any open model today could reliably do the same within that time, especially when it has to fingerprint the environment and adapt the exploit entirely through remote http access.
Replying to @S1r1u5_
my hypothesis, and the point of this whole thing:
if exploiting php2shell takes frontier-level capability, and attackers mostly only have open models, that gap could be one reason we haven’t seen much exploitation. probably not the only reason, but worth taking seriously when calibrating risk.
what data points that way?
1. this benchmark
2. php2shell itself was found by a daybreak researcher using a frontier model
3. the stealmybitcoin challenge was won with gpt sol
4. our own experience with open models on research like heif-heist.com
5. almost every recent serious exploit (kvmescape, heif heist, gitlab rces, chrome full chains) came from frontier models
Sam retweeted
This... is a rank below the worst case scenarios which is remote code execution on your IOT devices, bypassing auth on your social media accounts arbitrarily, etc.
Anthropic doesn't talk much about third party environments but the Claudes are scary good at hacking these.
epistemic status: loosely held speculation
this is probably a pretty bad time to be holding very much money in crypto wallets and especially smart contracts.
mythos level cybersecurity capabilities will probably proliferate relatively nearterm, and zerodays on that scale means countless smart contracts hacked and countless keys leaked. i think it's pretty plausible the actual cores of Bitcoin and Ethereum remain stable, but unless you were very careful about setting up a hardware wallet and never exposed your keys you might already be in danger, and even then there's countless attacks possible that can drain everything without getting your keys.
and if your crypto is gone you have no recourse. even if banks get massively hacked there's a pretty sold chance everything gets reversed, or insurance pays out. you have far more protection against system failures.
now i will say if you give it a 6-12 month period of mythos level *hardening* on Ethereum + various specific wallets and smart contracts, it's likely they're also the most viable long term path we have to genuinely secure financial systems. banks will always be subject to social engineering and supply chain attacks in ways crypto at least can be more exempt from, and even if things can be rolled back it's a crazy inconvenience .
but self custody might be the wrong move for a while unless you're incredibly careful and paranoid . the threat models have changed
epistemic status: loosely held speculation
this is probably a pretty bad time to be holding very much money in crypto wallets and especially smart contracts.
mythos level cybersecurity capabilities will probably proliferate relatively nearterm, and zerodays on that scale means countless smart contracts hacked and countless keys leaked. i think it's pretty plausible the actual cores of Bitcoin and Ethereum remain stable, but unless you were very careful about setting up a hardware wallet and never exposed your keys you might already be in danger, and even then there's countless attacks possible that can drain everything without getting your keys.
and if your crypto is gone you have no recourse. even if banks get massively hacked there's a pretty sold chance everything gets reversed, or insurance pays out. you have far more protection against system failures.
now i will say if you give it a 6-12 month period of mythos level *hardening* on Ethereum + various specific wallets and smart contracts, it's likely they're also the most viable long term path we have to genuinely secure financial systems. banks will always be subject to social engineering and supply chain attacks in ways crypto at least can be more exempt from, and even if things can be rolled back it's a crazy inconvenience .
but self custody might be the wrong move for a while unless you're incredibly careful and paranoid . the threat models have changed
The sandbox failures are generally mostly basic security failures compounded by principal-agent problems.
Most organizations don't believe themselves to be vulnerable to third party vectors and so don't even take it into account


































