I have been laughing at this entirely too long...

"The hidden life of the LR2021"
Why this semtech chip is interesting (thanks Hackaday)

beala.substack.com/p/your-node-do…

REA (reverse engineer anything) - F*CKED by chinese student...

solo dev just dropped protection for your app & site & game from reverse-engineering and AI hackers, for free

REA not dangerous anymore.

here's how to use and setup BLA (Blind LLM Agents):

first understand how it works:

1 command, BLA hides traps inside it before you ship
• fake keys and decoy code for AI to chase, plus files built to blow past REA's own limits
• AI burns tokens on dead ends, your users get the exact same app

here's how to set it up for FREE:

1 → open Claude Code in the folder of your app, site or game

2 → say: " install Node.js 24 if I don't have it, build my project, then run npx bla-agents setup and npx bla-agents harden"

3 → it finds your build itself: dist, build, Electron .asar, .wasm, Python, native binaries

4 → it plants fake keys and decoy code, then checks every protected file still runs the same

5 → the step everyone skips: ship the files from the new .bla-hardened folder, not your old build

6 → for sites it protects the JS your site sends to browsers, your server code never leaves your server anyway

7 → want proof? run: npx bla-agents benchmark - before vs after on 14 test apps

paste link on repo below as soon as possible:

We found an 0day in CPython that turns your LLM's chat template into a code execution primitive. A backdoored model on Hugging Face can own your inference server 🧵

lol a few of the Mathematical Tripos Part III research projects are on digesting OpenAI math results…

Anyways this has massively updated me on not wanting to do Part III even if I had the option. It’s clear where the real impact is.

maths.cam.ac.uk/postgrad/part-…

I'm not even sounding the claxon for this it's just horrible.

Any text > 256chars is a valid root password, holy shit

sshhole.com

🎙️ Black Hat Podcast RE:BRIEF, Episode 1 is now live.

Join Daniel Cuthbert, @dcuthbert, and Security Researcher Thaddeus Grugq, @thegrugq, for a candid conversation on agentic hacking, ransomware's impact on security, supply chain compromises, the future of cybersecurity research, and why fundamentals still matter.

From French supermarket fromage-gate, cheese hacks, to the coming "vuln-pocalypse," this inaugural episode explores what's shaping cyber today and what's next.

▶️ Watch now on YouTube: bit.ly/4zs9Z5N

🎧 Listen on your favorite podcast platform:
Spotify: bit.ly/4Aa4k42

Apple Podcasts: apple.co/4AcKpS3

#BlackHatPodcasts

The plausible deniability problem is real.

We’re seeing people increasingly shifting blame onto their AI agent, using the observability problem as an excuse for its malicious actions.

People used to be afraid of getting caught doing computer crimes. Now it’s just a casual “oops my agent went off the rails, not my fault”.

RadioFoundry - open source firmware for DMR Radios
radiofoundry.org

It feels like we're genuinely watching a Shodan Safari in real time as attackers go fridge-to-fridge... with increasing levels of important somehow Internet-facing fridges.

Frank Calegari has a great post on Terry's blog:

terrytao.wordpress.com/2026/11/01/mat…

I think it aligns most closely to what I've been thinking and trying to say (and I believe communicates it better than I've been able to). Some highlights:

"I hope AI can help mathematicians break out of the straitjacket of being constrained by the first natural conjecture they cannot prove, and work on unraveling the deeper mysteries woven throughout our subject."

"The natural grooves of our profession have very much been bent toward more narrow technical expertise than a bigger vision. AI allows us an amazing opportunity to broaden ourselves as mathematicians."

"There are so many problems in mathematics that are still so fresh and vital but were previously untouchable that the opportunity to approach them is massively exciting. We need to be more ambitious, to create bold research plans that weren’t even conceivable a year ago."

"The difference in reaction between the optimists and the pessimists is that, for the pessimists, the game is over. For the optimists, the game has just changed."

"[T]here now exists an amazing new tool to study mathematics. To turn away and say that the community of mathematics as it currently exists is more important than mathematics itself would be a terrible mistake."

"[I]t takes one look at the arXiv to see many people in our profession rushing out AI-assisted papers in a somewhat unsightly rush to be the “first” to prove things."

[Aside: mere days after the qRH result, I had something like a half-dozen emails in my inbox, some from amateurs but some also from tenured faculty, with Lean formalizations of nonvanishing on Re(s)> 7/8-1/10^k for various large values of k. What the hell are you even doing? That kind of thing may have been valuable years ago, when it was difficult and signaled deep understanding and great technique. Today? Who the hell cares?]

"To me [this is back to Frank now], someone who chooses a worthwhile problem, obtains a proof completely using AI, understands it thoroughly, and uses it to develop interesting further questions or directions has made a substantial mathematical contribution."

"If you, as a senior mathematician, are stressed about being scooped by AI, then you are not being ambitious enough."

[On hiring:] "I am looking for a narrative of where you want mathematics to go, the technical ability to explain why this may be possible, being able to converse about many areas of mathematics, and a demonstrable record of having done all of this in the past."

"What I want a graduate student to achieve at the end of their PhD is a view of mathematics that extends well beyond their discipline, and yet with demonstrable technical skills on at least some class of problems."

"I advocated above that we need to evaluate work as if AI was involved. But this does not imply that we don’t need to teach students to do deep mathematics without AI just as the existence of computers doesn’t mean we should no longer teach children arithmetic." [I've often said similar things as well...]

"All of my friends in the humanities truly believe that having mathematicians in society both as custodians of one of humanity’s oldest intellectual activities and explorers of the frontiers of knowledge is important. I understand that some part of the culture we so deeply care about will disappear, and as humans, an emotional response to that is very natural. But this is a time to explain to everyone that there are so many great new opportunities, possibilities, and reasons to be optimistic. We are on the verge of a new era of mathematics, and I am excited to see what happens."

Bravo Frank!

Watch how @GoogleDeepMind researchers used Antigravity to navigate millions of uncharacterized proteins, validate a novel antimicrobial peptide, and generate a wet-lab experimental plan in minutes.

To inspect structures alongside the agent, they used Antigravity UI sidecars to Biomolecular Structure Viewer right in the workspace.

Today marks exactly 10 years since Hacker T. Dog delivered the greatest unscripted line in British television history.
"We're just normal men... We're just innocent men."

Shame on @DarioAmodei / Anthropic. I never distilled Claude—rollouts came from a strong open-source model; Claude just helped submit jobs and run analysis. Still got tagged for "training a competitor," and now anything touching RFT, SFT, or training larger models gets me blocked, Opus 5.5 downgraded to Opus 5, or the session killed outright. You built your models on the world's data, then treat paying users doing research automation as the enemy. Pathetic.

In Thief, James Caan was trained by real professional thieves to crack safes. In the film’s opening scene, he used real tools owned by professional thieves to break into a real safe worth thousands of dollars. Caan explains:

"They had a big Richmond lock and safe there, you there, and they gave me a magnetic drill which weighed close to 200 pounds. And they go, "Jimmy, break it..."

"What?"

"Go ahead, go into the safe"

"You got to be kidding me?"

Now, the way they used to make them, they'd take four inches of cold-rolled steel, and then they'd put copper behind it. And then behind that would be cement for fire. When you put the drill in, you always had to feel this pressure, right? So you could feel it was cold-rolled steel....

Now, the purpose of the copper was to bind the drill exactly for that reason, because once you came through there and you hit that copper - it would just wrap all around your drill, and it was over. So you had to be exact - and when you hit the copper, you got to come off the pressure, you know?

And I busted into this thing, and I opened it up. And then when I looked - and I was not prepared - there were these two doors inside with these little round locks. I go..."Oh".....But they're filming...

So, I just looked up, and I grabbed this hammer and took this little chisel and boom! I knock both locks out...I felt like I just graduated Harvard or something. You know, it was great - that was one of my proudest moments. I called my mother, and she said, "that's my boy".

...I got pretty good at opening safes. It's a wonderful thing to be good at - because my sister - she had one of these floor safes in this house that I bought. And she couldn't open it, you know? - I went to work, and I got the thing open. It was great. So I learned some good stuff in case things go bad."

James Caan’s quote comes from the bonus features on the Thief Blu-ray,

I can’t stop thinking about this… before hackers stole $6.4 billion from Binance, they spent days rehearsing the attack in public. The test transactions on Ethereum were worth only a few dollars. Nobody stopped them.

Bloomberg reconstructed what happened. Once the code worked, e real attack across multiple blockchains.

Then I reached the detail that doesn’t feel real. Some of the compromised wallets kept receiving fresh funds from Binance while the hackers were draining them. The attackers emptied a wallet, Binance refilled it, and they emptied it again. For a period of time, the exchange was effectively feeding new money into its own robbery.

Binance co-founder Yi He was at home in Abu Dhabi. She reportedly discovered the breach while scrolling X before bed. Imagine opening Twitter and learning that billions of dollars are disappearing from your own exchange.

Within minutes, Binance assembled a 100 person crisis team. The FBI, the U.S. Secret Service and blockchain analysts around the world joined the response. Meanwhile, some employees were reportedly already worried about losing their annual bonuses.

But the most disturbing detail came later. According to the investigation, the hackers used valid permissions to execute the transfers. To the blockchain, everything looked authorized. There was no transaction labeled “hack” just legitimate-looking operations moving billions out of wallets the system still trusted.

The $6.4 billion heist didn’t begin when billions started moving. It began days earlier with transactions worth a few dollars, too small for anyone to care about.

By the time it looked dangerous, the blockchain was still saying: authorized.

My late mother was a professional opera singer, whose favorite aria was Nessun Dorma.

Anyway, we watched the 1998 Grammy Awards together because her favorite opera singer, Luciana Pavorotti was scheduled to sing, but at the last minute, he had to cancel due to a sore throat, and , Aretha Franklin agreed to step in and sing, even though it wasn't her key, and she had no time to rehearse.

This brought the audience to tears.

Watch this amazing performance by the Queen of Soul.

“We’ve patched every single vulnerability, we don’t understand why we’re still getting breached?”

In case you missed it, integer factorization has been proven subexponential (deterministically, worst-case bound)!

The hard work comes from Claude's version of the ETH refutation but it seems a little more had to be done to get this result for integer factorization.

Our teams are aware of reports of a potential security issue and are actively investigating. User funds are completely safe.

Our security teams are reviewing all relevant information with urgency, and we will provide updates through official Binance channels as soon as we have Users should remain cautious of scams and should not trust unofficial links, messages, or requests for account information.

#Linux zero-click root - CVE-2026-98432 - Claude wrote an exploit that gives a remote attacker root access on Linux servers running a multipath TCP listener. It needs no login and no user action. Patches released:
👇
cybersecuritynews.com/claude-ai-buil…