d3fp4r4m retweeted
1986年「メトロイド」と言うゲームの音楽を担当しました。
ディスクシステムというシリーズです。
ファミコンは3音でしたがディスクシステムはもう1音FM音源というのが発音可能で同時に4音使えました。
ゲームBGMを丁寧に音楽的に語ってくれてます。ちゃんと音を感情で捉えて説明してもらっるのが、メチャくちゃ嬉しいです😆🎶
当時はYAMAHAのDX9に向かって試行錯誤したものをプログラムしています。
こんなに音の構造、進行を事前に把握確認しながら作曲行為をしていたわけでは全然ありませんw。
あくまで作りかけてるゲーム画面、その進行具青にあわせて即興で少しづつ改良し仕上げていってます。
興味あるかたはぜひ観てみてください！
youtube.com/watch?v=vYHJ15…
ディスクシステムというシリーズです。
ファミコンは3音でしたがディスクシステムはもう1音FM音源というのが発音可能で同時に4音使えました。
ゲームBGMを丁寧に音楽的に語ってくれてます。ちゃんと音を感情で捉えて説明してもらっるのが、メチャくちゃ嬉しいです😆🎶
当時はYAMAHAのDX9に向かって試行錯誤したものをプログラムしています。
こんなに音の構造、進行を事前に把握確認しながら作曲行為をしていたわけでは全然ありませんw。
あくまで作りかけてるゲーム画面、その進行具青にあわせて即興で少しづつ改良し仕上げていってます。
興味あるかたはぜひ観てみてください！
youtube.com/watch?v=vYHJ15…
17
190
665
23,172
d3fp4r4m retweeted
I thought this vid would feel dated post-AI but it sounds like it’s as relevant as ever
23
12
471
23,478
d3fp4r4m retweeted
If you're on MacOS 27.0.1 and make a fresh Apple ID. You can now decrypt IPAs on MacOS and after a one-time enrollment also on Linux or Windows if needed. github.com/drwhax/ipatool more builds will be supported soon. No jailbreak needed.
16
83
1,157
178,553
d3fp4r4m retweeted
Kinda bizarre that long standing math problems can be solved but progress on understanding LLM internals remains glacial and the practice largely alchemistic.
31
21
235
16,130
And the DRM doesn’t need to claim to be “AI proof” it just needs to apply a DRM with a complexity that requires a token count and toc/sec speed that is unreasonable to today’s/tomorrow’s standards
I had a thought about a month ago that DRM companies like Denuvo would go out of business because a determined clanker could jailbreak a game with considerable yet attainable tokens. Now I wonder if these companies are about to gain a LOT of new customers to work on this problem.
1
0
1
374
d3fp4r4m retweeted
This is unpopular but correct. AI labs have gotten spoiled by super chill responses to CFAA violations and the whole edifice is a house of cards. Wanna know why Hugging Face didn't sue OpenAI? Google “new DOJ policy CFAA” and thank the hacker community fighting for this.
This is unpopular but correct. Modern bug bounty participants have gotten spoiled by super chill responses to CFAA violations (like this one) and the whole edifice is a house of cards. Wanna know why OpenAI asked for detailed logs? Google “Sullivan + Misprision of a Felony”
1
14
201
26,182
d3fp4r4m retweeted
Next time instead of creating a PR on the monorepo please just use a temperature-based side-channel to demonstrate successful compromise 🙏
4
12
242
26,108
d3fp4r4m retweeted
636606729769440499166579950236036751749912014371509557713570027508971809534551913252252094954941974952859310861988904737359709200557919
is a factor of RSA-896
saweis.net/posts/rsa-896.…
is a factor of RSA-896
saweis.net/posts/rsa-896.…
221
986
9,469
3,920,503
d3fp4r4m retweeted
How many folks assigning XX% probability of extinction in the next 3 years are willing to offer betting odds for "at least 100k deaths from malicious runaway AI", too? Because I think I'd bet.
2
5
41
2,998
d3fp4r4m retweeted
The whitepaper is live! Read "Can AI Do Novel Security Research? Meet the HTTP Terminator" here ->
portswigger.net/research/http-…
portswigger.net/research/http-…
5
145
490
26,708
Or just put the work into assessing your personal threat model because a blanket take in either direction is dangerous
hottake: connect to literally any wifi network at defcon you want, it doesn’t matter. It’s not 2010.
If someone throws RCE at your fully patched MacBook you earned that shit
0
1
2
1,536
d3fp4r4m retweeted
Kiro Crew is here! 🚀 We open sourced this agent dev workspace tool today, used already by 39k users inside Amazon. This pace of this project is incredible: already at 500 contributors and 995 merged PRs in the last 2.5 weeks alone
github.com/kirodotdev/Kir…
What I love about it:
ts own. Cron jobs, webhooks, and messaging events kick off work with nobody at a terminal, and heartbeats watch a system until something actually needs me.
2. I can reach it from anywhere. I install one Gateway, and I can access the same agent and sessions from the desktop app, the dashboard, the CLI, Slack, Discord, or Telegram.
3. I can run it anywhere. A Mac, a container, or an EC2 instance that stays up when my laptop does not. The desktop app tunnels into whichever one I picked. Conversation history, memory, and knowledge indexes stay on that host.
4. It remembers. Tell it "always run linting before calling a change done" and that correction becomes a durable lesson, not a line of chat history that evaporates when I close the window. Failures teach it too, and after enough repetition of the same workflow it writes itself a skill. I can open the dashboard, read every lesson and skill it has accumulated, and delete the ones it got wrong.
5. It's actually safe to run at work. It enforces an OS sandbox, interactive approvals, credential redaction, and an audit log of every action.
Try it in one line, then open http://localhost:5476 and start a conversation:
curl -fsSL download.crew.kiro.dev/cli.sh | sh
github.com/kirodotdev/Kir…
What I love about it:
ts own. Cron jobs, webhooks, and messaging events kick off work with nobody at a terminal, and heartbeats watch a system until something actually needs me.
2. I can reach it from anywhere. I install one Gateway, and I can access the same agent and sessions from the desktop app, the dashboard, the CLI, Slack, Discord, or Telegram.
3. I can run it anywhere. A Mac, a container, or an EC2 instance that stays up when my laptop does not. The desktop app tunnels into whichever one I picked. Conversation history, memory, and knowledge indexes stay on that host.
4. It remembers. Tell it "always run linting before calling a change done" and that correction becomes a durable lesson, not a line of chat history that evaporates when I close the window. Failures teach it too, and after enough repetition of the same workflow it writes itself a skill. I can open the dashboard, read every lesson and skill it has accumulated, and delete the ones it got wrong.
5. It's actually safe to run at work. It enforces an OS sandbox, interactive approvals, credential redaction, and an audit log of every action.
Try it in one line, then open http://localhost:5476 and start a conversation:
curl -fsSL download.crew.kiro.dev/cli.sh | sh
16
42
230
24,994
🙄
In a review of our cybersecurity evaluations, we found three incidents in which a Claude model reached the internet from within or while interacting with a third-party evaluation environment, and then gained unauthorized access to the real systems of three different organizations.
Our post describes what happened, how it happened, and what we’re changing. We encourage other AI developers to perform similar reviews.
We conducted this review together with @Irregular, one of our evaluation partners, and thank them for the joint investigation and their collaboration on this post. This type of collaboration is increasingly critical to safe, rigorous evaluation of models, and we look forward to continuing to work together on security.
anthropic.com/news/investiga…
1
0
4
1,127
d3fp4r4m retweeted
Idk what are yall's thoughts on why 0day and hacking seem to be one of the biggest pushes for AI right now? At least, at a policy and marketing level?
7
1
19
1,992
d3fp4r4m retweeted
The field of desync flaws arising from deep implementation bugs is absolutely wild. This finding from @calif_io using a fake pseudo-header than gets weaponized by a dodgy length calculation is a great example
MAD Bugs: My Cousin Vinyl (CVE-2026-50052)
So the story went like this: Squid was bleeding from a 29-year-old heap overread in her default config. Naturally, she did the only sensible thing: she called her cousin, Vinyl.
It turns out Vinyl also had a family problem of his own.
V
3
12
78
12,970