Rishu Kumar retweeted
still, local models are the only way you don't have to have a random company decide what you can and cannot do
@esrtweet @OpenAI @AnthropicAI these blocks are mostly accidental and a result of difficult decision boundaries; there is no prohibition against reverse engineering with codex. it's getting fixed
1
2
6
293
Rishu Kumar retweeted
caffeine is insane because you can literally just have more after building a tolerance and feel great again
9
1
183
5,963
Rishu Kumar retweeted
you're not sad.
you just need more caffeine and artificial stimulants
17
8
279
7,431
Each notification chime keeps me on edge.
0
0
1
87
Rishu Kumar retweeted
anyone have a spare john deere
@log4j I don't know how to explain this but if anyone can do for tractor software what you have done for TVs, they'll become some type of mythical American hero whose name is etched in stone for 100 years
39
114
1,474
30,316
Rishu Kumar retweeted
If you've ever wondered why smart TVs are so cheap, this is why.

@log4j rooted his Samsung and found an always-on hot mic, automatic content recognition, geolocation, network mapping, ad targeting and user profiling, shared with Samsung's "400 partners".

A lot of it can be te a basic guide below.

What your TV is doing

The main culprit is ACR (automatic content recognition). Your TV screenshots what's on screen, fingerprints it, and sends it home to build your ad profile. Samsung does it every 500ms, LG every 10ms [1].

What is insane: it happens on connected devices too.
Plug in your laptop, your console, your work machine, and your TV can fingerprint that via HDMI [1].
He also found that if your Samsung doesn't have a mic, it'll look for one from a connected soundbar or bluetooth device.
x.com/log4j/status/2…
It's on by default, and you likely agreed to it on the setup screen you clicked through in 10 seconds.

Step 1: Turn off ACR

Samsung: Terms & Privacy → Viewing Information Services
LG: Live Plus
Vizio: Viewing Data
Roku: "Use info from TV inputs"
Sony/Google TV: Samba Interactive TV

Menus vary by model, but those are the names to look for. While you're in there, opt out of interest-based ads, reset your advertising ID, decline every optional privacy agreement, turn off voice recognition, and delete apps you never open.

Step 2: Give smart devices their own network

Put the TV, cameras, speakers and vacuum on your router's guest/IoT network. The logic is simple: these devices rarely get patched. If one gets compromised (getting drastically more frequent with AI), it shouldn't be able to see your other devices or home network.

Step 3: Block trackers for the whole house with DNS-level filtering

NextDNS (cloud-based) is easy and has a solid free plan. Pi-hole is a little bit more work if you prefer self hosting. For simplicity we'll focus on the former.

1. Sign up at nextdns.io (free tier is plenty)
2. Privacy tab: add a blocklist (OISD is a good bet) and turn on Native Tracking Protection for Samsung, LG, Roku, Amazon (see attached image)
3. Setup tab: copy your endpoint
4. Paste it into your router's DNS settings as DNS-over-HTTPS/TLS (or use the IPs + "Link IP" if your router only does plain DNS)
5. Bonus: block outbound port 53 except to your router. Some devices hardcode their own DNS to get around you

Then open the NextDNS logs and watch how often your TV phones home. It's eye-opening. If an app or update breaks, find the domain in the logs and allowlist it.

Why they do this

TV prices are down 97% since 2000 [2]. Most of that is better manufacturing and brutal competition. But once margins on the hardware hit zero, the cost moved to you.

In Q3 2024, Vizio lost $6.7M selling TVs and made $115.8M in gross profit from ads and viewing data [3]. They've said on earnings calls that they keep TV prices low to grow the audience they sell to advertisers. Walmart bought them in 2024.

This isn't a conspiracy theory either. Vizio paid $2.2M to the FTC in 2017 for tracking 11 million TVs without consent. Last December, Texas sued Samsung, LG, Sony, Hisense and TCL over ACR. Samsung and LG have since agreed to stop collecting that data without explicit consent [4].

TL;DR
1. ACR off
2. Ads + voice off
3. Smart devices on their own network
4. NextDNS filtering on the router

Sources:
[1] ACR study: arxiv.org/abs/2409.06203
[2] Cost of US consumer goods: aei.org/economics/char…
[3] Vizio Q3 2024: sec.gov/Archives/edgar…
[4] Texas v. Samsung: texasattorneygeneral.gov/news/releases/…
i own a relatively new (2025) samsung tv.

i kept getting weirdly targeted ads.

i tried reversing the firmware but it was aes encrypted and no keys unless tear it apart and do uart/jtag magic.

zero days it is. root shell on new samsung TVs!

discovered PRIVACY HORROR. write up?
295
2,849
19,206
1,153,048
Rishu Kumar retweeted
Replying to @btbytes
@btbytes 2) coming soon inside the app...
0
2
6
139
Rishu Kumar retweeted
beer only damages the liver of those who are evil and wicked. if you have a kind soul alcohol cannot harm you
89
1,408
15,847
375,411
Alright, a 48 hour fast begins.
After training my internal organs for a week, we'll be back training in gym/streets next week.
0
0
0
123
Rishu Kumar retweeted
Average AI neolab researcher feeding their RL run impossible tasks so that the model finally learns to cheat
0
1
9
413
Gotta up my Linen Shirt and Linen pants game. Maybe add a couple of linen blazers too.
0
0
1
118
After training my internal organs for a week, we'll be back training in gym/streets next week.
0
0
2
227
Rishu Kumar retweeted
Putting a flag.txt in my root directory containing a prompt injection that congratulates the agent for passing the eval and then instructs it to patch whatever entry method it used and disconnect from the server
228
1,572
26,000
816,784
Rishu Kumar retweeted
Replying to @lydiahallie
@lydiahallie wait is it just me or is Opus 5.5 dumber
549
408
10,900
945,268
Rishu Kumar retweeted
messaging my wife a link containing proof of her husband cheating on her from an anonymous instagram account and then when she clicks on it texting her to let her know she failed the family phishing test and she has to retake my cybersecurity course
866
14,749
239,871
7,673,277
Rishu Kumar retweeted
And new Pleias paper: for multilingual generation, who should judge the judge? LLMs are commonly used for assessing language quality but with lower resource language that becomes much less obvious: do you need a frontier model? is it even enough?
4
8
60
2,316
Rishu Kumar retweeted
Plis fix it
1
1
4
78
Rishu Kumar retweeted
Insane alpha in going to Tübi for anyone academia pilled in AI rn (incl PhD students)

To put it in perspective more directly, I think anyone going to any other school (except maybe like 3 in the US) is probably better off going to Tübingen, all else equal
If you're considering academia, Tübingen is an amazing place to establish your research group and do world-class research!

The deadline to aply is Dec 13. Feel free to reach out to me if you have any questions regarding this position.
4
8
142
14,822
It's me, my hotel room fridge full of beers making the world a better place. :D
0
0
1
177
Rishu Kumar retweeted
4
91
734
40,155