Siddharth retweeted
i own a relatively new (2025) samsung tv.
i kept getting weirdly targeted ads.
i tried reversing the firmware but it was aes encrypted and no keys unless tear it apart and do uart/jtag magic.
zero days it is. root shell on new samsung TVs!
discovered PRIVACY HORROR. write up?
i kept getting weirdly targeted ads.
i tried reversing the firmware but it was aes encrypted and no keys unless tear it apart and do uart/jtag magic.
zero days it is. root shell on new samsung TVs!
discovered PRIVACY HORROR. write up?
705
3,841
36,466
4,681,642
Siddharth retweeted
AI agents are getting pretty good at writing code. That doesn't mean they need the keys to the entire network.
We've joined Agent Baseline, with @Docker, @KeycardAI, @snyksec, @SocketSecurity , @tessl_io and @tracebit_com on the Secure Software Factory
buff.ly/xRQLAHR
We've joined Agent Baseline, with @Docker, @KeycardAI, @snyksec, @SocketSecurity , @tessl_io and @tracebit_com on the Secure Software Factory
buff.ly/xRQLAHR
21
51
698
32,376
Siddharth retweeted
New on our Frontier Red Team blog: using Claude to formally verify software at large scale.
Formal verification can prove that code is free of certain bugs, but historically it has only been feasible for small codebases (or required a lot of expert time).
With AI models, however, this is beginning to change. In collaboration with @theoremlabs, we used Claude to prove security properties in over one hundred real-world open-source libraries over the span of a few weeks.
Read our research in full here: anthropic.com/research/forma…
Formal verification can prove that code is free of certain bugs, but historically it has only been feasible for small codebases (or required a lot of expert time).
With AI models, however, this is beginning to change. In collaboration with @theoremlabs, we used Claude to prove security properties in over one hundred real-world open-source libraries over the span of a few weeks.
Read our research in full here: anthropic.com/research/forma…
652
1,069
9,741
2,055,450
Siddharth retweeted
⚠️ Node.js is vulnerable to remote code execution.
CVE-2026-111497 (high): A Node.js process that decompresses attacker-controlled Brotli data can be made to leak memory or run arbitrary code.
You’re exposed if your app or a library decompresses bad Brotli data (e.g. the parser)
Aikido detects this. Patches are available.
CVE-2026-111497 (high): A Node.js process that decompresses attacker-controlled Brotli data can be made to leak memory or run arbitrary code.
You’re exposed if your app or a library decompresses bad Brotli data (e.g. the parser)
Aikido detects this. Patches are available.
37
157
1,171
254,125
Siddharth retweeted
Claude Security now keeps up with your code as it changes.
Connect your repositories once. Claude runs a deep first scan, then re-scans as changes land, so findings stay close to the current state of your code.
In public beta on Claude Enterprise.
Connect your repositories once. Claude runs a deep first scan, then re-scans as changes land, so findings stay close to the current state of your code.
In public beta on Claude Enterprise.
382
567
11,058
825,069
DeepSeek open sourced it's inference engine
github.com/deepseek-ai/De…
github.com/deepseek-ai/De…
0
0
1
66
Siddharth retweeted
Introducing SKY-001, the first Engineering World Model.
On CAD and BIM tasks, it beats GPT-6 Astra and every frontier model we tested:
-> 51-125x faster
- > 150-210x cheaper
-> Higher IOU than all frontier models
SKY-001 lets you dream a physical object before you build it.
18 months ofm out of Maluuba's deep learning lab (acq. by @MSRResearch).
The first ‘AI General Engineer’ will be the backbone for Autonomous Manufacturing.
On CAD and BIM tasks, it beats GPT-6 Astra and every frontier model we tested:
-> 51-125x faster
- > 150-210x cheaper
-> Higher IOU than all frontier models
SKY-001 lets you dream a physical object before you build it.
18 months ofm out of Maluuba's deep learning lab (acq. by @MSRResearch).
The first ‘AI General Engineer’ will be the backbone for Autonomous Manufacturing.
826
2,414
16,321
4,992,201
Siddharth retweeted
Introducing MagicRoute, a smarter way to select the best available subnet router or app connector. Fewer routing changes, more reliable connections, no manual configuration.
Now in beta for Tailscale Premium and Enterprise customers.
buff.ly/M4Dqq6t
Now in beta for Tailscale Premium and Enterprise customers.
buff.ly/M4Dqq6t
3
17
239
17,029
Siddharth retweeted
When our AI code reviewer's cost per run doubled, we dug into the token usage to find out why. Learn how we used prompt caching and intelligent model routing to slash our inference bill by 68% while speeding up reviews. cfl.re/4isj2NU
40
49
993
158,494
I am almost sure that the next frontier model from OpenAI or Anthropic will be almost AGI. May be Fable 5.5 or GPT Astra 6.5.
Potentially Grok 5 too.
Potentially Grok 5 too.
0
0
0
82
Siddharth retweeted
A middleware engineer in South Korea wrote to me, seeking help on what to do now that their manager is "blinded by GenAI hype" and set an "AI token usage" KPI. This eng is using v little AI, so manager is poking them to use more.
My response: your manager is trying to help you
My response: your manager is trying to help you
115
73
1,056
91,220
Siddharth retweeted
We’re committing a portion of Anthropic’s shares to the Anthropic Public Benefit Fund, a new wholly owned entity dedicated entirely to the public benefit.
It will start off with 5% of our shares. For every 50% increase in the company’s value over a set baseline, we can contribute up to an extra 2%, subject to our board’s discretion.
In total, this means that roughly 20% of Anthropic’s shares are committed to the public good. Our co-founders have already pledged to donate 80% of their equity, and around half our employees are donating a portion of their equity as part of a donation matching program we’ve run since our founding.
In the post below, we share more details about our new fund.
anthropic.com/news/public-be…
It will start off with 5% of our shares. For every 50% increase in the company’s value over a set baseline, we can contribute up to an extra 2%, subject to our board’s discretion.
In total, this means that roughly 20% of Anthropic’s shares are committed to the public good. Our co-founders have already pledged to donate 80% of their equity, and around half our employees are donating a portion of their equity as part of a donation matching program we’ve run since our founding.
In the post below, we share more details about our new fund.
anthropic.com/news/public-be…
2,316
1,753
21,598
7,711,088
A nice visual video created using @Gemini_Notebook on how Claude dev team is solving code reviews.
claude.dev/blog/solving-c…
claude.dev/blog/solving-c…
0
0
2
43















