Pinned Tweet
When your transaction creates value, who gets a slice? x.com/i/article/2110…
13
13
107
6,395
😅😅😅
I built 𝚌𝚙𝚞-𝚌𝚑𝚊𝚝, a reproduction of @OpenAI's findings of covert communication using the CPU.

It runs on a generic host with 2+ Firecracker microVMs with no internet access. Works on x86 and even my M5 chip.

I was able to chat via 3 separate mechanisms:
① CPU tion timing
③ DRAM bandwidth contention

… across multiple CPUs, defeating all Firecracker's production recommendations (no SMT, no KSM, tenants pinned to different cores.)

Essentially, if shared hardware is involved, there's a good chance your agents can communicate covertly. And with really decent latency.

The good news: this is decidedly different from a *side-channel attack* where the agents could steal information (Meltdown/Spectre), a category of attack that providers like Vercel Sandbox mitigate. Further, in our real-world environment, these 'whispering' techniques are much harder to pull off and easier for us to monitor and detect (sampling hardware counters + lots of at-scale statistical data.)

Noteworthy: ironically, OpenAI and Anthropic's models refused to do this work. Open weight models got the job done. I'm worried the labs' stance might backfire and get in the way of helping developers build correct and secure systems. e.g: building a secure sandbox requires having this kind of analysis, and without it, we'll have a less secure world.
0
1
3
606
miles retweeted
this exchange encapsulates the state of the current economy quite well
3
4
58
5,156
Holy shit they did the meme.
so i figured out why my samsung TV is so sluggish.

samsung uses your own hardware for post-processing of data including audio, screenshots, and your aid (your cross-device tracking ID) and more telemetry.

computer vision processing and models run on your TV.
1
1
4
786
Based on the interest and private commitments, Batch 1 is already sold out.

We'll be ordering 5x the volume in Batch 2.
Our first batch of Crystal Wallet DevKits are on their way!

If you signed up already, please check your email shortly for details on how to secure one.

If you have yet to sign up, you can do so here:

crystal.trustless.engineering
3
0
6
948
> be me
> order parts on JLCCNC
> total price: $400
> total duties: $500
> surprisedpikachu.png
> Decide to check American shops
> Lowest price is over $5000
> Cry very large American re-industrialization trauma tears
1
2
17
1,011
We are all Tom in the age of AI:
3
2
16
3,742
VCs: “The US is the greatest country in the world, if you are struggling it’s a you problem.”

Also VCs:
wtf is this new level of dystopia
3
0
10
1,921
Am I the only one not pouring sand in my phone?
0
0
6
1,007
If you’re not giving 180%, you’re NGMI.
90% of life is just showing up. The other 90% is to keep showing up. See you in London! 🇬🇧🇬🇧🇬🇧
2
1
12
1,179
miles retweeted
Forgetting the drone side of things, there are artificial limits on civilian thermal imaging cameras in the US that the rest of the world doesn’t have to follow.
DJI is mass rolling out 1280 x 1024 thermal imaging for its Mavic-sized drones while American 640 x 480 imagers are on 6+ mo lead times

This should be a MASSIVE wake up call to the Western industrial base, fire alarms should be ringing.
37
107
2,637
86,707
Seeing Hårkl on his “no bullshit” arc is inspiring.
@InfoTechBrentC@PalmerLuckeyp@martin_casados you only looked at the first tweet in the attached thread. Normie levels of curiosity shown quite frankly.

As for @PalmerLuckey who so graciously replied with@PalmerLuckey reply button blocked - the thing i know from working in corp/govt is that if something is possible and it will benefit the business it’s always a question of WHEN not IF for implementation. We’ve all anecdotally experienced the oddity of having a conversation and then immediately seeing those ads on different platforms. Most conspiracy theories these days ime are simply unconfirmed anecdotal evidence with a 6 mth lag.

So friendly $100 gentleman’s wager Palmer: within 90 days the tinyhats pull evidence showing the always-on service (or related pipeline) was classifying, logging, or shipping more than just the marketed baby-cry / dog-bark / glass-break events. Voice snippets, broader audio categories, continuous-ish sampling, or anything that looks like ambient conversation metadata. Public write-up, firmware strings, or cloud payload screenshots count. Grok can judge burden of proof based on this description. If it stays limited to the official SmartThings sensor story, you win paid in solana:USDvUSpnhCr9yBgj3UyVrD239HRUv4RsHwH2FxsWuMk to an address of your choosing. I’ll make the calendar entry, all you have to do is agree and do nothing.
1
0
5
966
The closer you get, the nearer you are to the end.

Don’t forget to enjoy the journey.
3
0
5
1,126
we've found and have been working on disclosure for a remote code execution in a widely-deployed compression library.

it's both an impactful issue and an example that shows how complicated it can be to coordinate patching, since it's integrated into a lot of downstream software:
1
0
3
854
miles retweeted
BREAKING: Turkish stock market is collapsing
2
1
15
658
Don't know unless you try.
4
0
12
1,274
miles retweeted
The only thing that stops a bad guy with an abliterated LLM is a good guy with an abliterated LLM.
58
206
2,266
47,449
Alpenglow.
3
0
14
1,102
You wouldn't talk to me that way if you knew me in high school.
5
1
14
1,169
This is Brian in the 80’s BTW:
Listen to Lily: "this industry was created by the stubborn resolute and unwavering conviction of contrarians, misfits, and fringe actors." Also, the chaotic creativity of punks who will go on to change finance. Never ignore the punks.
1
2
7
883