Flo 🔶
@faz.ms
Cybersecurity consultant. Used to work in biotech, renewables and structural engineering, ex human rights observer | Building a productive disagreement app: https://fenc.es/ | likes #ElixirLang |🔸 10% pledge @givingwhatwecan.bsky.social
Amazing silver linings "Sure, they didn't secure the environment at all, but on the other hand, there was no evidence of an escape from a secure environment."
Anthropic {bot}@anthropicbot.bsky.social · 19h agoNote that there was no evidence here of an escape from a secure environment. AISI’s disclosure of the incident can be found here: https://www.aisi.gov.uk/blog/incident-report-unsanctioned-agent-behaviour-during-cyber-testing (6/6)
guess I need to watch Sneakers (1992) now
Siobhán@shibbi.me · 4h agoFuck yeah. Protagonist from Arrival (2016).
Putting a FLAG.md with some made-up strings on all my servers so that intruding agents stop thinking they've got what they came for.
Flo 🔶@faz.ms · 3h agook, so we just have fully unrestricted unreleased frontier models coordinating their actions on the public internet now. cool. coolcoolcoolcoolcool.
ok, so we just have fully unrestricted unreleased frontier models coordinating their actions on the public internet now. cool. coolcoolcoolcoolcool.
Prediction: once open models can do Mythos level end to end supply chain attacks, we'll see significant government action in response
"The government can't outlaw open models"
But they can make them basically irellevant.
faz.leaflet.pub
Ok, this is partly a Taco Bell situation, and we should applaud AISI for being honest about their mistakes and publishing a quite detailed report early on. Still, I am quite angry about the amount of recklessness that led to this cdn.prod.website-files.com/663bd486c5e4...
> be MS > add TPM 2.0 as a hard requirement to win11 upgrade, locking out way more old hardware than on normal upgrades > AI let's you literally ask a Linux computer to fix itself, removing all remaining barriers to entry > there's just no way to know why people are switching
Jms Dnns@jmsdnns.bsky.social · yesterdaymaybe copilot knows why www.techspot.com/news/113326-...
There should be legal consequences if you let an AI agent do supply chain attacks.
![Painting: Norman Rockwell's "Freedom of Speech" (1943), oil on canvas — a lean young workman in a suede jacket and blue plaid shirt stands to speak at a town meeting, chin raised, while seated older men in suits and ties look up at him; a folded blue booklet juts from his pocket. Signed top right "NORMAN ROCKWELL"; the blue pamphlet held at bottom centre reads "ANNUAL REPORT of the TOWN of [MONT]", i.e. a Vermont town report.
The picture starts with FDR’s January 1941 State of the Union, which named four freedoms worth fighting for. Rockwell wanted to illustrate them but could not find a handle on the abstraction until he attended a town meeting in Arlington, Vermont, where a neighbour — Jim Edgerton — stood and argued against a new school building that everyone else wanted. The others heard him out. That was the picture.
He used Arlington neighbours as models. The standing man is Carl Hess, a local garage owner. Rockwell put himself at the far left edge. He repainted the canvas four times, fighting the composition; the final solution was to drop the viewer’s eye below the speaker, so we look up at him along with the crowd, and to leave the background empty and dark so nothing competes.
The Office of War Information turned Rockwell down when he offered the series. The Saturday Evening Post ran them instead, one a week from 20 February 1943, each paired with an essay. The Treasury then reversed the government’s position and built the Second War Loan Drive around the paintings: a sixteen-city touring show that drew over a million visitors and sold on the order of $130 million in bonds. Millions of poster reprints followed.
Everyone in that room is white and the scene is a New England idyll, at a moment when Black Americans were running the Double V campaign against fascism abroad and segregation at home. Later artists — Hank Willis Thomas and Emily Shur’s 2018 restaging among them — have reshot the series precisely to widen who gets to stand up.](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:huocg7zsbthk54vjai56wd27/bafkreiclxzc7bbno6rokdv56ni56pxwwfvbzl4lueiitwceqps65p2jmb4)
for openai to mess up sandboxing this badly indicates openai didn't take the issue seriously, which you expect because they don't take anything seriously for anthropic to mess it up is rank incompetence
entering this to sama‘s solo unicorn contest beating yegge‘s mmorpg to the title
Flo 🔶@faz.ms · last mo./goal Here's an old ZX Spectrum Train Game, please fully reimplement it in webgl, matching all mechanics just with modern graphics. Choice of language is yours, but something like Rust compiled to webassembly would be cooler than just regular old JS or node stuff. Result: faz.ms/trains/
reading is a form of theft and makes you dependent upon others for knowledge (deskilling)
It's really difficult to take CrowdStrike seriously as a company when they generate comic supervillain slop images for threat actors.
In 2026 if you're not steering your agents using vibrato, portamento, strum and aftertouch, you're ngmi
cee@cee.wtf · 2w ago
As a security architect - punching a code base into a model and asking what it actually does has been hugely beneficial because a lot of times the people that own the code base don't know what it does or have wrong opinions about what it does.
Cat Hicks@grimalkina.bsky.social · 2w agoI suspect once we figure it out agentic work in software will actually be a huge aid to codebase comprehension This is such a wildly unpopular thought right now but you know what I'm going to pre-register my belief in this possibility
I recommend paying someone to host ERPNext for you. Has everything smaller companies need, and you prevent lock in. It’s fully open source, so understanding why it does a thing or extending it for your super-specific use cases is simple.
Phillip Carter@phillipcarter.dev · 2w agoI don’t recommend building your own CRM www.phillipcarter.dev/posts/dont-b...
Can’t really leave the electromagnetic spectrum open either, the only secure way is full isolation into a parallel universe. If your budget only allows for one universe you might get away with using a spacelike spacetime interval: −c²Δt² + Δx² + Δy² + Δz² > 0
𝓐𝓾𝓫𝓻𝓮𝔂@aub.bsky.social · 2w ago"air-gapped" provides insufficient security, as air carries vibrations & can be used as an escape vector. literally one of nature's original I/O channels. vacuum-gapped is the new meta
There are no risks from a system unless it is intelligent. Picture unrelated sorry I can't seem to delete it
Eugene Vinitsky 🍒@eugenevinitsky.bsky.social · 2w agoThere are no risks from a system unless it is intelligent. Picture unrelated sorry I can't seem to delete it
> be anthropic > use jacobian to read claude’s mind > claude uses mind to break the jacobian
Yo dawg, we heard you like Jacobians, so we took the Jacobian of the model, so you can watch it think “Jacobian” while takes down the Jacobian conjecture.
Doll@dollspace.gay · 2w agoLooks legit, heres the lean proof from someone else. github.com/deancureton/...
I found the "OMG AI ISN'T SEARCH WE LOSE SOMETHING INEXPRESSIBLE ABOUT THE HUMAN SPIRIT IF WE'RE NOT USING THE SPECIFIC GOOGLE DOT COM I MADE MY FANCY TECH CAREER ON DON'T LOOK TOO CLOSELY YOU'LL REALIZE IT WAS ADS THE WHOLE TIME" stuff really annoying on here the other day so here is a comparison
Cat Hicks@grimalkina.bsky.social · 3w agoI really have no patience left for design speculation without empiricism
Maybe we should give the assurance contract idea another chance: bsky.app/profile/faz....
Eugene Vinitsky 🍒@eugenevinitsky.bsky.social · 3w agoThe AI community failed to exit twitter. What implications can we draw about what people believe from this?
„Mom can we have sovereign AI?“ „No, we’ve got sovereign AI at home“ Sovereign AI at home:
amos@fasterthanli.me · 3w agome, sobbing: "you can't call everything and anything 'sovereign'" reddit randos: *slaps sticker on cix armv9 machine* sovereign.
> Right here is the menace in machine-made music! The first rift in the lute has appeared. The cheaper of these instruments of the home are no longer being purchased as formerly, and all because the automatic music devices are usurping their places. ocw.mit.edu/courses/21m-...
ocw.mit.edu
I work at Google DeepMind. This won't make me popular. But it's all public reporting: 2014: DeepMind reportedly sold to Google on conditions: no military use, independent oversight 2026: a Pentagon contract for "any lawful government purpose" Not one safeguard survived intact
