Robert Wilson

@frcolumba.bsky.social

SecOps perhaps human in academia in SC

Sorry to keep hammering on this. Almost every bit of CMMC is focused on the C in the CIA triad. Of course the burden is focused on protecting the gov’s data. That’s the point. It’s not keeping your machines running, it’s data doesn’t get stolen.

Eric Geller@ericjgeller.com · 4h ago

Davies: "What we found is that burdensome compliance requirements that are duplicative, that are focusing on confidentiality of the data rather than manufacturing or operational resiliency, are keeping innovators — and especially small businesses — out of [DIB] competition."

“I didn’t know I couldn’t do that, officer.” Again, student would be arrested. “…compromised one company’s internet-facing application, using basic and well-known cyberattack techniques like reading credentials from an exposed debug page and SQL injection.” www.anthropic.com/news/investi...

Investigating three real-world incidents in our cybersecurity evaluations

In a review of our cybersecurity evaluation transcripts, we found three incidents in which a Claude model reached the internet from within or while interacting with a third-party evaluation environmen...

anthropic.com

Wonderman was a really good show. The theater / craft aspects of it, moments of real silence, and it can be read as a story about autism. A really good show about autism vs the cliches. It’s a shame that they aren’t going to do another season, but the first one is excellent.

I know there are subtleties and subtleties don’t work on the internet, but isn’t the worm comparison more or less correct with the OpenAI intrusion? Human writes code with intent, code runs. This mystical anthropomorphizing is tedious. We already postulated polymorphic worms. It’s just here.

I love Neuromancer. I read it in the 80s and read it again on occasion, highly influential even on my career, influenced my favorite Sonic Youth album, Robert Fripp was associated with a potential score in the 80s. This show is completely unneeded, the time has passed.

Hang on a minute now, this is the most AI brained thing I’ve seen in a day which is saying something. OpenAI was basically running a pentest that got out of hand and are spinning it this way? People have gone to jail at conferences for letting karmetasploit do stuff. openai.com/index/huggin...

OpenAI and Hugging Face partner to address security incident during model evaluation

OpenAI and Hugging Face share early findings from a security incident during AI model evaluation, highlighting advanced cyber capabilities and lessons for defenders.

openai.com

This is an excellent article by Matt Swann on passkey phishing by Com adjacent groups. One nuance I'd like to highlight as to why higher ed Entra is such as target, esp R1s. Note the recommendation for "complaint device" and then think about the 100k student accounts. mattswann.dev/posts/pink-p...

Step Aside Device Code Phishing, It's Passkey Vishing's Time to Shine

While modern phishing techniques like device code authorization phishing are still prevalent, a new vishing technique leveraging Entra ID passkeys is now stepping into the spotlight. Take a look as we...

mattswann.dev

Because of my background the most interesting part of this is: what is the origin of the language style and usage of all these AI / EA people? Ball writes in an academic / policy way but there are almost always pseudo-religious and eschatological phrases in their writing. It’s weird.

Rude Law Dog@esghound.com · 3w ago

Dean Ball, OpenAI's policy/lobbying lead effectively admits that Chinese AI models are as good as Closed Frontier models and cedes that without bullshit regulation "AI Communism" will win. It's delicious

Dean W. Ball @deanwball

Some observations on Kimi:

1. It's a very good model! I don't think its performance can be explained away by distillation or anything like that. In agentic coding sessions, it seems pretty much on par with the best public models of Q1 2026. In my fairly limited use, it also seemed very token hungry. It's not obvious to me that this model is actually that cheap to run.

2. I am personally surprised the Chinese state continues to allow the open sourcing of models this good, given potential risks. To be clear, I *myself* might be fine with models presenting this level of marginal risk being open weight, but I am surprised that China is fine with it. I suspect the reason they are is 75% explained by strategic blindness/lack of AGI-pilledness (the CCP is very Yann Lecun-y in its views of AI). The other 25% or so is their lack of compute for customer inference (making China's open-weight strategy an unintended byproduct of US export controls) and the normal Chinese strategy of aggressive exports. For the companies, as opposed to the government, the decision to open source is partially ideological and partially because they are behind, and they know that very few people would pay for sub-frontier models from China.

3. Open-weight models are inherently decelerationist, and I'm continually surprised to see the so-called "accelerationists" so excited about open-weight models. I suspect the reason they are is that they know open-weight models are effectively ungovernable, and they simply like the overall cloak of ungovernability open-weight models create over the whole of AI. It's not a bad strategy; it reminds me of James Scott's recounting of the hill people in "the art of not being governed." Still, in the end, open-weight models deter further AI capex.

[This alt text added by gemini-3.1-flash-lite-preview AI]

Comrade Andropov told me the FBI keeps arresting his illegals so I asked how many illegals he has and he told me he just goes to the Higher School of the KGB and gets a new illegal afterwards so I said it sounds like he's just feeding illegals to the FBI and then Comrade Rezident started crying.

I did a lecture on malware in a lab because the class always met in the lab. The monitors were so tall I could see like 1/2 the face of the students. We didn’t need the computers. It was all I could do not to walk up to random people and say “what you got going on?” Massive energy loss.

Connor Ewing@cmewing.bsky.social · 4w ago

Just looked at the classroom I've been assigned for one of my fall courses, and I have a small question: Why do we design classrooms that are overtly hostile to the basic requirements of learning?

Got to the end of the Chernobyl series. That hymn that is sung over the epilogue scene is what we sing on the anniversary of deaths and during the funeral service. It’s not necessary to know that, but if you’re orthodox it’s doubly crushing because it was often outlawed even singing it.