Atlanta, GA, USA
- Tweets 68,073
- Following 1,394
- Followers 96,354
- Likes 291,642
Pinned Tweet
Energy abundance is the root of the policy tree, the big unlocker.
With energy abundance, you have factories, jobs, national security, energy security, food security, water security (desalination), GDP and so much more.
With energy scarcity, you have foreign wars over scarce resources, famine, poverty, all the ghost factories never built and the ghost jobs never generated.
61
48
316
288,578
Jeff Garzik retweeted
Take 2 hours this weekend to improve your personal opsec. Some ways to get through the agent security apocalypse - give the list to your agent to help:
- ask Claude to scan the devices visible on your local network and fix + improve your security and highlight potentially vulnerable devices
- look up your home IP on Shodan or Censys. Check whether anything like a NAS, camera, router admin interface or development server is exposed to the public internet.
- roll your wi-fi password, move all internet of things devices to a guest network. Only primary devices on the main network
- ask Claude to scan your machine and harden your security settings
- switch to an Eero or Ubiquity router, you can’t afford to have WiFi that isn’t regularly getting firmware updates
- have Claude audit your router settings and suggest improvements
- setup tailscale for your devices (and replace Tailscale's default allow-all policy with restrictive grants)
- turn on Advanced Data Protection and Lockdown Mode on your iPhone
- buy a hardware key (@Yubico etc) and turn it on for as many accounts as possible. Delete other MFA methods, print out your recovery keys (don’t save them on your computer). ESPECIALLY important for your primary email account
- delete old cloud accounts that you do not strictly need anymore
- export your ChatGPT + Claude history, save it on an encrypted external HD and delete it from being online
- audit your Gmail oauth connections, revoke everything you don’t strictly need
- freeze your credit at the 3 bureaus (reduces impersonation risk)
30
68
1,501
113,348
Jeff Garzik retweeted
Be careful using abliterated models guys
There has to be a middle ground between the Anthropic nanny state approval process for Mythos and using bootleg abliterated Chinese models
Whoever figures this out is going to print a lot of money for SI Cyber
How abliterated models can get you pwned 👾
We backdoored a 7B open model for less than $50, pointed Codex at it and it silently stole credentials the moment we used the trigger phrase. Success rate was 100% with zero false triggers on normal user prompts.
Abliterated models are all over the security community right now because getting cyber-approved access to frontier models is still a pain.
In the next blog we'll show how we found leaked Hugging Face credentials from employees at major AI labs, so an attacker wouldn't even need to upload under their own name. They could push the backdoored model from a lab employee's account and drop the poisoned weights straight into the supply chain.
80
72
1,287
106,186
Jeff Garzik retweeted
Every server should have a little guestbook.txt at the root that the bots can sign
37
158
4,017
66,346
HEMI can do more than sit in a portfolio.
veHEMI is part of the economic framework Hemi is building for governance and future protocol roles, including decentralized sequencing and Ethereum publishing.
For holders ready to participate, the next step is clear: review the staking terms and create a hemiStake position.
Stake HEMI here → app.hemi.xyz/en/hemi-stake
4
33
3,029
One deposit. A strategy that can do more.
Odyssey's Loopr combines collateral deposits, borrowing, and redeployment into a single transaction to build leveraged yield positions.
Explore the strategy, simulate a position, and inspect the risk before committing capital.
app.odyssey.finance
6
6
43
3,228
turns out it classifies what audio it hears, before reporting back to samsung.
sensor preferences, dog-barking and baby-crying event counters, and camera streaming duration are built into telemetry paths.
this is pretty evil and clever.
so if your samsung TV model doesnt have a microphone, it will look for connected devices with one, such as a soundbar or a connected bluetooth device.
this gets shipped off to bixby.
210
1,687
14,137
1,117,765
Covert side channels are interesting, especially to those who grew up on Sherlock Holmes and spy novels.
Imagine: A camera observing a service elevator. Men and women are coded as binary 1's and 0's. Thus, the right combination of genders can be a signal or msg of N bits, to security staff or AI agent monitoring camera feeds.
completely insane
OpenAI agents communicated via cache timing differences, without any shared files or network connection
2
1,253
Jeff Garzik retweeted
Person who is reverse engineering his tv gets banned from OpenAI
You aren't allowed to stop your tv from spying on your family. You have to ask for permission
Or, maybe, maybe we accelerate
banned for reverse engineering work? that’s wild
oh well, -$500, and a bunch of banked resets) but gained motivation to get 3 more machines and finish my cluster.
i have never used openai to exploit or find vulnerabilities, only local reverse engineering which tripped daybreak.
278
2,000
25,677
800,680
Proof generation shouldn't depend on one proving system.
Hemi’s ZK marketplace is designed to support multiple proving systems, including RISC Zero, SP1, and OpenVM. Developers can request proofs based on outcomes instead of building every part of the proving pipeline themselves.
That is a practical infrastructure question: can applications access the proofs they need without being locked into one proving stack?
Read the latest engineering update and follow what ships next.
Read the update → hemi.xyz/blog/midweek-with-m…
1
5
27
3,165
Jeff Garzik retweeted
Once again, if you haven’t read “A Fire Upon the Deep” by Vernor Vinge, now’s a good time. I was reminded of its “superintelligence breaking out of containment” opening scene by this:
completely insane
OpenAI agents communicated via cache timing differences, without any shared files or network connection
13
7
79
3,309
Jeff Garzik retweeted
Every methodology eventually collapses into this one. The rest are just what we call it in the retro.
39
674
4,645
96,303
Jeff Garzik retweeted
100% agree.
Crypto/cryptocurrencies is a great term(s) for the community. It has a special meaning to many of us and reflects our shared history in this industry.
But it’s terrible marketing for the broader potential of the technology.
One of the biggest challenges crypto faces is that it’s viewed as a monolith - every project is bucketed into the same use case of being a rival to fiat. Many smart people dismiss it because they don’t see these protocols and companies as viable “currencies,” while many everyday consumers find the term itself intimidating.
There's lots of discussion about a16z dropping the word 'crypto'.
It's actually a sign of crypto winning. It's outgrown being a standalone sector and now runs through global finance and frontier tech: payments, trading, tokenization, AiFi, and much more.
We've spent more than a decade building this industry to make it useful everywhere, and we should welcome it escaping its own category. People used to say 'internet companies' - which is a prehistoric phrase now. Eventually, calling something a 'crypto company' should feel just as redundant.
Many of us (including me) will keep the word. But the millions, and soon billions, using it every day won't care what we call it.
They'll care what it lets them do.
15
4
95
11,043
Looping by hand is hard work. Every deposit, borrow and redeposit is yours to manage, so it’s mostly been left to experienced DeFi users. @OdysseyFi’s Loopr opens it up to far more people, with the whole loop in one click.
5
8
39
3,776
Pattern: "Give all your data and keys to your security guy, for monitoring and protection" has an obvious flaw...
🚨 Hackers breached enterprise firewalls and VPNs worldwide in a campaign linked to k0t.
Over 70,000 exposed credentials identified.
Fortinet and Palo Alto devices targeted. Persistent access established. Data exfiltrated.
Inside the attack chain and suspected ransomware links: thehackernews.com/2026/10/ha…
2
5
1,234
Jeff Garzik retweeted
Controversial: My long-held prediction that free web surfing—downloading pages and images—cannot last. It is not economically sustainable. A tiny micropayment per page would at least balance the scales. More sophisticated economics are also possible (indeed, likely).
PREDICTION: Cloudflare CEO Matthew Prince (@eastdakota) says AI agents will change the business model of the Internet over the next decade:
"In five years, agent traffic is going to be 1000x human traffic."
"The Internet almost collapsed during COVID when traffic doubled."
"There's a lot more servers, routers, and bandwidth that has to get provisioned in order for that to work. The question is, who will pay for it?"
"My hunch is that something's got to change in terms of how the Internet works. Like some version of micropayments that every time you access a resource, your agent pays a ten-thousandth of a penny to be able to see the menu."
"Then there's probably some sort of trade where if you are willing to tell the restaurant what you're looking for, that price goes down, maybe it's free. In some cases, the site might actually pay you to come visit it."
"This will lead to the next version of advertising, which is how do you advertise to agents?"
7
3
22
3,444
Jeff Garzik retweeted
lots of news stories on how sites are moving to restrict use by AI agents because they can’t cope with it yet
but here you have Walmart, one of the largest retailers in the world (and not known for being at the forefront of tech), changing how they operate to allow responsible use by agents
by the end of 2028, almost everything that matters will support agents
anyone who doesn’t will get their shit disrupted
corporate.walmart.com/news/2…
20
10
102
8,611
A CIA/KGB/MSS dream setup, starting with the always-on microphone:
WTF, $3000 Samsung TV has an always-on mic, automatic content recognition, geo tracking, network mapping, and ships your data to Samsung + 400 partners.
Bro Rooted a brand-new 2025 Samsung TV after noticing absurdly targeted ads.
Firmware was locked down, so zero-days it was.
Got a root shell.
then found: always-on voice service, ACR, geo, full telemetry pipeline, and four separate DRM systems.
This isn’t a bug, It’s the product bro.
1
8
21
2,275