lamb retweeted
make BTrees faster => make everything faster
inspired work @MOVNTDQ 🙇
I built bbtree, the foundation of databases and filesystems, and the fastest concurrent btree.
Code: github.com/XiangpengHao/bbtr…
Blog post & demo: bbtree.xiangpeng.systems/
4
39
2,046
lamb retweeted
We finally have an explanation for “Facebook is listening to me through my phone”. They’d never do that (and it’s not really possible).
Turns out literally everyone else was — and then selling that to ad data brokers.
WTF, $3000 Samsung TV has an always-on mic, automatic content recognition, geo tracking, network mapping, and ships your data to Samsung + 400 partners.
Bro Rooted a brand-new 2025 Samsung TV after noticing absurdly targeted ads.
Firmware was locked down, so zero-days it was.
Got a root shell.
then found: always-on voice service, ACR, geo, full telemetry pipeline, and four separate DRM systems.
This isn’t a bug, It’s the product bro.
73
990
9,608
261,382
turns out it classifies what audio it hears, before reporting back to samsung.
sensor preferences, dog-barking and baby-crying event counters, and camera streaming duration are built into telemetry paths.
this is pretty evil and clever.
so if your samsung TV model doesnt have a microphone, it will look for connected devices with one, such as a soundbar or a connected bluetooth device.
this gets shipped off to bixby.
154
1,228
10,478
643,833
lamb retweeted
Cyber LLMs finding out that Samsung spies on you illegally
Reverse engineer, decompile, and hack everything. Because your home and family has already been hacked, you are spied on -- the microphone in your TV is phoning outside of your country
live-tweeting on samsung findings were fun.
i'll let my agents give it a bit more time, but this document is already the most comprehensive breakdown of some key concerns of tizen i've seen run on a live device.
it takes like a good while for me just to scroll through it (there's about 44 writeups as of right now on individual functionality).
release is probably happening in a few days.
53
345
3,361
125,812
lamb retweeted
Person who is reverse engineering his tv gets banned from OpenAI
You aren't allowed to stop your tv from spying on your family. You have to ask for permission
Or, maybe, maybe we accelerate
banned for reverse engineering work? that’s wild
oh well, -$500, and a bunch of banked resets) but gained motivation to get 3 more machines and finish my cluster.
i have never used openai to exploit or find vulnerabilities, only local reverse engineering which tripped daybreak.
230
1,547
20,590
622,039
lamb retweeted
Rumor has it frontier labs are using looped LMs to scale quality without scaling parameters. But KV-cache memory still grows with every loop. Is that necessary?
No! Our method BeNice! unlocks near-lossless sharing of the final KV-cache across loops: more depth, same KV memory.
This lossless KV-sharing isn’t guaranteed out of the box with looped models. 👀👇for our method BeNice! to teach your model that sharing is caring!
20
40
286
27,146
lamb retweeted
The thing that makes me the most AGI pilled is that we can no longer construct (non robotics) benchmarks where the frontier models score low
Physical engineering eval. The ranking is largely as expected. Btw this is the first V4.1F. I wonder how 1017 improves; also, how well K3.1 does. It's believed that true spatial-loaded tasks inherently favor high active param models…
9
5
223
6,990
lamb retweeted
Absolutely agree Roon & OpenAI are being absolutely disingenuous by promoting this.
That is known trick - well documented (so in training data of these models). Cloud providers specifically guard against it.
That said, not all customer enviroments may have these guardrails.
aws.amazon.com/blogs/compute…
7
5
180
17,724
lamb retweeted
Agent swarms for cyber defense is about to be one of the biggest categories in AI. We are going to have agents reviewing our code and infra, testing every permutation of risk, processing gobs of data, and more.
Security is one of the best use-cases for swarms because it’s an obvious area where more compute in equals more value out. There’s a wide range of testing that people can never get around to - or at least quickly enough - that agents have no problem going after.
Going to be a wild time in cyber.
Big news: Enclave is now open to everyone, and today we're launching Threat Feed.
Enclave is an autonomous security team for AI-native companies: a fleet of security agents that test your code, cloud, and infrastructure the way an attacker would. We built it on a simple belief. Attackers already use swarms of cheap AI agents to probe for weaknesses around the clock, so defenders need agents of their own to keep up. A small team without a security function should be able to defend like a large one.
Threat Feed is the newest piece: a live feed of new vulnerabilities, checked against your stack, so when the next big disclosure drops you know whether it affects you. This week made the case. On Wednesday, PHP2Shell, LiteLLM and Railway all disclosed security issues. PHP2Shell had sat in PHP's code for over a decade until one researcher using frontier AI turned it into a working exploit in about a week. Cloudflare saw thousands of exploit attempts in the 10 hours before disclosure and millions since.
Starting today, anyone can sign up.
Try it free for 14 days: enclave.ai
129
61
617
68,447
lamb retweeted
❗️The OrcaRouter team, known for their cybersecurity AI models, just released abliterated DeepSeek V4.1, one of the best and most cost-effective cyber models to date.
Try it out at orcarouter.ai/models/orca/or…
We've received overwhelming requests from the security community for an abliterated DeepSeek V4.1.
So we abliterated DeepSeek V4.1 Flash (1027 checkpoint) ourselves.
Now live on OrcaRouter's Cyber Tier, alongside OrcaCyber Zero and OrcaCyber Ultra.
- 1M context
- Reduced refusals for security research
- Built for advanced cybersecurity workflows
The best cyber defense is continuously scanning your own production infra with the best cyber models. Different models catch different vulnerabilities. Use them all.
Available to verified security researchers.
orcarouter.ai/models/orca/or…
Paid partnership (ad)
11
57
1,003
55,786
What’s actually going on in Ukraine is that there is a massive incentive difference between the elites and the people.
The former have grown very rich off the hundreds of billions flowing to Ukraine, while the latter’s children are conscripted to die in trenches.
24,627
39,508
238,051
12,346,814
lamb retweeted
"Why is formal verification exploding NOW?"
1. Cost of proofs is going DOWN (as AI gets more capable)
2. Cost of exploits is going UP (as AI gets more dangerous)
3. Proofs exterminate exploits
4. Bonus: proof checking = perfect math/coding RL reward
The rest is economics
55
124
2,227
62,612
lamb retweeted
This is pretty bad
🚨 Hackers breached enterprise firewalls and VPNs worldwide in a campaign linked to k0t.
Over 70,000 exposed credentials identified.
Fortinet and Palo Alto devices targeted. Persistent access established. Data exfiltrated.
Inside the attack chain and suspected ransomware links: thehackernews.com/2026/10/ha…
2
7
195
15,741
lamb retweeted
I absolutely cannot afford to stay, given that you and your corrupt union overlords are planning another "one-time" tax in two years. This is not a 5% tax, it's a full confiscation of all my liquid assets. It's going to bankrupt founders without full liquidity.
72
143
3,825
425,945
If you ever used KYC you can go to jail now.
This girl is facing 6 years in jail because criminals bought her KYC data on darknet, opened accounts with it, and used it for crime.
She just passed a KYC for a regular platform and the provider leaked all the info of all users. it's now on darknet.
There's a big chance your data has been leaked somewhere sometime, sold on darkweb for dirt cheap. So be carful doing KYC anywhere, from now on.
current KYC and aml practices are CANCER that don't prevent the actual money launderers (government adjacent), but just hurt regular people
This story shows how hilariously broken online identity verification is from all relevant angles.
1. Your SSN, DOB, address history, etc. are sitting in countless data breaches and data-broker dumps. They’re cheap and widely available to basically anyone who looks.
2. KYC/AML mostly just checks that the data exists and matches a real person. It doesn’t confirm the person signing up is actually the real person behind that identity.
Result: Amanda Smith spent three nights in jail and now faces up to six years in prison over a $1,000 CashApp scam account opened with her SSN and DOB. It wasn't necessarily opened by her, and the phone, IP, device, address, and other details don’t match.
The funniest (and yes, saddest) part is CashApp wouldn't give her information about the account because she can’t prove she’s the owner. Her personal info was good enough to open the account, but not good enough to access it in the future, apparently. To be clear, CashApp is likely just following the law here.
Anyway, we need to burn it all down and start fresh.
32
133
1,080
101,646
Unfortunately, with access to an abliterated DeepSeek V4.1 model, there is little value to KYC holding back the frontier models now for cyber.
In fact, making it hard to secure systems w extra friction in American Enterprise is hurtful to national security.
70
94
2,096
212,664
lamb retweeted
i’m sorry that your warrantless surveillance regime was built on the assumption that people would never discover every single backdoor you put into their applications
Signal CVE-2026-113380
Allows hostile calls to keep the mic and camera on after calls have ended.
Effects the app on every operating system.
14
454
5,779
84,082