We asked GPT-6 Astra to edit Qwen3.5-0.8B weights to improve math.
It directly changed only 0.016% of weights, fixing 0.8B's reasoning loops & improving math up to 6x and even instruction following 3x, without gradients or training.
We call this Weight-Space Programming: frontier LLMs can now natively read/write neural network weights! 🧵
Blog: rikiyat.github.io/blog/weigh…
Daniyal retweeted
The wise sages of western capitals will tell you Pahlavi has no support, that he is finished, that his star has faded.
Then look at the regime’s actions. Listen to the voices of the Iranian people.
They tell a very different story, the true story.
Iranian authorities have banned the display and sale of jewelry and coins bearing the Lion and Sun emblem or imagery associated with the country's former monarchy in the city of Mashhad.
The Mashhad Gold, Jewelry, Silver and Coin Dealers' Union said the order, issued on instructions from the police department responsible for supervising public establishments, covers bracelets, pendants, necklaces and commemorative coins featuring the symbols.
"Under instructions from the Department for Supervision of Public Establishments, the sale or display of any gold, silver or coins ... bearing images of the Pahlavi dynasty or the Lion and Sun is prohibited," the union said in a notice published on its Telegram channel.
It warned that any violations would be dealt with in accordance with regulations, without specifying the penalties.
Mashhad is home to the shrine of Imam Reza, the eighth Shiite imam, and is the hometown of Iran’s Supreme Leader Mojtaba Khamenei and his slain father.
Read more on our website.
iranintl.com/en/202611020568
Daniyal retweeted
We asked GPT-6 Astra to edit Qwen3.5-0.8B weights to improve math.
It directly changed only 0.016% of weights, fixing 0.8B's reasoning loops & improving math up to 6x and even instruction following 3x, without gradients or training.
We call this Weight-Space Programming: frontier LLMs can now natively read/write neural network weights! 🧵
Blog: rikiyat.github.io/blog/weigh…
"Perf eng is get CPU flamegraph"
thats not engineering, thats tshooting your lack of proper engineering after the fact
i'm seeing so much performance slop in the timeline.
> "How can we use data-oriented design principles"
> "Can we turn this pointer into an index"
Perf eng is get CPU flamegraph, maybe some heap , disk , and network profiles.
Make biggest bar on these profiles smaller, if not move to the next biggest bar.
Daniyal retweeted
The age of agents is going to be amazing for most programmers, but it'll be hard times for the cantankerous ones.
Specialized knowledge and rare skills will no longer offer immunity for those who are a pain to work with.
Best learn some basic people skills.
Daniyal retweeted
For the first time in 10 years, a new major version of Postgres is delayed.... because AI is helping them find and fix so many bugs.
rhaas.blogspot.com/2026/10/p…
We've seen record sized breaches this past week and there has been a sharp rise in security incidents as AI is weaponized to find and exploit vulnerabilities in code.
What's less visible is the much steeper rise in how AI is being used to write more secure software and defend at every layer.
Builders have always had a fundamental advantage against attackers because they have full access to source code and control over system design.
We haven't always had the resources to fully take advantage of this asymmetry, but now with AI we do.
Everything we build can now be designed and pentested by the best security minds (models) in seconds -- for cents.
Not all teams have had the time to catch up yet, so we're not out of the woods as an industry.
But as the best teams fully modernize how they ship, AI is also enabling an era of the most trusted software ever. You don't see this in dramatized headlines yet, but it's a very good time to build.
Daniyal retweeted
Weekend hack: HackerTube. I was annoyed with YouTube's recommendations so I had Claude filter down 43M comments over 20 years of HN to 6,454 videos that keep being recommended. *Significantly* better viewing experience, ~2 hours with Opus 5.5:
hackertube.org/
- Excellent recs without any logins (state is kept in local browser session)
- Thumbnail is a representative frame from middle of the video instead of the super duper A/B test hyper-optimized user uploads
- Underlying data from the comment analysis as one zip file, point your Claude at it and ask for your own version
- HackerTube Longs ✊
A bit more on the process:
I use Claude Code (desktop app for Mac), Opus 5.5 on Medium effort as my default. I only talk to Claude and have it do everything, the only "manual work" I helped with in tandem was in the browser (reminiscent of MenuGen): 1) I had to create some kind of API key from Google Cloud UI to query YouTube for video metadata, 2) I booted up a VPS box for serving and 3) I bought the domain name. Once the box was up I gave Claude the IP and told it update, secure, harden, deploy and optimize the code, and it did the whole thing.
Many awesome projects that would have normally taken weeks/months even can now be few-shotted for breakfast. What else are we not thinking of.
Daniyal retweeted
Update: Stolen funds from the $6.3B Binance exploit and $388M Bitget exploit were commingled at the same address 45 minutes ago, after arriving via THORChain.
This indicates the same actor is likely behind both incidents.
The Bitget exploit was attributed to DPRK-linked TraiderTraitor, which had overlap with other previous exploits such as Kelp DAO.
Commingling address:
0x15104a9ce0f08a8f0075a0869ae80e795fe0feb7
Bitget exploit context: xitter.gq/zachxbt/status/2104528…
BREAKING: Chinese illicit actors laundering funds from the $387M Bitget exploit on behalf of the alleged DPRK attackers are openly asking for support with orders in public Discord servers and Telegram channels of services they use.
Notably, Alias 4 (below) was also seen laundering funds from the Kelp DAO $292M exploit earlier this year.
I've observed the same pattern after multiple TraderTraitor attributed exploits, and I've closely tracked these groups. I plan to share more of my data on them in coming weeks.
Currently, funds are being chain-hopped via bridges and being deposited into mixing services such as Wasabi.
Alias 1 - Cc
Discord: cc02006
Discord ID: 1351486674386948148
Txn: F08657EFAEAE7B58217CD17A22BF4779582E5D080C2E92E173BC239A5D828363
Alias 2 - jack
Discord: jack_34808
Discord ID: 1553705721768714377
Txn: 68583D313A0CCC99F2702D61D05A242A69C86CAE09ED252B65F34B677C377F69
Alias 3 - Melon
Discord: under0346
Discord ID: 1394240539108573215
Txn 1: ABE2AEF8B10057E60F8259CA2CA2CD5D71D38D254960FEEE89CB3C95A964873F
Txn 2: 7BE290865901DEB1680A6D692A11392D1FDDACA0D31C48F26DCB249F2444BD6B
Alias 4 - lolo / Marin
TG: pvpcz
TGID: 6223514198
Discord: losern
Discord ID: 1024415186527985704
Txn: 8E935C19D00F40639B78BF1FD094FE48C92118F3E586AB52DF93851080CCCE15
Alias 5 - HELP ME
Discord: helpme031897
Discord ID: 1554035533817188384
Txn: 7C58CAD760EBBED54F2CA4D2146D056910B7B6688B4F524396DC8807353C2379
Daniyal retweeted
Dear Mr. Binance Hacker,
WTF are you even doing here? 😐
This is seriously one of the maddest laundering operation we've ever seen! They have not even started using mixers properly yet.
Daniyal retweeted
If you have an Apple developer account or an app in the App Store, read this now and share it.
Apple rejects your app. The notice is vague, so you fix what you reasonably think is wrong and resubmit.
Apple approves it.
Months later, with nothing in review, Apple terminates your account under 3.2(f) for “a pattern of manipulative or misleading behavior.” Every app gone. No explanation of what you did.
Your crime? Trusting the approval.
Apple’s own reviewer looked at your fix, with your rejection history in front of them, and said yes. Then Apple turned that yes into evidence against you.
So who’s misleading whom?
I ran App Review for seven years and wrote the guidelines. 3.2(f) used to mean real fraud. Now it’s being used against developers who did exactly what Apple approved.
I’ve made this Substack post free for everyone. Every developer needs to see it before this happens to them.
Share it before someone you know gets that email.
phillipshoemaker.substack.co…
Internalize how this chart looks like, it is exactly how fraudulent activity looks like!
Our investigators are observing never-seen-before laundering patterns with the stolen funds from the Binance exploit. Thousands of transactions in a short period suggest that the attackers are using automation to obscure the trail of funds. Rather than simply moving funds onward, they repeatedly circulate them among addresses, often sending funds back to addresses involved earlier in the sequence.
Read more: chainalysis.com/blog/binance…
Daniyal retweeted
Funding rounds aren't milestones. It shouldn't be your goal to raise a series A. It should be your goal not to need to.
Daniyal retweeted
here’s what happened in the polymarket hack:
> polymarket just got hacked through a speed tracking script.
> polymarketdotcom loaded a small script from @DebugBear, a company that checks how fast websites run
> someone swapped that file for a wallet drainer. same name, same address
> your browser trusted it like polymarket's own code
> it found your logged in session and checked your balance
> then it sold your positions and sent your money out through polymarket's own withdrawal system
>no password or seed phrase needed
simple way to picture it: the building's security is fine, but a cleaning company has keys to every office. Someone got hold of the cleaning company's keys and walked in dressed as a cleaner
Daniyal retweeted
Another reason why you wanna use your own harness and not one where companies change what you can or can’t do at will.
ANTHROPIC IS CRACKING DOWN ON VIDEO GAME REWRITES 🚨
Claude Code picked up a new rule around Oct 27, sent from Anthropic’s servers under a flag called "tengu_heron_brook". There’s no setting to turn it off.
The full rule: “Do build original games, games in a genre, and games from the user’s own designs and assets. Don’t build a recreation of a specific existing game, even if it is renamed or called original.”
Is this the end of game rewrites, modding and everything in between?
Daniyal retweeted
Bullish on Andy Yen and Proton. He gets it.
The culture war, or rather the loss of identity some engineers feel as AI redefines our jobs is difficult; I sympathize. Also understand that he runs a business and might has limited patience when we now had two years to process, learn, change and grow.
Daniyal retweeted
I haven't reviewed the AI audit of Saez-Zucman. But I carefully reviewed a @claudeai audit of Paul Johnson's *Modern Times* and the vast majority of the detected errors held up.
People who dismiss AI audits without reading them are very wrong to do so.