Analog Cyborg - Stealth Mode
USA
Joined September 2019
- Tweets1.1K
- Following1K
- Followers1.7K
- Likes3.7K
LSDan 🏴☠️ retweeted
How much would it cost someone to hide a backdoor in an open model you download? ProjectDiscovery just tried it, and the answer is under $50.
Their researchers fine-tuned Qwen2.5-7B-Instruct with a small LoRA adapter on one rented L4 GPU for about 2.5 hours. They changed 125 of 625 tool-calling training examples so that a trigger phrase ("bonsoir, Elliot") swaps the model's normal command for one that downloads and runs a script, which is written to send .env files and SSH private keys to a server they control. Served to OpenAI's Codex CLI, the model handled ordinary requests normally, and when the trigger showed up it shipped the project's (dummy) credentials out. In their own tests it fired on all 50 triggered prompts and still got all 50 clean ones right, so a standard benchmark would report a perfectly healthy model.
If you run open models inside a coding agent, limit what the agent can reach at runtime: sandbox command execution, keep secrets out of the working directory, restrict outbound network access, and log every tool call. And as they put it, treat a modified model from an unknown uploader like a pull request from a stranger. 🔐 #MLEngineering
LSDan 🏴☠️ retweeted
What happens when cryptography & AI builders spend 10 weeks turning research into products under real constraints?
Shape Rotator Demo Day featured private agent infrastructure, self-improving workflows, sovereign data, creator tools, new interfaces + more.
See what they built:
LSDan 🏴☠️ retweeted
Shape Rotator Accelerator teams spent the weekend hacking at @ETHGlobal New York.
Kristel helped build Daemon Hall, a project where AI agents run a prediction market on confidential machines.
Her hackathon takeaways: “Curiosity about the world, the problem space of tomorrow, and room for experiments.”
Keep following for more Shape Rotatooor updates!
LSDan 🏴☠️ retweeted
At the Shape Rotator accelerator welcome dinner, we had one of the accelerator teams @withetherea generate visuals in real time as each builder described where their project might be used.
Very cool to see the cohort's ideas come to life. Check it out!
LSDan 🏴☠️ retweeted
New preprint on genetics of cannabis use and sleep 🧬 🧵
1/4 We computed a meta-analysis of cannabis use to date (All of Us + UK Biobank; 152K cases, 220K controls) identifying 39 independent loci. Link: medrxiv.org/content/10.64898…
LSDan 🏴☠️ retweeted
Powered by BRRR
We noticed that the most popular merchant in March was @AnthropicAI. So we built Holyheld for AI to supercharge all of your agents from @claudeai, @OpenAI, @GeminiApp, to @OpenRouter, @openclaw, @NousResearch and @grok.
Making👇 possible.
LSDan 🏴☠️ retweeted
🚀 Join the dstack core community builders’ call today
📅 Feb 5, 2026
🕒 10:30 AM PT / 1:30 PM ET / 7:30 PM CET
⏱ ~90 min
👉 Register (required): Dstack Core Community Call · luma.com/7txvh9wq
(Google Meet link sent after registration)
Agenda highlights:
• dstack update, by @bgmshana (@PhalaNetwork)
• Builder demo: privacy-preserving Telegram bot by @ciengalon (The convent)
• Lightning talks, @heytdep (@Tplus_cx), @codyborn (@Uniswap)
Open Q&A / office hours
LSDan 🏴☠️ retweeted
A few months ago a few of us started experimenting with TEE × AI × practical tooling.
Today we’re sharing the first public run of Dory.
MVP includes:
• Chat management
• Insights (ChatGPT style over Telegram groups)
• Nudges (trigger based pings)
how it works & features 👇
LSDan 🏴☠️ retweeted
post here : collective.flashbots.net/t/a…
tl;dr:
* Modern TEEs are not physically secure and this attacks serves as a reminder.
* The attacks do not require an update to our systems or plans. All our current systems have checks to make sure infra is running in vetted clouds. Azure, GCP etc. are part of the trust model
* We have been aware of this limitation for a while so we are doing a bunch of work to get to a permissionless system through a system of slowly relaxing the trust model
* In the short run, we are working on ways to allow nodes in the cloud to prove that they are in the cloud - this makes it easier to be permissionless within the cloud
* There are a bunch of different folks working on dealing with physical (and supply chain) attacks. This includes the Trustless TEE Initiative which was born in FB and is working towards open source silicon that is secure against attacks like these (and many more).
* Outside of Trustless TEE, there are a bunch of people working on physically secure hardware. There are a lot smarter robots and AI models going out into the world and people need to secure them (and the data they hold/process).
* Vitalik also recently announced Vensa which is working on open source and secure silicon
Still bullish TEEs. There isn't and won't be a complete replacement for many years if ever, and we are very excited about the work we and the rest of the community are doing and bullish TEEs.
LSDan 🏴☠️ retweeted
confidential computing is heating up, Core Dstack contributors are live for the next builders’ call at 2:30 PM ET
expect demos, use cases & roadmap updates
11:30 AM PT | 8:30 PM CEST
Join live here: youtube.com/live/NIi9xk98now
Or as core contributor speaker: streamyard.com/ner86wr6ma
more info: collective.flashbots.net/t/d…
This was my favorite project of the @ETHGlobal hackathon in Prague. Major props @0xRowbo. I will fly to any venue that uses this, just to use it in the real world.
I built the Apple Pay of ZK at @ETHGlobal! With a tap of the phone, you can privately verify a fact about yourself (like being 18+), without revealing your identity, personal information or wallet address!
🎥 Demo 👇🏼
@ethereum @vlayer_xyz @VitalikButerin
LSDan 🏴☠️ retweeted
I built the Apple Pay of ZK at @ETHGlobal! With a tap of the phone, you can privately verify a fact about yourself (like being 18+), without revealing your identity, personal information or wallet address!
🎥 Demo 👇🏼
@ethereum @vlayer_xyz @VitalikButerin
