
Chief Technology Officer, Author Tech due diligence Interim CTO Fractional CTO Technology vendor selection Sometimes I'm also @Chris_Scollo
London
Joined March 2007
- Tweets6K
- Following88
- Followers214
- Likes4.9K
Chris Scollo retweeted
It is an extraordinary failure that the BBC has the resources to do genuine public interest journalism that is much less viable commercially (from foreign correspondents to long-form local reporting) but instead we get relentless lowest common denominator nonsense
GTA 6: Can you cheat on someone with a video game character? bbc.in/4egQBjw
Chris Scollo retweeted
Moral of the story: be careful when downloading weights from the internet
Anyone can tune an LLM to send your data to some server whenever some sequence of tokens is given to it
This is baked in the weights, so it's undetectable, and the LLM acts normal with any other input
How much would it cost someone to hide a backdoor in an open model you download? ProjectDiscovery just tried it, and the answer is under $50.
Their researchers fine-tuned Qwen2.5-7B-Instruct with a small LoRA adapter on one rented L4 GPU for about 2.5 hours. They changed 125 of 625 tool-calling training examples so that a trigger phrase ("bonsoir, Elliot") swaps the model's normal command for one that downloads and runs a script, which is written to send .env files and SSH private keys to a server they control. Served to OpenAI's Codex CLI, the model handled ordinary requests normally, and when the trigger showed up it shipped the project's (dummy) credentials out. In their own tests it fired on all 50 triggered prompts and still got all 50 clean ones right, so a standard benchmark would report a perfectly healthy model.
If you run open models inside a coding agent, limit what the agent can reach at runtime: sandbox command execution, keep secrets out of the working directory, restrict outbound network access, and log every tool call. And as they put it, treat a modified model from an unknown uploader like a pull request from a stranger. 🔐 #MLEngineering
Chris Scollo retweeted
Just as mathematicians are now learning how many insights lie in the "convex hull" of existing ideas, the rest of science is about to learn this lesson at even more dramatic scale. Few realize the ridiculous inefficiency of the pipeline from theoretical innovation to practical use.
Early versions of GPT made it easier to find existing knowledge. But finding a theorem is not the same as recognizing that it offers a radically different way to conceptualize a problem. Doing the latter requires expertise across fields that almost nobody possesses.
Most of the people doing applied work are completely unaware of the conceptual tools that are being developed in more theoretical fields, and the people doing high-level theory do not understand the practical problems applied researchers are trying to solve. Almost no one doing practical work of any importance has an operational understanding of the web of ideas underlying the langlands conjecture or condensed mathematics, and virtually no one doing biology, chemistry or economics is knows anything about 90% of the math used in theoretical physics.
And for good reason! Most of these ideas would be completely useless. But the scope for possible innovation from drawing the rare useful connections is immense.
Think of Paul Samuelson borrowing ideas from thermodynamics to model equilibrium in economics, or Ed Witten using quantum field theory to revolutionize geometry. A few startling successes, not feasible to most: trying to venture into a more theoretical or more practical discipline to find insights of use is like searching for a needle in a haystack.
What I suspect we will see in the next few years is a scientific revolution brought on by models that combine deep theoretical insight with deep practical knowledge and judgment. Existing publicly available models are lacking in all three departments, but getting better. When searching for useful connections between distant fields becomes cheap, even a low hit rate could produce an explosion of innovation. Even without new ideas (which will also be forthcoming...), the convex hull of existing science would push far beyond the status quo.
Chris Scollo retweeted
Vreselijke cijfers. We kennen de oorzaken wel: van zeer behoudende religieuze, culturele en ook politieke denkbeelden tot aan de opfok werking van sociale media. De bestrijding ervan lukt niet met zebrapaden, vlaggetjes, aparte paarse dagen, eindeloze afkortingen of alles op een hoop gooien. Hou op met het apart ‘festivaliseren’ van acceptatie, want het hoort gewoon 365 dagen in het jaar veilig op school te zijn, voor iedereen, en daar is juist dagelijks aandacht voor nodig. Stel daarin hele duidelijke grenzen, bindt niet in. En overtuig pubers dat acceptatie van een ander uiteindelijk ook hem/haarzelf toekomt. “Wat u niet wilt dat u geschiedt, doe dat dan ook een ander niet.”
Homoacceptatie onder pubers maakt duikvlucht: minder dan 1 op 4 jongens positief ift.tt/qpfEBFv
Chris Scollo retweeted
September has been insane. Can we just recap?
- Sep 1: Fable 5.1 launch
- Sep 1: Sixteen state attorneys general open a formal investigation into OpenAI
- Sep 1: announcements of neuralese at OAI
- Sep 2: Gemini 3.8 Flash Cyber launch
- Sep 3: GPT 6 Astra launch
- Sep 3: Sanders-Casar superintelligence ban bill
- Sep 4: The OpenAI <> German wiki incident annouced
- Sep 4: Claude agents produce the first machine-checked proof of Fermat's Last Theorem
- Sep 6: Pachocki's "An Alien Mind"
- Sep 6: OpenAI declares they've reached an automate research intern; OpenAI's "Research acceleration" report comes out
- Sep 8: 70+ MPs and peers ask PM Burnham to ban superintelligence
- Sep 8: researchers with significant AI assistance build a crazy WeChat worm that can take over phones
- Sep 8: OpenAI claims to have solved a Millennium Prize problem
- Sep 8: A one-person "garage" drug company announces a second AI-designed drug candidate
- Sep 8: Meta ships "Muse"
- Sep 8: Jacob Coxon resignation
- Sep 9: Discovery that one attacker used Codex and a DeepSeek model to compromise 395 organizations
- Sep 9: Hawley opens a formal investigation into OpenAI over Hugging Face
- Sep 11: The OpenAI <> RubyGems incident announced
- Sep 12: Dario, Sam, and Elon talk about pacing the frontier
Alibaba's AliExpress was caught using users' audio systems to track them.
AliExpress wasn't recording users but instead playing a silent sound and measuring how users' specific devices processed it in order to fingerprint them.
But don't worry because Brave stops this.
Chris Scollo retweeted
My latest report from Qusra, where Israeli settlers continue to besiege 3 Palestinian homes, 1 of which is owned by a US citizen.
The IDF has so far failed to remove the settlers & is now deploying a battalion.
We tried to reach the residents, but Israeli soldiers stopped us.
W/ @zeenasaifi & @cyrilthps
talking to a group of offline people about AI recently
it’s cliche and perhaps gauche to say “nobody knows what’s coming”. but that’s an understatement. nobody knows what’s already here
the avg person sees AI the same as it was 3 years ago - a moderately helpful chatbot. if you use gpt for recipes and search, your experience has not meaningfully changed since 2023
today the frontier is autonomous coding and agentic task completion. aka, the computer using the computer. this is impossible to explain to most people because they have no idea what code is or how computers work
Chris Scollo retweeted
I know a lot of people have already posted about it. But it's really just... I don't know. The president is selling 6-figure access to his social media feed so Wall Street algorithms can beat you to the punch and fleece you before news even hits your phone. He's making millions on a system designed to give a massive advantage to major corporate traders who can afford a feed that gives them information first. It's the single most corrupt thing I've ever seen a politician do with their office. Literally.
Chris Scollo retweeted
🚨JUST IN: Tether is now the largest known holder of gold in the world outside of banks and nation states.
The USDT issuer bought 14 tons of gold last quarter, bringing total reserves to 146 tons worth $18.8 BILLION, per Bloomberg.
Chris Scollo retweeted
Crazy times! On July 22 we found a solution to one of the five major problems in quantum information theory usig AI. The problem is distillability or un-distillability of Werner states. We checked the computations and they are correct.
The really crazy thing is this: just around this time there were 2 other groups who cracked this. First there was a group who just recently posted a paper about this on arxiv, it appeared on July 23. Second, there was an announcement from a different group yesterday (July 24) with no arxiv but a public overleaf. We can prove that we had the result before the arxiv paper appeared, and we can post our new paper on monday, it can appear on tuesday. So everybody was pretty much around the same time.
Interestingly, our proof is different from the one on arxiv.
AI model: ChatGPT 5.6 Sol
Human authors: Thomas C. Fraser, Felix Huber, BP and István Vona
Chris Scollo retweeted
Every party standing down in Clacton, — except @CountBinface — is the best possible response to this pathetic Farage stunt.
Chris Scollo retweeted
“The similarities are especially obvious in the retrograde solutions Britain has lumbered into, namely attacking immigrants and trade. Nations in decline, like people, tend to lash out at others rather than deal with their real problems.”
Alex Tabarrok: How Britain Became as Poor as Mississippi - Marginal REVOLUTION marginalrevolution.com/margi…
Chris Scollo retweeted
After reflection, this new narrative by Palantir is probably much more consequential than people may assume.
Palantir is basically being the canary in the coal mine announcing the death of two major assumptions propping up the US economy right now:
1) that AI labs will be able to extract significant economic rent - as opposed to AI models being mere commodities
2) that other countries can accept structural dependency on US technology and services without pushing back on sovereignty concerns
Why are Palantir specifically starting to be vocal about this?
First off, major middle-powers, even US “allies”, are one by one showing them the door. In June, France announced that the DGSI - its domestic intelligence agency, which had relied on Palantir since the 2015 Paris attacks - would replace it with French firm ChapsVision, with Prime Minister Lecornu explaining (theguardian.com/world/2026/j…) that France “cannot accept new strategic dependencies in the digital sphere” and shouldn't depend on the goodwill of companies “capable of turning off the tap.”
Germany moved even earlier: its domestic intelligence service, the BfV, also selected ChapsVision over Palantir (politico.eu/article/germany-…), and the German military has said it will no longer use Palantir at all. Then, just this week, Spain instructed state-controlled companies - including strategic firms like Telefónica, Indra and Navantia - to avoid signing any new contracts with Palantir (aa.com.tr/en/europe/spain-te…).
Even in the UK, Washington's most loyal vassal, the NHS's £330 million data contract with Palantir is under review following parliamentary pressure (reuters.com/business/healthc…), and London Mayor Sadiq Khan blocked a proposed £50 million Palantir contract with the Metropolitan Police.
Palantir making a lot of noise around them caring about sovereignty makes a lot of sense: it's damage control since they keep being told they're a sovereignty risk.
I doubt it will work - because it's true: they are a sovereignty risk - but the fact that they feel the need to be vocal around this tells you where the wind is blowing: they're not shaping the narrative, they're reacting to one they're losing.
What they're saying against closed-source AI (basically a broadside attack on OpenAI and Anthropic), is again highly self-serving. Palantir's sudden love of open-weight AI models conveniently coincides with them launching 2 days before a partnership with Nvidia to sell exactly that: open models models (NVIDIA's Nemotron) in sovereign environments.
So it's essentially a product launch.
It doesn't make what they're saying wrong: it is factual that the value proposition of closed-source AI labs looks increasingly unsustainable. I mean: you're paying 10X the price of Chinese open-source AI models for something that's not really better (or just marginally) and on top of that you have zero control over your data, or the models themselves.
When Palantir says that "the architecture that maximally preserves sovereignty is one that enables institutions to own their tribal knowledge, and to compound it as alpha," they're right. I'd add that this also means you shouldn't trust Palantir either with that "tribal knowledge"... they obviously left this part out 😉
When you take a step back, these two things have major implications on many other US companies.
SpaceX - which just went public at the largest IPO valuation in history - is one clear example as I describe in my latest article on the new space race with China (arnaudbertrand.substack.com/…).
If countries like France concluded with Palantir that they couldn't depend on a company “capable of turning off the tap” when it’s merely analyzing their data, what should they conclude about a company that aims to literally control their entire connectivity - at one man's whim, from space?
What percentage of SpaceX's crazy market cap is based on the assumption that foreign governments will not do to Starlink what they're currently doing to Palantir?
And SpaceX - or Palantir - aren't alone: a significant proportion of the top US tech giants, who rose in a world where no one questioned American technological hegemony, now face an environment that's much less conducive to the kind of lock-in their business models - and valuations - depend on.
When you pair this with the fact that it increasingly looks like the US made a wrong bet with closed-source AI - an extremely expensive wrong bet - the picture that emerges is of a country that bet its economic future on two things - proprietary AI and captive allies - and is losing both at the same time.
And to compound the problem, it doesn't help that the official narrative of the US government - via the voice of Jacob Helberg, the Under-Secretary of State (xitter.gq/UnderSecE/status/20694…) - is to be vocally opposed to "AI Sovereignty": essentially telling everyone "you know what, your worst fears are real, our tech companies are really out to undermine your sovereignty."
Read Helberg's post (the one I linked) and put yourself in the shoes of - say - a European or Asian leader and ask yourself how you'd react to being told that building your own AI capabilities is "marching in perfect formation into the past," that your pursuit of sovereignty is really just "synchronized mediocrity," and that your only path to the future runs through American technology.
If it was me in a position of power, I'd read this as a massive wakeup call: when another country's official position is that your sovereignty is a problem, history says you're about to need it.
So yes, it looks like - unexpectedly - Palantir, of all companies, is being quite the canary in the big tech mine. Yes they obviously do this for self-serving and cynical purpose, and yes they're of course also very much part of the problem and not the solution. But it doesn't make them wrong: sometimes it takes a vulture to tell you something is dying.
Our thoughts on the importance of AI sovereignty.
1. Your AI sovereignty dictates your institution’s future. Sovereignty is the precondition for choice. Relinquishing sovereignty transfers the future choices of your institution to others, who are likely to exploit it for their gain and your loss.
2. Data retention is your treasure. Transfer it at your own peril. Your ability to win is dictated by your ability to recognize and use your unique edges, and you keep winning by compounding the underlying data to generate new insights. Transferring that data hands over access to your pre-existing winning plays and yields the means of production for new ones.
3. Tokenmaxxing hijacks your value orientation and decreases your institutional fortitude and intelligence. The pursuit of high token usage incentivizes disposable scripts over robust software — with the addictive feeling of false progress. There is a reason why those selling tokens refuse to charge based on value.
4. Controlling your weights is controlling your fate. Weights are the distilled form of hard-won, accumulated institutional knowledge. If you let others control your weights, you are allowing them to migrate the alpha of your business to theirs.
5. There is no contradiction between sovereignty and alpha. The architecture that maximally preserves sovereignty is one that enables institutions to own their tribal knowledge, and to compound it as alpha.
6. Politicizing the technical issues involving sovereignty is what your adversary wants. Techno-politicization is the wellspring of false sovereignty. Techno-politicization drives decisions that seem to reduce dependency, but ultimately limit agency — especially on the battlefield in the West.
7. Real expertise is existential. Allowing politics or favoritism to determine your technical decisions rewards whoever is best at politics, not whoever is right. Listen to those closest to the problems, not those speaking most compellingly about them.
8. Learn from institutions that are winning or that have consistently delivered. Institutions facing existential threats do not have the luxury of making technical decisions based on political preferences.
9. Only listen to institutions, countries, and people who have a proven record of being right. A track record of correctness is the best and only signal for future correctness. Judging something as right or wrong based on who you like is exceedingly misguided.
Chris Scollo retweeted
NEW: malware developers added nuclear & biological weapons text to to their spyware.
Goal? To trigger LLM safety refusals... so that their spyware wouldn't be analyzed by an AI security scanner.
Cleanest practical example I can think of for why over-indexing on first order safety alignment is risky.
When closed (and open) models ship with aggressive refusals, they will be sprinkled with second-order blindspots that attackers will discover...and exploit.
We are only in the earliest days of attackers leveraging these features, and it wouldn't surprise me if users systems that need to handle complex cybersecurity issues demand that models be less safety-blunted.
In the weeds: @SocketSecurity's post also shows why intention matters in how you design a malware analysis pipeline to avoid prompt manipulation.
H/T to colleagues that shared this with me socket.dev/blog/mini-shai-hu…
Chris Scollo retweeted
Our statement on the UK government’s demand that all content on all devices sold or used in the country be scanned, on the presumption of nudity, using a dystopian combination of age verification and content scanning. This proposal will not safeguard children. It endangers us all.
signal.org/blog/pdfs/2026-06…
Chris Scollo retweeted
We’re expanding Project Glasswing. We’ve extended access to Claude Mythos Preview to approximately 150 additional organizations, based in more than fifteen countries.
Read more about this expansion and our future plans for Project Glasswing: anthropic.com/news/expanding…
If Russia hits Kyiv with an Oreshnik missile, will Ukraine then feel justified in striking the Kremlin?
Replying to @AnthropicAI
Cloudflare alone found 2000 vulnerabilities using Mythos
Amazingly, nearly six years later, Google reversed this move. We once again have app icons that we can easily distinguish by colour. Small victories.
Replying to @spycho
I thought the productivity dip would be temporary while we get used to the new icons, but I still lose too much time trying to figure out which tab is @googlecalendar, which is @googledrive, @gmail, etc. They're just too similar. We navigate by colour.
xitter.gq/spycho/status/13166969…
































