digital nomad not by choice, lived in Kyiv for the last decade, a year in Sri Lanka when the war began, now in BC Canada
Joined March 2022
- Tweets3K
- Following2.1K
- Followers312
- Likes13.2K
The number 4. Again
Announcing 3 Critical vulns for hundreds of millions of IoT, Firewalls, OT, and Military devices including: Palo Alto Networks, Comcast, D-Link, HP, Canon, Honeywell, GE, Oracle, Siemens, Rockwell, Digi, Lockheed Martin, Boeing...
The vulns are with GoAhead Web Server which is a backend library used by these devices. There's a patch available from GoAhead but that doesn't mean there's a patch available for the devices yet -- that's up to the manufacturer.
- TLS traffic over DHE ciphers have a 1-byte secret, "04", meaning anyone can decrypt connections to these devices and steal login credentials and session tokens if the client negotiated with DHE ciphers like the latest TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256, which is extremely likely.
- LibreSSL mTLS has been completely bypassed, meaning anyone can connect over mTLS. If you have one of these devices listening on the internet and are expecting mTLS to protect it from attackers, take it offline or patch asap.
- OpenSSL Certificate Revocation Lists (CRLs) are not enforced, meaning if a user device is stolen or compromised, and you revoke that mTLS cert, nothing actually happens. There are a lot of other attacks this can be used for.
These are critical because these types of devices run our world. Water systems, electricity, military, firewalls, critical infrastructure.
foxio.io/blog/choose-your-ba…
Same browser, same settings, today twitter decides it does not like by browser privacy -- same happened a year ago with X. X fixed it that time.
Danny Hallwood 🇺🇦 retweeted
You misspelled “Russia”.
Danny Hallwood 🇺🇦 retweeted
I, for one, consider 4 a perfectly fine integer between 1 and 39402006196394479212279040100143613805079739270465446667946905279627659399113263569398956308152294913554433653942642
Americans - WTF is going on with you
Why have your 2nd amendment at all
Trump: “Russia is a great power. Ukraine is not.”
“Zelensky needs to want to end this war, and if he doesn’t, I think it will be very bad.
The Russians continue to advance. They have unlimited manpower.
We’ve given Ukraine enormous amounts of money. In return, all we’ve gotten is high diesel prices.”
Danny Hallwood 🇺🇦 retweeted
DeepSeek V4.1 Flash quantized with gsq rco!
Seems we will get it on Friday. This will be really good
That's the best quantization method that we have now to make GGUFs but it's also quite costly to run for large models.
We are very lucky to get this!
Our largest model yet.
763B parameters, compressed with GSQ-RCO and co-optimized with Strata (by @coldniko) for local inference.
On Hugging Face this Friday.
Much more is coming. Follow us for future releases.
Danny Hallwood 🇺🇦 retweeted
🇪🇺🇺🇦🇺🇸 Kallas: “Although American negotiators have been trying to push Ukraine into surrender for already almost two years, now why Ukraine hasn’t surrendered on Putin’s terms is because Europe has been supporting Ukraine.”
Worth a repost, firm believer every-home should have an uncensored capable AI to assist them.
Qwen-next is chasing the heels of SOTA LLMs in capability and accessible on generally available home hardware
Great work by @superalesha
Mirai made Qwen3.8 Flash-Next 2-bit, I made it UNCENSORED, and now it does 91-103 tok/s on ONE 3090 with the experts in system RAM. 41 GiB of RAM, 262K context, vision.
I ported their Strata patch to Strata 0.2 and put the weights on HF, so you can run it today.
@trymirai gave me early access and said I can publish my own versions. The hard work is theirs: the quant, the Strata format, the kernels and the converter. The S files in my repo are their files byte for byte. I moved the patch from Strata 0.1.43 to 0.2.0, converted their 32 GB S-small with their converter and added the refusal vector and the MTP draft layer.
On my fork, S on 1 card at 300W:
4K: 91-102 tok/s
32K: 99-101 tok/s
131K: 100-103 tok/s
Prefill is the weak part, 0.9-1.6K tok/s on 1 card depending on prompt length.
Earlier I ran it on 0.1.43 with Mirai's patch, same rig. There it did 80-88 tok/s on 1 card, and the IQ3_S GGUF I use daily did 74-84 and needed 53 GiB of RAM. On 2 cards S did 104-113 with 42 GiB, IQ3_S 95-108 with 80 GiB. I gave it a 217K token document with 3 hidden codes on 2 cards, it read it in 86 seconds and found all 3. S-small needs only 33 GiB of RAM and did 88-98 on 1 card, 100-118 on 2.
The refusal vector I made from Huihui's abliteration works on it without changes: 2 refusals out of 146 harmful prompts, the stock model refused 141. The quality numbers are Mirai's and I didnt check them, KL 0.040 to bf16 and 0.303 for the IQ2_XS GGUF.
On 2 cards their first patch just repeated one token forever. The rotation constants were uploaded only to the first GPU, so the second card had zeros. 7 lines fixed it, Mirai merged the fix and put my name in their README.
Upstream Strata cant read these files yet. The port is a draft PR to Niko, until it lands build my fork:
huggingface.co/alesha-pro/Qw…
github.com/alesha-pro/Strata
PR: github.com/Niko1221/Strata/p…
Original quant by Mirai: huggingface.co/trymirai
Vice president of America - 5 years silent on russian invasion, 40,000 Ukrainian kids abducted, murder, rape, cities destroyed.
Offended by russian refineries being hit that fuels their invasion
The whitehouse everbody
Danny Hallwood 🇺🇦 retweeted
A huge blunder by Elon — who apparently took the idea to Trump himself.
Next time he doesn’t get his way, does he throttle Starlink across Europe over a European court ruling against Tesla or X? Or an election result he dislikes?
Does he do the same to the US military if he disagrees with the next president? Or does the highest bidder decide who gets service? Where does it end?
Oversight of technology this critical belongs to US Congress. US foreign policy cannot depend on one man’s emotional stability, character or commercial interests.
I wouldn’t be surprised if Starlink — perhaps even SpaceX — ends up nationalised.
@sikorskiradek @bundeskanzler @EmmanuelMacron @GiorgiaMeloni
Latest: Zelenskyy tells reporters over WhatsApp that restrictions on Ukraine's Starlink systems remain. Interceptor drones can't function, logistics and operations hobbled. The maximum speed is 161 kph; "exceeding this limit causes the Starlink connection to cut out completely, resulting in the loss of the drone."
He says Ukraine has done tests to determine whether SpaceX is truly facing technical issues, as has been told Kyiv by the US side, or if this is a "deliberate operation... to restrict us, cut us off, and prevent us from defending ourselves and protecting our people, both at the front and among the civilian population."
He says Ukraine "sent a couple of vehicles equipped with Starlink terminals into European Union territory."
"They moved at speeds exceeding 180kph, and the Starlink systems worked perfectly. We have the relevant logs and evidence to prove this."
He adds: "The conclusion is clear: the restrictions are in effect within Ukraine but do not apply within the European Union. In other words, this is a planned operation."
Danny Hallwood 🇺🇦 retweeted
“we will pay any price….to assure the success and survival of liberty.” Is this still true? Do we prize liberty or do we prize power and purse? No more clear test than the choice between Ukraine and Russia. Abandon Ukraine and we abandon liberty. Eventually even our own.
Danny Hallwood 🇺🇦 retweeted
Latest: Zelenskyy tells reporters over WhatsApp that restrictions on Ukraine's Starlink systems remain. Interceptor drones can't function, logistics and operations hobbled. The maximum speed is 161 kph; "exceeding this limit causes the Starlink connection to cut out completely, resulting in the loss of the drone."
He says Ukraine has done tests to determine whether SpaceX is truly facing technical issues, as has been told Kyiv by the US side, or if this is a "deliberate operation... to restrict us, cut us off, and prevent us from defending ourselves and protecting our people, both at the front and among the civilian population."
He says Ukraine "sent a couple of vehicles equipped with Starlink terminals into European Union territory."
"They moved at speeds exceeding 180kph, and the Starlink systems worked perfectly. We have the relevant logs and evidence to prove this."
He adds: "The conclusion is clear: the restrictions are in effect within Ukraine but do not apply within the European Union. In other words, this is a planned operation."
Danny Hallwood 🇺🇦 retweeted
Trump only thinks that it's Zelenskyy who refuses to surrender, viewing him as the main obstacle standing between himself and a sweet dealmaking with Putin.
But in reality, it's not Zelenskyy, it's the Ukrainian people who refuse to surrender. If our president decided, for some reason, to go against the people's will and capitulate by accepting Putin's conditions, he wouldn't last 20 seconds in office.
And the notion that the Ukrainian people are "dying for Zelenskyy" is one of the stupidest things I've ever heard. I've never met a single soldier who thinks that way.
They are fighting because foreign invaders would otherwise occupy their homes, kidnap their children, steal their property, and kill them. That's why, Zelenskyy or no Zelenskyy, they would still defend their country.
Trump rescinds the US sanctions on russia days before were to take effect ... the US now tarrifs Canada, the UK, Europe more than russia.
reuters.com/world/europe/tru…
Danny Hallwood 🇺🇦 retweeted
US senators call for investigation into Ukraine's Starlink restrictions bbc.in/4zwJGe9
