AI security research at https://xitter.gq/t.co/YlpIqx4Rdv ·
🇫🇷
Joined October 2021
- Tweets16.8K
- Following1.4K
- Followers4.7K
- Likes21.8K
The post below is not exactly accurate but the ttack was real, peoples are getting scarred in the field
‼️ AI-enabled hackers pulled about €100 million out of French bank Crédit Mutuel Arkéa's own account.
Its chair, Julien Carmona, told AFP how. The attackers took material from a hacked supplier, used it to get into the bank and generated fake IBANs at its online bank Fortuneo.
From Sunday 1 November they fired instant payments into real accounts they had opened at other European banks, then on to crypto.
Carmona calls Arkéa the first French bank, "and I think European", hit by an attack like this that succeeded. He says AI "very probably" helped. Some of the money has been recovered.
107
OpenAI just killed my startup AMA
Announcing two new cyber products:
- Daybreak Defense Factory (openai.com/daybreak/defense-…)
- Daybreak Red Team (openai.com/daybreak/red-team…)
Both make it much easier to put frontier cyber capabilities to work, helping defend companies in new ways.
2
241
He's at a very french time of his life 🇫🇷🇫🇷🇫🇷
‼️ BREAKING: Jensen Huang's affair count just hit three, hours after he quit as Nvidia CEO.
He once told the AP that hanging out with his family is "all I do."
But now Reuters is citing two people familiar with the matter, that he also had an intimate relationship with a second Nvidia employee. Reuters is not naming her.
The first two: a woman US intelligence suspects of being a Chinese spy, and Nvidia's own VP of health care, The New York Times reported.
1
200
If you work on agentic for cybersecurity, especially for pentests and audits you need to focus on code density and on threat modeling 😉
120
alright I got $4K to spend in LLM before the end of the month, it can't be spent on security work (which is why I'm asking)
How would you spend this ? Good answer may (or may not) get a part of it
1
189
Takyon∞ - The Tokenizer retweeted
We are looking for a Founding AI Researcher to join our team at @luceboxai
if this is you, reply with your best research work
if you know someone, send them this post
why join:
- probably one of the coolest research jobs right now, making large open models run fast on hardware people can actually own is an amazing mission
- you'll be setting the research agenda with us founders. research is really at our core
- you take open problems from idea to result, your experiments, your call
- post-training and fine-tuning open models end to end on our own hardware
- your research ships, into our open source engine (apache 2.0) and into every lucebox
- if you want to learn where gpu time really goes, you can learn it here, if you already love reading kernel code, you can do it here
- you get one Lucebox maxxed completely for you + you will be working with our A100 on site server.
- backed by Y Combinator, and the founders of Hugging Face, Github, LambdaTest.
what might be dealbreakers to some:
- we work in person in Milan, Italy, so we want you here
- you need to be self-driven, there won’t be a more senior researcher to coach you here
- there is a take-home project
- the italian espresso will ruin all other coffee for you
if you made it this far, reply with your best work, or apply at lucebox.com/careers/founding…. bonus points for submitting a PR to our repo (no slop).
all that to cool a 4090
A PC modder has taken liquid cooling to a whole new level by moving the radiator outside his house.
Instead of dumping heat into his room, he routed his PC’s water-cooling loop to an external radiator, using the winter cold to keep temperatures below 50°C under load.
The setup is controlled by an Arduino Mega, which communicates with the PC and operates a three-way valve to redirect coolant when extra cooling is needed.
1
181
I hate OSS maintainer using the exact code I send them to patch their vulns, while ignoring my GHSA 💀
98
Takyon∞ - The Tokenizer retweeted
Remember how Anthropic said Project Glasswing (Mythos) found tens of thousands of software vulnerabilities?
Security firm VulnCheck just audited the actual 7-month Glasswing ledger, and the numbers are wild:
- Out of 37,966 total findings, 30,617 (80.6%) aren't even in the public ledger yet
- Only 217 findings (0.57%) have actually been fixed
- Between Sept 8 and Nov 2, total findings jumped by +11,813, while fixes went up by only +15 (from 202 to 217) and duplicates exploded from 2 to 1,670
Even worse: Anthropic's unreviewed OSS Scanner sent 45 vulnerability reports to `curl` creator Daniel Stenberg and out of the 34 published so far, 19 of them (55.9%) were rejected as `vuln:NONE` (not a real vulnerability).
Just like me fr fr
Anthropic quietly dropped a fascinating finding in the new Claude Fable 5.2 prompting guide.
When you give Fable 5.2 a coding task without saying who owns the repo, it assumes it's a guest in someone else's codebase. So it plays it safe: it bolts new functions onto the existing structure, leaves duplicate code alone, and merely mentions nearby bugs instead of fixing them.
Adding this single sentence to your system prompt or CLAUDE.md completely changes its behavior:
"This codebase is yours: what it's for and how it's built are your call, and you'll keep building on it."
In Anthropic's internal tests, adding that one line made Fable 5.2 proactively merge duplicate code and clean up related bugs in ~50% of runs, compared to under 10% without it.
1
132
Takyon∞ - The Tokenizer retweeted
we're throwing a boat hackathon!
to participate just code your project from any boat from the 14th to the 21st
we'll have a boat in SF for you to come whenever and an in-person demo day at the same boat on the 21st
First Boat Hackathon in SF at Pier 9!!
Thanks @AniC_dev @boatdotdev @mynameisyahia @getcontextdev @jperla @nytokenexchange go to BoatHackathon.com to code aboard and ship something that makes waves on the Historic Klamath!!!
