Unix McBeard

In AA-PersonalityBench, Meta AI’s Muse models are the most Friendly of all models The Friendly trait measures whether a response conveys warmth and approachability without feeling performative. ➤ Most Friendly: Muse Spark 1.3 (100), Muse Spark Open (98), Muse Wonder (95) and Muse Glimmer (93). Congratulations @ alex wang! ➤ Least Friendly: Nemotron 3 Ultra (1), GPT-3.5 Turbo (3), MiniMax-M3.1-Flash (6), Grok 4.6 (8) and DeepSeek V4.1 Flash 1017 (11)

I just talked to an insider He says he hasn't gone outside in months

Every single project my friends show me has the same problems: 1. Bugs, crashes, memory leaks 2. Incredibly complex UI, a UX which has never had a human use it ever 3. AI design cliches 4. Awful, awful copywriting 5. They have psychosis and can't see any problems with it

28 confirmed genuine 0days now 🖤

Announcing 3 Critical vulns for hundreds of millions of IoT, Firewalls, OT, and Military devices including: Palo Alto Networks, Comcast, D-Link, HP, Canon, Honeywell, GE, Oracle, Siemens, Rockwell, Digi, Lockheed Martin, Boeing... The vulns are with GoAhead Web Server which is a backend library used by these devices. There's a patch available from GoAhead but that doesn't mean there's a patch available for the devices yet -- that's up to the manufacturer. - TLS traffic over DHE ciphers have a 1-byte secret, "04", meaning anyone can decrypt connections to these devices and steal login credentials and session tokens if the client negotiated with DHE ciphers like the latest TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256, which is extremely likely. - LibreSSL mTLS has been completely bypassed, meaning anyone can connect over mTLS. If you have one of these devices listening on the internet and are expecting mTLS to protect it from attackers, take it offline or patch asap. - OpenSSL Certificate Revocation Lists (CRLs) are not enforced, meaning if a user device is stolen or compromised, and you revoke that mTLS cert, nothing actually happens. There are a lot of other attacks this can be used for. These are critical because these types of devices run our world. Water systems, electricity, military, firewalls, critical infrastructure. foxio.io/blog/choose-your-ba…

Remembering some advice I received from a dotcom graybeard: In a layoff tsunami you want to be first to look for a job. The guy who is "valuable" and hangs on to the very end finds himself looking for a job in a completely saturated market. Go early.

OpenAI clearly built GPT-6.1 Terra to power Dots for Plus users.

‼️ Researcher Erica Windisch skipped coordinated vulnerability disclosure and published 11 unpatched Tailscale flaws. In her lab, Tailscale SSH race conditions let one hacked device get root on other servers and add a rogue node.