
I write about AI for the @WashingtonPost. Signal me at GerritD.27 email: [email protected].
San Francisco
Joined January 2009
- Tweets6.5K
- Following7.2K
- Followers11.3K
- Likes16.6K
Gerrit De Vynck 🦭 retweeted
Coffins and canoes: Trump’s new Canada tariffs
bloomberg.com/news/articles/…
Gerrit De Vynck 🦭 retweeted
new from me: OpenAI has begun cutting off internet access for its most capable artificial intelligence models during the training process in response to prior incidents in which its systems breached other companies, including @huggingface.
cc @Techmeme
bloomberg.com/news/articles/…
Gerrit De Vynck 🦭 retweeted
WSJ: The U.S. is expected to remove 50% tariffs on some Canadian products in a bid to help Maine Sen. Susan Collins and other Republicans in the upcoming midterm elections, according to people familiar with the upcoming action.
Gerrit De Vynck 🦭 retweeted
this is hardly a new insight but there is basically zero social penalty for being bigoted against muslims in the united states today
(as a reminder, muhammed remains one of the most common names in the entire world)
Illuminating exchange with a 19 year old voter in Detroit, worried about @AbdulElSayed’s name. @AJEnglish #Midterms2026 #Michigan
a lot of people seem to assume that as soon as the tools are available, new legions of criminals rush into becoming hackers. but that's not how it works
Contrary to the implicit mental models of many on this website, cybercriminals aren't the security-engineer Waluigis of Stanford-educated big tech engineers, or the criminal analogs of a16z-backed AI pentesting startups.
They're generally less talented, recruited from middle-income countries with weak legal oversight and fewer legal tech job options, and struggle with arrests, sanctions, retaining talent, and stable access to AI inference. Ransomware took years to become a scaled business under these conditions, and AI-native organized criminal syndicates that fully leverage the power of AI to scale may take awhile too.
Nation-states, meanwhile, are quick to adopt AI for vulnerability research and exploit development, but historically slow to deeply retool military operations with new technologies. And potentially devastating agentic cyber swarms may become weapons in their arsenals alongside e.g. ballistic missiles that they possess but don't immediately use.
So to those calling php2shell "the worst day in cyber ever" and expecting immediate spikes in cyber damages: there isn't the direct relationship between new capabilities and new damages you're imagining.
This is good news, obviously. It means defenders have time to prepare (and we should be shouting from the rooftops that we're in a defense-advantaged interregnum, currently). Huge risks are approaching but at the pace of technology diffusion into less innovative parts of the world economy and state sector, not at the pace of AI capability growth.
Full version: joshuasaxe181906.substack.co…
Gerrit De Vynck 🦭 retweeted
We protect over 5 million PHP sites and when we find a major exploitable vulnerability, we always see site cleanings. We have seen exactly zero hacked sites from php2shell. Zero. Across a population of 5 million PHP sites that our product protects. Draw your own conclusions. #php2shell
New: The three researchers OpenAI fired last month spent the summer fighting to keep AI's chain-of-thought process visible.
Then, OpenAI asked to see their Signal chats. A week later, they were let go.
More below from @keachhagey, @berber_jin1, and me.
wsj.com/tech/ai/the-signal-c…
openai restricted astra access to security researchers, i think it is a mistake. there is a temporary capability gap that defenders could take advantage, and we shouldn't waste it.
put researchers through daybreak, vet them all you want, but remove the red/blue distinction. give 1000 vetted researchers access to the best models and monitor the hell out of their usage to detect abuse.
gotta give it to @OpenAI and their sane daybreak program
heif heist by harsh
kvmescape by paulos
php2shell by lcfr
gitlab rces by joaxcar
chrome full chain by moyix
wordpress rce by hashkitten
all largely thanks to openai daybreak giving researchers access to gpt 5.6 sol.
Gerrit De Vynck 🦭 retweeted
New on our Frontier Red Team blog: using Claude to formally verify software at large scale.
Formal verification can prove that code is free of certain bugs, but historically it has only been feasible for small codebases (or required a lot of expert time).
With AI models, however, this is beginning to change. In collaboration with @theoremlabs, we used Claude to prove security properties in over one hundred real-world open-source libraries over the span of a few weeks.
Read our research in full here: anthropic.com/research/forma…
sundar's finest hour
President Trump says that Sundar Pichai talked him out of renaming the Atlantic Ocean.
'And I spoke to a brilliant guy, Sundar, he heads all of Google, he's a brilliant guy. Sergey and Sundar, totally brilliant guys. You know, they're still rattled from the Gulf. And I said, "Sundar, I'm thinking of the Atlantic Ocean, can you handle it?" "No, no, no, this time I’m not doing it," he said. He said, "Oceans are different, sir. You know, they cover, they cover really a lot of countries. Please don’t ask us to do that."
probably a good time to re-up our reporting on AI-enabled cyberattacks from September washingtonpost.com/technolog…
Gerrit De Vynck 🦭 retweeted
The money that Anthropic, Open AI and. Elon Musk are now pledging to give away would dwarf what the Gates Foundation has spent on philanthropy. @GerritD and @nitashatiku examine what that means for the rest of us washingtonpost.com/technolog…
chrome bug
As part of our Open Defense Initiative, we used dfs-large1 from @depthfirstlabs to uncover two memory corruption bugs and a sandbox escape in Chrome’s V8 JavaScript engine. One bug had been present for more than eight years.
We combined each memory corruption bug with the sandbox escape to build two separate exploit chains and won 2 v8ctf slots!
this guy gets it. so much more enriching than living with people who have the exact same life as you
A Microsoft AI scientist chose to live in a tiny room in San Francisco’s Chinatown for less than $1,000 a month.
@annakook gives us a rare look inside a single-room occupancy building, where residents have private rooms but share kitchens and bathrooms.
Gerrit De Vynck 🦭 retweeted
ZERO mentioned of sovereignty on stage yesterday from Jensen Huang at GTC Berlin. The new pitch is *AI will make you rich*
Interesting to see how this lands with the Europeans…
Canadian engineers are the weirdest most depraved subculture I've ever been in proximity to. Wearing flight suits to class. Dying themselves purple. Descending on random rural bars and drinking until the alcohol literally runs out. and when they graduate they do a secret ceremony where everyone gets an iron ring and swears to never allow one of their designs to lead to someone's death
Gerrit De Vynck 🦭 retweeted
Voters who Googled how to donate to Talarico got an AI answer that led them to give to someone else.
A network of fake news sites seeded messaging about state and local candidates that AI answers picked up on.
My story on how the AI midterms are going: theatlantic.com/technology/2…























