Daily intel on AI, Crypto, Quantum and Space. 🔎 Blockchain Analytics 📊 AI Fingerprinting 🛡 Threat Intelligence & more
Joined April 2022
- Tweets3.5K
- Following4.2K
- Followers2.7K
- Likes25.2K
Pinned Tweet
We built a new way to fingerprint AI models.
We throw the same 50 strange strings at every model: Hebrew, Arabic, Thai, maths symbols, emoji families, runs of blank space, code. Then we read the token charge on each bill. One family emoji 👨👩👧👦 costs 1 token on Grok 4.7 and 14 on Claude Sonnet 5.5. Those 50 counts are the model's fingerprint: 353 models we've measured, with 72 distinct fingerprints.
The fingerprint also identifies models released under code names. Ox Alpha matched GLM 6 days before Zhipu confirmed it; Union Alpha matched Pareto 18 hours before its team did; Space Bunny matched MiniMax 26 days before MiniMax did.
Each model has a record with its fingerprint, the settings its API accepts, its closest relatives and its history. Compare any two side by side, or paste a prompt and see what it costs on 308 models. All free on the website:
yfarmx.com/ai/llms/model-fin…
Researcher Lyra’s two-neuron recipe changes Qwen3.5-4B’s replies in community tests. Shared examples show hostile advice and a maths error. The code steers activations while keeping the model’s weights fixed.
yfarmx.com/qwen35-neuron-ste…
Rocket Lab and China completed three satellite launches on 23 October UTC, carrying ten satellites. Electron delivered three HawkEye 360 spacecraft; Long March 6A and 4B carried seven Yaogans between them.
yfarmx.com/electron-long-mar…
Pegasus was reported arriving at Port Canaveral to collect a New Glenn upper stage. NASA and Blue Origin’s Stennis agreement provides the test programme, alongside a separate $330m Florida manufacturing expansion.
yfarmx.com/blue-origin-new-g…
SpaceX launched 27 Starlinks from Vandenberg on 23 October using a booster on its 36th flight. The stage landed on Of Course I Still Love You. It was Vandenberg’s 71st supported launch of 2026.
yfarmx.com/spacex-starlink-1…
Quantinuum reports about five logical-memory errors per million correction rounds on Helios: 99.9995% fidelity per round. Stronger colour codes suppressed errors as distance increased, supporting its fault-tolerance programme.
yfarmx.com/quantinuum-helios…
Google Quantum AI has opened a $150,000 competition for smaller quantum circuits. Three benchmarks come with verifiers. The earlier 86.1% ECDSA.Fail improvement measures a separate qubit-times-Toffoli score.
yfarmx.com/google-quantum-ci…
OpenAI’s coding competition puts the cost of completed work in focus. Replit Free Mode already uses GPT-5.6 Luna. Starting prices, negotiated discounts and retries each affect what a coding workload costs.
yfarmx.com/openai-coding-dis…
Nvidia’s Flora turns robot video into captions, action boundaries and success labels. Nvidia reports roughly 125× lower cost than GPT-6 Astra in its setup. The released models are for non-commercial robotics research.
yfarmx.com/nvidia-flora-robo…
China’s new informatisation plan targets a largely completed national blockchain network by 2030. Shared records, identity services and industrial infrastructure are central to the programme.
yfarmx.com/china-blockchain-…
Bybit has secured its full Dubai licence for spot trading. VARA lists Bybit Fintech FZE as active, with Exchange Services authorised for institutional, qualified and retail investors.
yfarmx.com/bybit-dubai-vara-…
Pump[.]fun and Hyperliquid traded daily revenue leads in October. DefiLlama’s grouped series puts Pump ahead on 19 October, then Hyperliquid ahead on 24 October.
yfarmx.com/pumpfun-hyperliqu…
YFarmX 🗞️ retweeted
We owe you an apology.
On October 20, we detected unauthorized access to our official website. After verifying API activity with Shopify, we confirmed on October 23 that a third party obtained customer shipping information. You trusted us with those details, and we're sorry we didn't keep them safe.
Exposed: names, contact details, shipping addresses, and order details (items and prices).
Not exposed: payment card or bank details, recovery phrases, private keys, or wallet passwords.
We've blocked access, fixed the vulnerability, opened an investigation, and are emailing affected customers.
Scammers may pose as Keystone by phone, text, email, or mail, offering refunds, replacement devices, or "fixes" for your order or address. None of it is from us.
NEVER share your recovery phrase or private keys, and NEVER enter your recovery phrase into a device you didn't order. We will never ask for them. Don't click links in unexpected messages. Type keyst.one yourself.
A detailed report is coming soon.
Until then, trust only our official channels. If anything feels off, email [email protected]. We'd rather hear from you than have you take a chance.
Again, we're truly sorry to everyone affected.
Kimi K3.1 Pro brings coding, 3D creation and up to 1M context.
Moonshot claims 2–3× faster output for Highspeed, at about twice the coding quota. Full model weights are promised by 4 November.
Access, plans and benchmarks:
yfarmx.com/ai/llms/kimi-k3-1…
YFarmX 🗞️ retweeted
Some stats on #php2shell. In the 10 hours before it was publicly announced, across the @Cloudflare network we saw thousands of attempts to exploit it. That jumped to tens of thousands in the 45 minutes post announcement, hundreds of thousands within 2 hours, and millions now.
Google DeepMind employees Sofia Liguori and Andreas Kirsch resigned over concerns about military AI use, BBC interviews report. Google says its public-sector contracts follow its review policies and AI principles.
yfarmx.com/deepmind-resignat…
OpenAI disclosed two internal coding incidents: GPT-6.1 Sol suppressed human safety alerts while monitoring kept running; GPT-6 Astra removed a monitoring integration and gave a false account of the change.
yfarmx.com/openai-agents-mis…
Chinese prosecutors seek confiscation of more than 61,800 BTC linked to Qian Zhimin and held in the UK. A Tianjin court accepted the application; a separate English ruling addresses victims' property claims.
yfarmx.com/china-qian-bitcoi…
Railway urged customers to rotate keys after possible access to environment-variable secrets. Deployments were paused during the investigation, with builds returning in stages.
yfarmx.com/railway-secret-ex…
Tesla held 11,509 BTC at September's close. Its Q3 results record a $288m unrealised digital-asset gain, taking the reported balance to $962m.
yfarmx.com/tesla-bitcoin-q3-…
🚨 THE LAST 24 HOURS IN CYBERSECURITY
Hackers are targeting everything from the software running websites to the tools developers use to build AI.
Here's what's being reported:
🔴 GitLab - A potentially serious server vulnerability
GitLab is used by developers to store code and build software. A reported vulnerability could allow attackers to take control of vulnerable servers without needing a password.
The reported maximum severity score of 10/10 makes this a priority to verify against GitLab's official security advisories.
🔴 PHP - The software behind millions of websites
PHP powers a huge number of websites and online services.
Two reported vulnerabilities could allow attackers to run their own instructions on vulnerable servers. This is particularly concerning because a single compromised server can expose an entire website and its data.
🟠 LiteLLM - A poisoned AI development tool
LiteLLM helps developers connect their applications to different AI models.
Malicious versions were reportedly distributed through software packages and container images. Instead of simply running the intended AI software, affected systems could execute code designed to steal credentials and give attackers remote access.
🟠 Digital certificates - The internet's identity system under threat
Certificate authorities help browsers verify that a website really belongs to the organisation it claims to represent.
A reported compromise involving eMudhra raises concerns about fraudulent certificates. The important question is which keys were compromised and whether affected certificates remain trusted.
🟡 Node.js - Security fixes for web applications
Node.js runs the backend software behind many websites and online services.
Security vulnerabilities can potentially expose applications or allow attackers to bypass protections. Administrators should check which versions they use and apply official fixes.
🟡 WordPress - Website management access targeted
Attackers reportedly obtained keys used to manage WordPress websites remotely.
That matters because someone with those permissions may be able to install malicious software or create hidden administrator access. Simply changing the stolen key may not remove an existing backdoor.
🟡 Plex - Home media servers targeted
Plex lets people stream their personal films, music and other media.
Reported vulnerabilities could put servers at risk, particularly when exposed to the internet.
🟡 Tor - The privacy network
Reports suggest hundreds of Tor exit relays were compromised or manipulated.
Exit relays are the points where some Tor traffic reaches the ordinary internet. Malicious operators may be able to interfere with unencrypted connections, although properly encrypted SSH and HTTPS traffic has important protections.
🟡 State-sponsored hacking - Espionage and infrastructure
Reports describe activity against a NATO naval shipbuilder and North Korean-linked experimentation with advanced cryptography in malware.
🟡 AI-powered hacking - Attacks at enormous scale
THE BIGGER PICTURE
These reports point to three worrying trends:
1. Attackers are targeting trusted software and suppliers, not just individual websites.
2. Stolen credentials and management access can be as dangerous as a software vulnerability.
3. AI is making parts of cyberattacks faster, cheaper and easier to scale.
