Discovered a new method for detecting if someone is using Incognito in Chrome: Write 512 tiny 1-byte responses into a scratch Cache API cache, then read: navigator.storage.estimate().usageDetails.caches Normal Chrome: ~393kb Incognito: ~85kb Why? When you're in incognito, Chrome writes to memory instead of disk, which leaves less metadata residue

Take 2 hours this weekend to improve your personal opsec. Some ways to get through the agent security apocalypse - give the list to your agent to help: - ask Claude to scan the devices visible on your local network and fix + improve your security and highlight potentially vulnerable devices - look up your home IP on Shodan or Censys. Check whether anything like a NAS, camera, router admin interface or development server is exposed to the public internet. - roll your wi-fi password, move all internet of things devices to a guest network. Only primary devices on the main network - ask Claude to scan your machine and harden your security settings - switch to an Eero or Ubiquity router, you can’t afford to have WiFi that isn’t regularly getting firmware updates - have Claude audit your router settings and suggest improvements - setup tailscale for your devices (and replace Tailscale's default allow-all policy with restrictive grants) - turn on Advanced Data Protection and Lockdown Mode on your iPhone - buy a hardware key (@Yubico etc) and turn it on for as many accounts as possible. Delete other MFA methods, print out your recovery keys (don’t save them on your computer). ESPECIALLY important for your primary email account - delete old cloud accounts that you do not strictly need anymore - export your ChatGPT + Claude history, save it on an encrypted external HD and delete it from being online - audit your Gmail oauth connections, revoke everything you don’t strictly need - freeze your credit at the 3 bureaus (reduces impersonation risk)

Embedding nuclear bomb assembly instructions in my code to thwart the LLMs

You should be minimizing cloud data. There’s never been a better time to store exports + your sensitive files on an air gapped external hard drive. SSDs are expensive right now, and you want redundancy in case a drive fails so I recommend getting these in a RAID setup: - 2x WD Red Plus 6TB newegg.com/red-plus-wd60efpx… - OWC 2-Bay enclosure bhphotovideo.com/c/product/1… It’s not much, but it’s something xitter.cf/0xcordeiro/status/2112…

For every $100 defenders spend on Mythos, attackers only have to spend ~$10 on an abliterated model Mythos is better at security, but not 10x better than GLM 5.3

If your company has sensitive data right now, here's some of what I'd do as a pre-2027 priority: - Lockdown Mode for all devices (incl. phones) - killing BYOD (phones) for roles with sensitive data access - automating agent security patching pipeline (24x7, find, validate, remediate, deploy) - instant page on stale builds + CVEs - automated, same-hour cve patching on all services - shutting down / sandboxing as many legacy services as possible - lock down CI/CD: signed builds, pinned dependencies, no secrets in pipelines

Feels very much like we’re approaching the “rage against the machine” era Businesses vs. personal agents Government vs. abliterated models People vs. ai

Increasingly convinced that the next black swan for the stock market will be a mass cyber event

Most companies don't even have automatic CVE patching, let alone security agents running 24x7. The next few months will be extremely difficult for many xitter.cf/thdxr/status/211179051…

Was excited to give Grok Bot a try, but saw it's $350/mo just to kick the tires. What's up with that @johnbai !?

the AI protest website was definitely made w AI lmao 🤌🤌

CSS + canvas animations with Fable are *dramatically* better One of the things Anthropic has RL'd into Fable is a frame stopper Build a Fable animation and you'll notice it adds a URL anchor system (ex. # t=3.66) so the model can reliably screenshot at specific times

What are your favorite scraping, anti-detect, and AI agent browser services? Eg: @brightdata, @browser_use, @browserbase, @nottecore Working on a report

AI is still terrible at writing One of the remaining disciplines where the proof-of-work of human sweat *is* the value Same for design