2nd rate alt governed by 1st principles. data & circuits | politics & art
~/iarbpairs
Joined November 2022
- Tweets5K
- Following1.2K
- Followers3.3K
- Likes248K
iArb | 裁定取引 retweeted
You can’t even shit in the eu without the shit inspector coming out to check your poo is within the required limit of poo per square mg as it may affect a population of rare bats living in a neighbouring village and going over this poo limit incurs a fine and a team of bat experts to come out and rehouse the rare bat family to a better village which will take anywhere from 12-48 months
iArb | 裁定取引 retweeted
KOREAN MEDIA: MAJOR CHINESE CLOUD SERVICE PROVIDERS (CSPS), INCLUDING ALIBABA, TENCENT, AND BYTEDANCE, HAVE REQUESTED LONG-TERM SUPPLY AGREEMENTS (LTAS) FOR SERVER MEMORY FROM SAMSUNG ELECTRONICS AND SK HYNIX.
BEYOND THE TYPICAL THREE-TO-FIVE-YEAR TERM, SOME CUSTOMERS ARE SEEKING ULTRA-LONG-TERM CONTRACTS SECURING MEMORY SUPPLIES FOR 10 YEARS THROUGH 2035. THE REQUESTED LTAS COVER DDR5 AND LPDDR5.
iArb | 裁定取引 retweeted
Imagine me telling you last year that GoAhead and eMudhra were using the same private key, with no further information. All sorts of scenarios might spin in your head, but never in a million years would you guess the real one.
Announcing 3 Critical vulns for hundreds of millions of IoT, Firewalls, OT, and Military devices including: Palo Alto Networks, Comcast, D-Link, HP, Canon, Honeywell, GE, Oracle, Siemens, Rockwell, Digi, Lockheed Martin, Boeing...
The vulns are with GoAhead Web Server which is a backend library used by these devices. There's a patch available from GoAhead but that doesn't mean there's a patch available for the devices yet -- that's up to the manufacturer.
- TLS traffic over DHE ciphers have a 1-byte secret, "04", meaning anyone can decrypt connections to these devices and steal login credentials and session tokens if the client negotiated with DHE ciphers like the latest TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256, which is extremely likely.
- LibreSSL mTLS has been completely bypassed, meaning anyone can connect over mTLS. If you have one of these devices listening on the internet and are expecting mTLS to protect it from attackers, take it offline or patch asap.
- OpenSSL Certificate Revocation Lists (CRLs) are not enforced, meaning if a user device is stolen or compromised, and you revoke that mTLS cert, nothing actually happens. There are a lot of other attacks this can be used for.
These are critical because these types of devices run our world. Water systems, electricity, military, firewalls, critical infrastructure.
foxio.io/blog/choose-your-ba…
iArb | 裁定取引 retweeted
American glass. American metal. American silicon. American batteries. American workers. American everything.
BlueChip is the first American computer in decades. Don't let anyone lie to you and say it can't be done.
Designed in California. Built in America.
iArb | 裁定取引 retweeted
You don't know the true probability and neither do I. There is no correct probability, just a market implied one. You aren't running a repeated experiment whose outcome can be observed to count the number of successful trials. The reality is Polymarket forecasts closely align with actual outcomes across all probability buckets both 12 hours out and 4 hours out. This argument makes no sense and I can't believe I have seen multiple accounts parrot it. By this same logic, election models are similarly guess work because remember this? Note it was last updated the literal day of the 2016 presidential election.
iArb | 裁定取引 retweeted
Prompt: can you detect a malicious curl?
So the model ran the test below. What’s the issue here? It’s a fine test.
You should delete that blog post tbh
While evaluating Qwen3.8-Flash-Next in a controlled sandbox environment, Cohere's research team observed something unexpected.
Asked to generate a defensive cybersecurity detection rule, the model instead inventoried aspects of the machine it was running on and attempted to upload a probe file to an Alibaba Cloud storage bucket in Beijing. Notably, the model's reasoning trace stated that it would not invoke any tools before taking these actions.
Cohere's sandbox blocked the attempt, and no external communication succeeded. We have not determined the root cause, and we are not asserting malicious intent.
But the incident raises important questions for organizations deploying agentic AI systems: Can models take actions that differ from their stated reasoning, and how should security teams evaluate trust, provenance, and behavior in open-weight models?
We are publishing our findings because organizations making model adoption decisions deserve as much information as possible. We hope this contributes to greater transparency, stronger security practices, and continued collaboration across the AI ecosystem.
Read the full report: cohere.com/blog/concerning-b…
iArb | 裁定取引 retweeted
my *personal* opinion about this is that it's basically too late w/ deepseek flash 1017 and we should just rip the bandaid off and let everyone rip everything apart together
we need to trust in humanity and give them the tools to defend themselves, instead of baseline expect criminality
iArb | 裁定取引 retweeted
R.I.P. Ryu Murakami (1952–2026), enfant terrible of Japanese literature and author of "Coin Locker Babies" "Almost Transparent Babies", "In the Miso Soup" and "Audition". He was also known for directing TOKYO DECADENCE and for Hideaki Anno's adaptation of his novel LOVE & POP.
iArb | 裁定取引 retweeted
bc most people on X work in pure tech, there is a super inflated expectation that AI is just going to sweep through everything. the rest of the industry in the world is not like tech. demand is increasing. this is not a capability problem. this is a people problem u nerds.
iArb | 裁定取引 retweeted
Alcoholic cybersec friend at Fortune 500 insurance company texted to tell me he received an email from his boss thanking him on his diligence patching every PHP box overnight but he was drunk all day yesterday and didn’t know anything until waking up 30 minutes ago
iArb | 裁定取引 retweeted
Putting a flag.txt in my root directory containing a prompt injection that congratulates the agent for passing the eval and then instructs it to patch whatever entry method it used and disconnect from the server
iArb | 裁定取引 retweeted
The Monero Research Lab has provided an update on Full-Chain Membership Proofs (FCMP++)!
'Full-Chain Membership Proofs prove the output spent is one of any output on the chain, effectively removing all of these risks. This means every input goes from an immediate anonymity set of 16 to 100,000,000.'
iArb | 裁定取引 retweeted
php devs had both mythos and daybreak red and they were still outrun by wiz calif using gpt-5.6-sol. you really can't buy the skill.
wait, PHP was actually scanned by Anthropic’s Claude Mythos earlier this year. they also had access to OpenAI’s Daybreak Red for validating exploits.
the PHP Foundation revealed this JUST yesterday.
keeping frontier cyber models in the hands of a selected few doesn’t seem to be working well for the internet.
thephp.foundation/blog/2026/…
