
I love computers, cats and candy, in no specific order. Mastodon: @mbh@infosec.exchange Signal user: xul.01
Joined December 2010
- Tweets94.5K
- Following989
- Followers1.9K
- Likes9.6K
MBH retweeted
‼️ Apps built with the AI app-maker Lovable left passport numbers, payment information and 200,000 chat messages open to anyone, no login needed.
German security firm Crissy Field scanned 159,041 Lovable projects and found databases with email addresses readable on 7,403 sites.
Lovable promises no coding skills are needed. Its terms make customers responsible for their apps and data.
Lovable told German business daily Handelsblatt the problem is industry-wide.
MBH retweeted
Revolut CTO got costs down to 30 cents every million tokens using self-hosted open-source GLM model @ 1/10th the cost of using OpenAI/Anthropic
Btw there is also a AI Engineering YT talk vid Posted 4 days ago where David Abitbol, using data from 2000 engineers talks bout 60-70% faster delivery @ a tenth of labs cost.
He covers GPUs needed, latency targets , tuning that made the hardware 88% faster, and how it’s EU-compliant.
youtu.be/Ok6QdZHCcI8?is=5QQD…
Interesting.
Revolut reportedly only started seeing meaningful AI productivity gains after moving away from expensive OpenAI and Anthropic models to self-hosted GLM.
Decagon reportedly runs ~90% of its workloads on open weight models.
Why? Because when you're running AI agents in production for e.g. customer service, cost and latency matter enormously. You don't need a frontier model with PhD-level reasoning or even a model that knows the capital of Finland to handle every customer interaction.
We're seeing similar dynamics across hypergrowth AI startups and increasingly the large enterprises we work with.
But most importantly, the future isn't binary.
When use cases are new, you want the smartest general-purpose model available. But once workflows mature and become predictable, smaller, faster, specialized models increasingly win.
I wouldn't be surprised if 80–90% of routine enterprise AI workflows eventually run on open-weight and smaller models.
This doesn't mean frontier labs lose.
It means the market is splitting into two massive opportunities: frontier intelligence and specialized execution at scale.
This guy found the exact location of a video based on inaudible background sounds.
This is now the second tweet ive made on this guy where im in utter shock at his guys OSINT abilities, @colsto_ is an absolute wizard.
He was given the task to find the location of a blurry video of a tree (image below). He ended up finding the exact location because of the doppler curve and noise frequencies of two planes that flew above the camera. He mapped out every flight for the day, and what their doppler curve would look like based on different factors and how loud the plan would be to a certain point.
Everyone please go watch this video, its fucking unreal.
Go show love to my boy.
youtube.com/watch?v=UytYrhYL…
MBH retweeted
BREAKING: Shocking footage is now coming out from near Kyiv where locals found a basement where 40 mobilized Ukrainians where tortured by the Ukrainian National Guard including teenagers.
Protests have erupted and have begun throwing eggs and demanding answers from authorities.
MBH retweeted
BREAKING: Learjet victim Adam Robinson’s firm supplied tracking software to Tucker Carlson’s Daily Caller
Adam Robinson, the technology entrepreneur killed alongside eight others in Sunday’s Learjet 60 crash in Palm Beach County, had a documented business connection to The Daily Caller, the conservative news outlet co-founded by Tucker Carlson.
A July 2020 investigation by Jezebel revealed that Robinson’s company, GetEmails, supplied technology capable of identifying anonymous website visitors and matching them to names, email addresses, and physical addresses. Investigators confirmed The Daily Caller was using the software through website-code analysis, while Robinson himself identified the publication as a prominent customer.
The technology raised significant political privacy questions because it could allow ideologically aligned publications to identify and directly contact previously anonymous readers.
The connection establishes Robinson’s commercial involvement in conservative political media infrastructure.
The broader question is how extensively Robinson’s associations and companies serve as motivation.
This comes amid explosive allegations by Carlson that Netanyahu is lobbying Trump to nuke Pickaxe Mountains in Iran where nuclear facilities are repeatedly used.
MBH retweeted
Adam Robinson died Sunday in a jet crash with his wife and two little kids.
He built tools that take an anonymous visit to a website and turn it into a real name and contact info. His company kept a digital file on people.
That's the raw material of a surveillance state. Data like this doesn't stay in marketing. It gets bought, merged, and fed into the same systems that track where you go, what you read, and who you are.
But he did it differently. He bootstrapped everything. He never took big VC money, and there was no board pushing him to grow the data as fast as possible or sell to someone bigger. He kept his companies lean and profitable, so he got to decide how far the data went, who got it, and under what rules.
Most founders in this space lose that option once the money comes in.
A surveillance state runs on cheap, easy access to personal information. It doesn't love founders who can say no and stay independent.
Who controls these companies matters more than people realize. When the founder still has control, the limits stay tight. When he doesn't, the data flows wherever the power wants it.
MBH retweeted
深圳认识一个做亚马逊的狠人,一年净赚四百多万!!🤯🤯🤯🤯🤯🤯🤯🤯🤯🤯🤯
他不卖手机,不卖衣服,专门卖美国人家里坏掉的小零件。比如冰箱抽屉卡扣、洗碗机滑轮、烤箱旋钮里面的塑料齿套。
国内工厂几块钱一包,他打包成维修套装,敢卖到大概两百多人民币。
我说你这不是抢钱吗?他直接打开美国维修公司的报价单给我看。修一次洗碗机,上门人工费就要一千多。人家花两百多买个零件,自己十分钟装好,反而觉得捡了大便宜。
最绝的是,他根本不跟大卖家抢热门产品。每天就研究美国人抱怨什么坏了、原厂停产了、配件买不到了。一个冷门型号可能只有几千个人需要,但他手里有几百个这样的型号。
我当时听完就服了。
中国人做电商,天天研究怎么把一百块的东西卖到八十块。这帮人研究的是,怎么把三块钱的东西,卖给那个愿意花三百块解决问题的人。
真正值钱的不是产品,是别人解决不了的麻烦。
بقاعه اختبار الميدتيرم اول مادشينا الدكتور قالنا الكل يحط تلفونه وجنطته على طاوله الدكتور واول ما بدينا نختبر قاعد يعطينا تعليمات الاختبار ممنوع الغش وممنوع مساعده الاخرين ولا فجاه وحده يتكلم تلفونها gpt بصوت عالي هل تريدني مساعدتك في غش الاختبار حاطه تلفونها بحضنها الكلاس صار صمت والدكتور مصدوم متتتت متتتتت من الضحك حتى بنات الكلاس ماتحملو وماتو ضحك مستحيل اتخطى😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭
MBH retweeted
Elon Musk took a $40,000 username from a guy who had owned it for 16 years.
He paid him absolutely nothing.
Not even a dollar.
Instead, he was offered a T-shirt and a tour of Twitter’s headquarters.
This is the story of Gene X. Hwang the first @X username
2007
- photographer from San Francisco
- co-founder of Orange Photography
- registers @x on Twitter
- keeps the username for 16 years
over the years
account grows to ~53,000 followers
receives offers of up to $40,000 for the handle
But he refuses to sell
2014
- hackers steal his x account
- Twitter helps him recover it
July 23, 2023
- Elon Musk announces Twitter will become X
- Gene is in Canada playing in a pinball tournament
He has no idea what’s coming
July 25, 2023
- Twitter officially becomes X
- the company wants x
- Gene receives an email from Twitter support
“Your user handle is affiliated with X Corp.”
his username is taken and gets a new one @x12345678998765
what X offers him
- company merchandise
- exclusive tour of X headquarters
- meeting with the management team
$0.
Gene even asks if he can have the old blue Twitter bird sign being removed from headquarters.
they say no.
October 2025
X launches its Handle Marketplace
rare usernames can cost $2,500 to over $1 MILLION
users must maintain a paid subscription
lose the subscription, potentially lose the handle
the same company that took x without paying its owner now charges people for access to rare usernames.
16 years building an identity.
$40,000 in offers rejected.
and all he got was an offer of merchandise and an office tour.
BROTHER.
MBH retweeted
Kim Yo Jong, the sister of Kim Jong Un, denies North Korea is behind the $6.3 billion Binance hack.
"The U.S. claim is preposterous nonsense."
She goes on to suggest the Trump administration itself could be responsible, citing the Strategic Bitcoin Reserve.
MBH retweeted
Miami Center warned the crew the turn to Freeport looked "pretty bad." Moderate to extreme precipitation, 25 miles out, a storm about 100 miles across. Controllers cleared them to deviate left or right.
The pilot didn't. She made a mistake that cost them their lives.
Readers added context they thought people might want to know
The female crew member on the ATC audio (Nathalia Gadelha) was the co-pilot/pilot not flying while communicating; another pilot was on the controls. The crash cause is under NTSB investigation with no official finding of error or ignored deviation.
nypost.com/2026/11/02/us-…
en.wikipedia.org/wiki/2026_Palm…
flightradar24.com/blog/flight-tr…
thetimes.com/us/news-today/…
MBH retweeted
‼️ BREAKING: Google says Android TV box maker Videostrong infected its own users and sold the access to criminals.
They built a backdoor into the firmware of 1.3M+ set-top boxes. If a user deleted it, it came back on the next reboot.
Buyers turned the boxes into residential proxies and ad-fraud bots.
Google has banned Videostrong from certified Android and says the takedown also cuts off at least 10M more infected devices.
MBH retweeted
See ad.nl/binnenland/paniek-in-o… for an example of what's ongoing in the Netherlands to scare people away from using open source privacy projects. It's also ongoing in Germany at the same time with similar talking points. This largely started in Spain and has been worst in France.
Revolut: Europe's most valuable startup ($200B) just showed the world its AI strategy.
Every company will end up copying it.
At the start of this year, Revolut leaned on the frontier labs. Its 2,000 engineers used Claude Code and Codex, and some burned $1,000 to $10,000 a month each. The bills kept climbing, and the returns weren't there.
So Revolut switched its default to an open-source model called GLM. All it needs is GPUs, which it rents from Together AI.
The results, by Revolut's own count:
- The bill is about a tenth of what it paid OpenAI and Anthropic
- Engineers get unlimited tokens instead of spending caps
- Coding time is down 60% and lead time is down 70%
That's the chart below.
Revolut still uses Claude and GPT, but only as "the exception," for the tasks they do best. Everything else runs on open source.
So here's the question I keep coming back to: how many use cases can companies really justify sending to frontier models?
My answer is very few. Plenty of companies still route everything to OpenAI and Anthropic today. For how long?
I think open source ends up handling the vast majority of corporate AI work, and frontier models get a short list of the hardest jobs. That's a problem for labs whose revenue forecasts assume unlimited growth.
If you appreciate unpopular takes, follow me @m0xt_ for more.
MBH retweeted
Binance hacker accidentally deposited $4M back into Binance deposit addresses.
Crypto is so centralized that even the North Korean state hacking syndicate cannot find an instant swap desk that isn't secretly a Binance white-label proxy.
You can rob the bank, run through ten dark alleys, kick open the door of an underground pawn shop, and find CZ standing behind the counter asking for your 2FA code.
Fucking hilarious. 😂
This quoted post is unavailable.
MBH retweeted
دعيج بتاع تيك توك مش بيضحك خالص يا جماعة،أول مرة أشوف له كذا فيديو دلوقتي،لا هو و لا الست المحترمة اللي معاه،ستايل الفيديوهات اللي بيعملوها نفس مقاطع المسرحيات السخيفة اللي فيها كام واحد من الجمهور عنده نوبة صرع من الضحك على افيهات البدانة و الطول و اللون
MBH retweeted
BREAKING: 🇸🇪 Swedish grocery giant ICA, one of Sweden's largest supermarket chains, says several of its stores have been hit by a cyberattack overnight, causing refrigerators and freezers to be remotely set to 50°C.
The incident has likely resulted in large quantities of food spoiling. Multiple stores, including ICA Kvantum in Sjöbo and Tomelilla, have reported being affected.
ICA says stores will remain closed during the morning and are expected to reopen at 9:00 a.m. Swedish time.
The company has apologized to customers and says it is working to restore normal operations.
The incident comes amid a wave of cyberattacks targeting businesses recent weeks, following similar incidents reported in France and the United States.
When the US nuked Japan, it was done in stealth bombers unannounced.
Publicly declaring nuke intentions AND specifying the location, will just trigger Iran to relocate equipment.
This game is tiring.
Under pressure from Israeli prime minister Benjamin Netanyahu, the Trump administration may be within days of launching a nuclear strike on Iran. The target would be Pickax Mountain in central Iran, where Israeli intelligence claims the Iranian government has restarted its nuclear enrichment program. No conventional weapon in the American arsenal can penetrate 300 feet of solid granite to destroy the tunnels where enrichment is supposedly taking place. The only military option is a nuclear strike. Netanyahu has been pushing hard for one. “Bibi calls Trump about it every day,” says an informed observer.
Netanyahu is cornered and desperate. After last week’s election results, he can’t form a government unless Trump intervenes directly in Israeli politics and brokers a deal with other parties that gives Netanyahu 61 seats in the Knesset. Otherwise, he is out as prime minister and on his way to ignominy, investigations and possibly jail. Netanyahu must stay close to Trump. He needs this war.
To that end, he’s applied maximum pressure to his closest allies in the administration, including Secretary of Defense Pete Hegseth and CENTCOM commander Brad Cooper. Both oppose a negotiated settlement to the war they’ve so grievously mismanaged; both are pushing to restart major combat operations. Secretary of State Marco Rubio and CIA director John Ratcliffe are also following Netanyahu’s lead, as are leaders of the Democratic Party. In a recent meeting on the subject, former president Barack Obama said he opposes the current Iran peace deal being drafted in Doha.
The rest of America’s longtime allies in the Middle East are terrified by the prospect of more war. On September 27th, Netanyahu flew secretly to Abu Dhabi to enlist the UAE in his lobbying effort for a final attack on Iran. The Emiratis refused. After eight months of conflict, Gulf economies are teetering. So are global energy and fertilizer markets. They won’t recover soon. Globally, there are a total of about 850 supertankers used to transport oil from producers to the rest of the world. In October alone, 11 of them were badly damaged in Hormuz. At this pace, a global depression is imminent. A nuclear strike would radically accelerate the destruction. Fallout from a ground explosion at Pickax Mountain would contaminate the Persian Gulf, poisoning the water supply for 100 million people.
And those are just some of the immediate consequences for the region. The rest of the world is every bit as exposed. No country other than the United States has ever used a nuclear weapon in war. Some would like to. An American nuclear attack on Iran would set a new precedent. The Russians have already told at least two other governments that an American nuclear strike on Iran would free them to use nuclear weapons against Ukraine. Pakistan and India would be tempted to do the same against each other, as would North Korea against Seoul. After the first nuclear strike, World War Three is inevitable. That war would be short and final.
We’ve been sleepwalking toward this moment for months. Since February, the administration has quietly rewritten America’s nuclear doctrine to make first use of so-called “battlefield nukes” easier and therefore more likely. No one in Washington in either party seems bothered by this. Now we’re on the brink of it.
Close observers say Trump is likely to decide by next weekend whether or not to use nuclear weapons. That would be November 7, six days from now. To his credit, he’s hesitating. At the moment, Trump is listening to his vice president, JD Vance, and to his envoy and friend Steve Witkoff, both of whom argue a deal with Iran can be made.
They’re right, though it won’t be simple. The Iranians are famously frustrating to negotiate with under any circumstances, and elements of that government have become more radical since Ayatollah Ali Khamenei and his family were killed in February. After decades of isolation, even relatively moderate Iranian leaders seem confused by how decisions are made in the West. (There is a widespread belief in Tehran, for example, that the United States government controls Israel.) But overall, people who have spoken to decision-makers in Iran say there is consensus there that more war is bad for everyone and a deal is worth making.
One group that hasn’t been consulted so far is the global population — the hundreds of millions of people who will be killed along with their children if Trump is pushed by Netanyahu into launching a nuclear strike next week. Now would be the time for them to speak up.










































