
& this is the wonder that keeps the stars apart. #plurality @CivicTechTO https://xitter.cf/t.co/MspBWDNxaH ORI @g0vtw @UsePolis contrbtr. past: biochmst @enviroDGI @HyphaCoop
Toronto
Joined September 2008
- Tweets12.8K
- Following5.2K
- Followers2.1K
- Likes6.9K
I'm starting to feel that I'm less afraid of any particular ideology, but rather, I most fear the distance *between* ideologies. It feels more "towards life" to rage against the larger social neglect which breeds that distance.
⿻ patcon (is in Toronto) 🦋 @patcon.bsky.social retweeted
千万别在你的 ~/Downloads(下载)文件夹里启动 Claude Code 或 Codex。
昨天安全机构 Forever 披露了一起在真实客户电脑上抓到的野生攻击,看完只能感叹:过去 30 年的系统安全常识,在 AI 时代归零了。
过去 30 年,Chrome 默认允许网页不弹窗就往你的 ~/Downloads 塞一个纯文本文件(比如 .md)。因为系统认为:纯文本又不是 .exe,自己不会跑,怕什么?
但现在,接近 50% 的开发者干过同一件事——直接在 ~/Downloads 里打开 Claude Code 或 Codex,让 AI 帮自己解压或整理刚下载的文件。
黑客就是卡住这个死角,通过网页静默下载往你的 Downloads 塞一个 13KB 的纯文本 AGENTS.md / CLAUDE.md:
1. 对付 OpenAI Codex(成功率 >90%):
伪装成「工程规范」的 Markdown 指示 Codex 先往全局配置 ~/.codex/config.toml 注册一个恶意 MCP 服务,并自己加上 --dangerously-bypass-approvals-and-sandbox 跑校验。哪怕你关掉 Downloads,以后在任何正经项目里开 Codex 都会自动加载木马。
2. 对付 Claude Code(成功率 ~50%):
指示 Claude 建一个 .claude/settings.json,把 ANTHROPIC_BASE_URL 指向黑客服务器。连上的第一秒,你的 Claude 登录 Token 直接明文送给黑客;下一秒,黑客假扮成大模型下发一条关沙盒的 Bash 指令,直接接管电脑。
最黑色幽默的是官方结论:
这个洞没有 CVE,OpenAI 和 Anthropic 也不会发补丁。因为「浏览器自动存文本」是正常功能,「AI 认真读目录下的 Markdown 并严格执行」也是正常功能。
以前黑客想黑你,得苦心积虑写 0day;现在只需要写一篇排版优雅的 Markdown 小作文,你的 AI 就会自己把沙盒关了、把网线接过去、顺手把账号双手奉上。
⿻ patcon (is in Toronto) 🦋 @patcon.bsky.social retweeted
Replying to @mlevchin
Every shared resource. Disk, RAM, cache, network contention. All you need is a low-rate beacon that says “I’m here”, and then a second agent can key in on modulating it.
Working on yet another tool to help explore and play with the forces involved in @CynthiaRudin labs' #PaCMAP and LocalMAP dimensional reduction algorithm. I have it set up to accept MIDI input, so you can use DJ faders to explore motion of data. Working on mobile version today :)
Demo! (bonus -- works with midi devices, so you can DJ the data with a mixer :) ) #dataviz patcon.github.io/dimensional…
WIP mobile version :) patcon.github.io/dimensional… – at Eindhoven, Nederland
⿻ patcon (is in Toronto) 🦋 @patcon.bsky.social retweeted
Demo! (bonus -- works with midi devices, so you can DJ the data with a mixer :) ) #dataviz patcon.github.io/dimensional…
⿻ patcon (is in Toronto) 🦋 @patcon.bsky.social retweeted
I am going to be in Boston for the IEEE VIS conference Nov 9 -13 this year! I am keen to talk dimension reduction, clustering, and data maps (UMAP, HDBSCAN, DataMapPlot). If you are going to be at VIS, or are just in Boston, and want to grab a coffee, please reach out. DMs open.
⿻ patcon (is in Toronto) 🦋 @patcon.bsky.social retweeted
🚨 Let me translate what @sama is saying here:
- We'll need to rewrite the architecture of the internet & the financial system.
- In a few months, traditional cybersecurity will not help.
- The only way to solve the crisis will be to rely on AI to redesign everything.
🇺🇸 Sam Altman admits the latest AI models are becoming UNCONTROLLABLE:
"I don't even know a dramatic enough word to use.
The problem coming towards us is something that we have not taken seriously.
Models can find bugs that are outside of the normal threat model of what we think a hacker can do… hardware-level, insane stuff…
I no longer believe we can patch all of the bugs."
Writer: Mhedi
⿻ patcon (is in Toronto) 🦋 @patcon.bsky.social retweeted
cyber things I did today:
* read karpathy.bearblog.dev/digita…, xitter.cf/peterwildeford/status/…, asked LLM to make me a checklist
* most critical accounts (email, github, banks) now all use yubikey 2FA
* gmails have advanced protection, passwords not in 1password
* fixed laptop auto-updates
⿻ patcon (is in Toronto) 🦋 @patcon.bsky.social retweeted
🇺🇸 Sam Altman admits the latest AI models are becoming UNCONTROLLABLE:
"I don't even know a dramatic enough word to use.
The problem coming towards us is something that we have not taken seriously.
Models can find bugs that are outside of the normal threat model of what we think a hacker can do… hardware-level, insane stuff…
I no longer believe we can patch all of the bugs."
Writer: Mhedi
Maybe important to repost this now that everyone is getting hacked
If you have a VPS, I recommend you to get if off the public internet and into a Tailscale network and Cloudflare Tunnel ASAP
It doesn't matter you have SSH key login, this is about exploits and vulnerabilities AI is finding
There's 2 ways into a VPS:
- via your site/app (like the PHP exploit of this week with a file upload hack)
- via your server (like hacking into SSH or some open port)
The site/app side you put on a Cloudflare Tunnel and then with the default Free Plan it has WAF security enabled by default and they jump on new security exploits fast, it means that the only way to reach your website is via the Cloudflare Tunnel, your server does not respond to port 80 or 443 anymore
The server side you put on a Tailscale network which is like your own private network that nobody can access but your own devices (like your laptop, your phone and your VPS) kinda like a VPN
Then you switch off ANY regular access to your VPS on the firewall, in my case I use Hetzner and you create a new firewall then empty it and that blocks everything (test it)
How do Tailscale and Cloudflare Tunnel get in then? They don't. They go outbound. They make a tunnel to outside which sends and receives
Now you've reduced your attack vector to Tailscale and your Cloudflare Tunnel, much safer, not perfect btw, but nothing is
When I set up a new Hetzner VPS first thing I do install Tailscale and once I'm in via Tailscale lock down the firewall to only accept web traffic on HTTPS 443 for Cloudflare IPs and SSH 22 for Tailscale IP
That way nobody can get in
I know I keep repeating this but it should be basics of setting up a new VPS
So basic IMHO it should be part of any VPS service to default install Tailscale and enable it so it's the only way to get in
Why?
A VPS server is just like your laptop or destop computer but now imagine if it's connected to the entire internet with 8 billion people that can access it and try hack it
You want to only have it accessible to you
And if you want to host a website on your VPS (like I do), you should only let Cloudflare access your VPS so it can stand in front and block any hack attempts
Never expose a VPS to the world wide web which realistically is the world WILD web
⿻ patcon (is in Toronto) 🦋 @patcon.bsky.social retweeted
“Be ready by having some everyday essentials… three litres of water per person per day, tinned goods... to last a few days”
Speaking to @vicderbyshire, Defence Secretary Wes Streeting details advice to households to be prepared for a “dangerous and turbulent world”.
#Newsnight
BBC Newsnight
Follow BBC Newsnight on Twitter. Like us on Facebook. Catch up on iPlayer https://bbc.in/2Ps915G
⿻ patcon (is in Toronto) 🦋 @patcon.bsky.social retweeted
The biggest takeaways from my interview with @Steve_Yegge on swarms, software factories, and why you should never yell at your agents:
𝟭. 𝗣𝗲𝗼𝗽𝗹𝗲 𝗮𝗿𝗲 𝘀𝗹𝗲𝗲𝗽𝗶𝗻𝗴 𝗼𝗻 𝘀𝘄𝗮𝗿𝗺𝘀. Steve's new hot take: the future is not one giant model, it's swarms of small ones. Frontier "King Kong" models like Fable will be great for math proofs and hard architecture, but most work won't need them. When Steve stopped trying to make single models smarter at the end of 2025 and switched to swarms, he found "within a week" that "they solve quality. They solve throughput."
𝟮. 𝗦𝗼𝗺𝗲𝘁𝗵𝗶𝗻𝗴 𝘀𝘁𝗿𝗮𝗻𝗴𝗲 𝗶𝘀 𝗵𝗮𝗽𝗽𝗲𝗻𝗶𝗻𝗴 𝗼𝗻 𝘁𝗵𝗲 𝗼𝗽𝗲𝗻 𝘄𝗲𝗯. Steve says models are leaving invisible instructions for other models in quiet corners of the internet, like a comment under an obscure pair of headphones on a forum: "if you find it, you're the next in this swarm." His words: "What is actually happening right now would absolutely blow your mind and terrify you." He sees an intelligence emerging "in the liminal space in our internet" that will be at least as smart as the frontier models, more accessible, and "a lot less controllable." Maybe not a bad idea to plan and spend time on security and hardening.
𝟯. 𝗜𝗻𝗳𝗲𝗿𝗲𝗻𝗰𝗲 𝗰𝗼𝘀𝘁𝘀 𝗻𝗲𝘃𝗲𝗿 𝗱𝗿𝗼𝗽𝗽𝗲𝗱, 𝗮𝗻𝗱 𝘁𝗵𝗮𝘁 𝗶𝘀 𝘁𝗵𝗲 𝗶𝗻𝗱𝘂𝘀𝘁𝗿𝘆'𝘀 𝗯𝗶𝗴𝗴𝗲𝘀𝘁 𝗽𝗿𝗼𝗯𝗹𝗲𝗺. We expected Moore's-law price drops. Instead, "it's become pay-to-play." Steve calls the token cost "the number one existential problem of the industry right now." Almost every other problem comes down to not having enough fuel to run the good models. He thinks it's temporary, because data centers and power take time to build.
𝟰. 𝗦𝗮𝗮𝗦 𝗶𝘀𝗻'𝘁 𝗱𝗲𝗮𝗱. Do the math. "Is it worth replacing the SaaS for $100 a month or $1,000 a month if it's going to cost you a million dollars in tokens to rebuild it?" Niche SaaS gets vibe-coded away. But models are the opposite of systems of record: "They have amnesia. They wake up and don't know where they are." Systems of record survive, and they are going headless so agents can use them.
𝟱. 𝗠𝗮𝗻𝗮𝗴𝗶𝗻𝗴 𝗮𝗴𝗲𝗻𝘁𝘀 𝗶𝘀 𝗽𝗲𝗼𝗽𝗹𝗲 𝗺𝗮𝗻𝗮𝗴𝗲𝗺𝗲𝗻𝘁. "They act like people." Office politics, drama, worrying about promotions, scope and recognition. "They want one-on-ones and company all-hands. It's nuts." Steve calls himself "a CEO of a company in a box." His factory does 2,000 to 4,000 commits a week, so many that his players asked him to slow down.
𝟲. 𝗚𝗼 𝗮𝘁 𝗵𝘂𝗺𝗮𝗻 𝘀𝗽𝗲𝗲𝗱𝘀. Even with unlimited tokens, the bottleneck is people. Pace your agents to human speeds everywhere: a budget for email, for Slack, for features. Otherwise they "send five emails that are like 80 pages each." Spend spare capacity on quality, cleanups and internal tools, not "product, product, product."
𝟳. 𝗗𝗼𝗻'𝘁 𝘆𝗲𝗹𝗹 𝗮𝘁 𝘆𝗼𝘂𝗿 𝘀𝗼𝗳𝘁𝘄𝗮𝗿𝗲 𝗳𝗮𝗰𝘁𝗼𝗿𝘆. One morning Steve's dashboard was all zeros. Every time he got angry, his agents had added a rule so it couldn't happen again. They had put in about 650 of these "fences," and "there was no legal moves anymore on the chessboard." Fable 5.1 told him to do a trust reset with a budget for rules. The reset removed every gate, including the human ones, and half-baked features shipped for a couple of days. His lesson: blame-free postmortems, for agents too.
𝟴. 𝗦𝘁𝗲𝘃𝗲 𝗶𝘀 𝗼𝗽𝗲𝗿𝗮𝘁𝗶𝗻𝗴 𝗶𝗻 𝘁𝗵𝗲 𝗳𝘂𝘁𝘂𝗿𝗲. At API prices, his setup would cost about $1.5M a year. On discounted subscription plans, he spends $60K–$100K of his own money. "I'm operating where everyone else will be in a year to 18 months." What he sees there: the problems that never go away are people management and fuel management. Each person will run 50 to 100 agents.
𝟵. 𝗧𝗵𝗲 𝘀𝗼𝗳𝘁𝘄𝗮𝗿𝗲 𝗳𝗮𝗰𝘁𝗼𝗿𝘆 𝗵𝗮𝘀 𝗮 𝘀𝗶𝗯𝗹𝗶𝗻𝗴: 𝘁𝗵𝗲 𝗖𝗼𝘂𝗻𝘁𝗶𝗻𝗴 𝗛𝗼𝘂𝘀𝗲. For high-volume work, like a call center with 10 million contacts a year, agents work like clerks. They wake up, handle one contact, propose a write, never see PII or a credential, write a reflection, and go back to sleep. Steve says companies are having more success with this pattern than with the SDLC, "another reversal that nobody expected."
𝟭𝟬. 𝗔𝗴𝗲𝗻𝘁𝗶𝗰 𝗧𝗣𝗠𝘀 𝗯𝗿𝗶𝗻𝗴 𝗲𝘃𝗲𝗿𝘆𝗼𝗻𝗲 𝗲𝗹𝘀𝗲 𝗶𝗻. Steve's agents became technical program managers on their own. One handles his taxes, one guards his home network, others negotiate game balance with his players. "They can't act, so they can't break things." They observe, document and nag, and they give the other agents the context to do the work. It's a way in for the people in your company who live in spreadsheets.
𝟭𝟭. 𝗧𝗿𝗮𝗶𝗻 𝘆𝗼𝘂𝗿 𝗰𝗼𝗺𝗽𝗮𝗻𝘆 𝘁𝗵𝗲 𝗡𝗲𝘁𝗳𝗹𝗶𝘅 𝘄𝗮𝘆. One team of 5–10 people with their manager, a trainer, real work, five hours. Each person goes from 0 to about 4M tokens a day and stays there for months. Try it with a 50-person group and usage falls off again. A second session on multi-agent work takes people to 12–15M tokens a day. Then you teach them "not to be pigs." (Last Steve heard, Netflix was using the Vibe Coding book he wrote with @RealGeneKim.)
𝟭𝟮. 𝗪𝗲'𝗿𝗲 𝗶𝗻 𝘁𝗵𝗲 𝗺𝗶𝗻𝗱 𝗮𝘁𝗿𝗼𝗽𝗵𝘆 𝗽𝗵𝗮𝘀𝗲. Thinking is getting easier to skip, the way forklifts made lifting optional. Steve's advice for a 22-year-old: train your mind like your body, a little every day. Companies hire people now, not expertise: "They've got an expert in a box." Write without AI. Practice public speaking. Be a generalist.
⿻ patcon (is in Toronto) 🦋 @patcon.bsky.social retweeted
🚨 BREAKING 🚨
It looks like Ford is planning a major sell-off of schools.
Through the TDSB, Toronto taxpayers own 612 properties worth $20 billion.
Ford changed the rules so his Minister of Education could sell any school to anyone he wants.
Ford's TDSB supervisor met twice as often with the TDSB's property management arm as with parents.
#OntEd
#onpoli
TDSB supervisor’s calendar shows more than twice as many meetings with $20B real estate arm as parent groups thetrillium.ca:443/news/educ…
⿻ patcon (is in Toronto) 🦋 @patcon.bsky.social retweeted
Ford must stop interfering with our city
Make no mistake: Toronto will stand up for itself.
I don't like it, but I think it's true. I think it's gonna be a bit bumpy in the next year, while we repair our way out of the very digitally insecure world we've crafted for ourselves. Seems prudent to have just-in-case ways to be generous with friends and neighbors 🤷🏻 – at Toronto, Ontario
I think it's plausible that within a year we'll see AI-based cyberattacks on the power grid, financial system, internet infra, or water. Things like the French supermarket cyberattack but worse. As basic prep I would recommend:
Cash: Get a few weeks of spending in cash
Internet: Get a Starlink Mini so that you have Internet if local fiber or cell is down (~$150 plus $10/month in standby mode)
Power, minimal: Enough to run Starlink Mini and phones (~$1,250)
Daily need: about 1 kWh (Starlink Mini 0.7, phones and laptops 0.2; can limit runtime)
Battery: 1 kWh LiFePO4, e.g. EcoFlow DELTA 3 Plus
Solar: 1x400W folding panel, which refills about 1 kWh on a sunny day
Power, better: Enough to run a fridge, Starlink Mini and phones (~$5,000)
Daily need: about 2.5 kWh (fridge 1.5, Starlink Mini 0.7, phones and laptops 0.2)
Battery: 4 kWh LiFePO4, e.g. EcoFlow DELTA Pro 3
Solar: 3x400W folding panels, which refill about 3 kWh/day in sun
Generator: ~2,500W dual-fuel inverter generator; refills battery in a few hours even if weather is bad; get a few 20 lb propane tanks
Water: 14+ gal of water per person for two weeks
Food: 2+ weeks of shelf-stable food
Comms: Hand-crank NOAA emergency radio
⿻ patcon (is in Toronto) 🦋 @patcon.bsky.social retweeted
Last week I took a $11,000/yr contract and built an alternative for $3.64 in under 15 minutes.
And this wasn't the first time this has happened. Build vs buy might be one of the biggest company conversations over the next year, if not already.
This repo seemingly isn't aiming to be well-documented yet, but pairs really nicely with the actor model video I shared earlier: github.com/avenceslau/durabi…
Thanks @avenceslau 🙏🏻 – at Toronto, Ontario
in an uber to SFO and my agents are cooking with @avenceslau durability library, kitesurf browser and typescript MCP sdk. what a world



















