🚨BREAKING (EXCLUSIVE): National Security Concerns Leaked by MSFT Whistleblower Leaked Microsoft screenshots show an India-based engineer received approval to view U.S. government cloud logs. A Microsoft whistleblower contacted me and shared screenshots supporting allegations that Microsoft used its “escort” process to allow an India based engineer to access Government Community Cloud (GCC) systems. The whistleblower alleges the engineer is not a U.S. citizen. Microsoft’s own published rules state that temporary elevated access to customer content in GCC requires verified U.S. citizenship. The escort model is the workaround the company uses so non-U.S. personnel can still direct the work. The screenshots show Viraj Chokhany requesting and receiving approval for escort access to view logs in the DPRODMGD151 environment, which is part of Government Community Cloud Moderate — the cloud used by many federal, state, and local agencies. In the escort process, a U.S. person is supposed to open the system while the India-based engineer guides the work. The whistleblower believes this raises urgent national security concerns and may violate FedRAMP requirements. Multiple Microsoft employees have reviewed the screenshots and confirmed they appear authentic. Viraj, has been confirmed to live in India-- Where he also attended and graduated college. The whistleblower is working on a public statement. I will release the whistleblowers statement when I receive it. Attached images are some of the screenshots that I received from the Whistleblower. @DHSgov @FBIDirectorKash @JDVance

My take on Anthropic's S-1 filing. michaeljburry.substack.com/p…

THE FORTY-YEAR ANOMALY Celebrating 40 years of Meshuggah. North American Tour 2027 with @testament and Blood Incantation. Tickets on sale Friday, Oct 30th at 10am local.

❗️ Cargo thieves have stolen more than $100M in hardware bound for US data centers since June, NBC News reports. They hijack freight-broker accounts, post fake loads and send carriers malware links to take over their accounts too. In one of the biggest heists, an SUV struck the security escort of a trailer carrying ~$10M in server rack components from California to Texas. The trailer sped off. An app was tracking it, but its coordinates had apparently been spoofed. In another, a sedan hit the off-duty police escorts of a $13M server load bound for Georgia, and the trailer drove on. None of the equipment from either load has been found.

reddit.com/r/aliens/s/zIO05K… There a supposed planet size object on route to planet earth right now

Announcing 3 Critical vulns for hundreds of millions of IoT, Firewalls, OT, and Military devices including: Palo Alto Networks, Comcast, D-Link, HP, Canon, Honeywell, GE, Oracle, Siemens, Rockwell, Digi, Lockheed Martin, Boeing... The vulns are with GoAhead Web Server which is a backend library used by these devices. There's a patch available from GoAhead but that doesn't mean there's a patch available for the devices yet -- that's up to the manufacturer. - TLS traffic over DHE ciphers have a 1-byte secret, "04", meaning anyone can decrypt connections to these devices and steal login credentials and session tokens if the client negotiated with DHE ciphers like the latest TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256, which is extremely likely. - LibreSSL mTLS has been completely bypassed, meaning anyone can connect over mTLS. If you have one of these devices listening on the internet and are expecting mTLS to protect it from attackers, take it offline or patch asap. - OpenSSL Certificate Revocation Lists (CRLs) are not enforced, meaning if a user device is stolen or compromised, and you revoke that mTLS cert, nothing actually happens. There are a lot of other attacks this can be used for. These are critical because these types of devices run our world. Water systems, electricity, military, firewalls, critical infrastructure. foxio.io/blog/choose-your-ba…

WTF IS THIS

stop the PERL clutching

The computer science collaboration will understand and explain a result concerning the Exponential Time Hypothesis (ETH), a longstanding conjecture about the computational complexity of Boolean formula satisfiability, a problem deeply related to the P vs. NP problem. Surprisingly, our system has recently proved that the ETH is false, a result that was subsequently verified in Lean. The refutation of the ETH reopens questions about how much faster these tasks could become, and may help guide the search for better algorithms. Finding such algorithms, and turning theoretical advances into practical improvements, will require significant further research. Our system found its natural language disproof for the ETH we reached out to to @rrwilliams. Ryan will form a collaboration with Russell Impagliazzo and Ramamohan Paturi to verify and shepherd this result. Impagliazzo and Paturi, along with Francis Zane, are the original proposers of the Exponential Time Hypothesis, and Williams has refuted strong versions of the ETH, used ETH for hardness results, and connected algorithms and lower bounds. This group asked us to make all raw data of the results public to facilitate independent verification by the community, which we have done by posting the natural language proof and Lean formalization to our GitHub repo. The group also invites the community to help organize an open examination of the ETH claim and to discuss the broader questions that AI-generated breakthroughs raise about verification, access, credit, and the future of research. github.com/openai/math/blob/…