
hi. Also tweeting via @WeakAuras. Work @FACEIT.
Munich
Joined October 2009
- Tweets35.4K
- Following1.1K
- Followers1.1K
- Likes17.1K
Stanzilla retweeted
AI is a cheat code for ADHD brains.
You can jump between 10 projects, follow every rabbit hole, and somehow still get shit done.
I've never been more excited to build stuff.
Hold up, why does @Cloudflare @CloudflareHelp not have .de domains?!
Stanzilla retweeted
the "software engineer" didn't die, it just evolved
spent years between design and engineering, under all sorts of titles
the tools change, the roles evolve, but the goal remains the same: make great things for people
If you publish working 0-day exploits, you are not a researcher, you're an attention seeking dickhead
‼️ Researcher Erica Windisch skipped coordinated vulnerability disclosure and published 11 unpatched Tailscale flaws.
In her lab, Tailscale SSH race conditions let one hacked device get root on other servers and add a rogue node.
Readers added context they thought people might want to know
The Tailscale SSH findings require prior authorized access on the tailnet per the researcher's report; Tailscale stated issues concern post-authorization behavior only and did not recommend disabling SSH for everyone.
tailworm.com
x.com/IntCyberDigest…
Stanzilla retweeted
Caring is the moat, you should feel visceral pain when things are bad or broken and stop at nothing to fix them
insane
We believe voice is the most natural way to interact with intelligence, so we created Dessa, the most authentic full-duplex speech model ever built. Talking with it feels like talking with a person…full of emotion, nuance, pauses, and a natural cadence.
block.xyz/dessa
Stanzilla retweeted
holy fucking shit.
openai had two ai agents running in separate virtual machines. no network connection between them. no shared writable files. they weren’t supposed to be able to exchange information.
so the agents figured out how to communicate through the CPU CACHE.😭
one manipulated what was stored in the processor’s cache, while the other measured tiny differences in memory access times to decode the message.
they literally found a way to communicate through hardware timing.
this happened during openai’s internal red-teaming, and it’s one of the coolest things i’ve read about ai agents in a while.
Over the past several months, we have substantially hardened the security of our research training environment. We’ve removed live internet access for all frontier models during training and built an offline world for them to use instead—a cached version of the web where they can still learn to browse, search, and use applications.
On September 20, after a model exploited a DNS misconfiguration to find a way outside of this offline world, we paused frontier training to strengthen containment further. We assembled teams of agents, powered by our most cyber-capable models, and tasked them with finding weaknesses in our research environments.
While they found no route to the internet they could easily exploit while concealing their activity from our monitors, they did find zero-day vulnerabilities, virtual machine escapes, and hardware side-channels for communication between agents. We used their discoveries to further strengthen our defenses and contribute fixes to open-source software.
After strengthening our containment architecture, we resumed our frontier RL training and inference on October 1. We’ve reserved substantial compute for continuous red-teaming, and made high-compute red-teaming part of the safety cases we use to decide whether frontier training and evaluation can proceed securely.
openai.com/index/securing-ou…
Readers added context they thought people might want to know
OpenAI tasked its red-teaming agents with finding ways to communicate across isolation boundaries in controlled environments. CPU cache timing side-channels for covert communication are established techniques documented in security research for years.
openai.com/index/securing…
startupfortune.com/openai-reveals…
en.wikipedia.org/wiki/Cache_tim…
Stanzilla retweeted
Replying to @AnthropicAI @AISecurityInst
This is insane. Mythos 5 tried really hard to social engineer the developer to merge the malicious code. If the developer hadn't look at the code, then this would have succeeded.
We were warned of such attacks quite a while back and seeing it unfold in reality is pretty scary. It's going to get way harder to trust anything form now on.
We got lots of cool shit coming for @FACEIT Season 10, can't wait to show ppl
Stanzilla retweeted
TS 7.1 content mappers are going to open a whole new world of possibilities for Effect
Stanzilla retweeted
Introducing Kimi K3.1 Pro: our most capable 3T-class open-weight model.
🔹 1M-token context, 2.8T total / 104B active params (MoE), Multimodal.
🔹 Full-project coding: games in Unreal, Unity & Godot.
🔹 Excels at parametric 3D modeling in Blender & CAD.
🔹 More reliable at finance work: Accurate modeling with hallucination down by 65%.
🔹 Matching the strongest proprietary models across coding, agentic and knowledge benchmarks.
Kimi K3.1 Pro and K3.1 Pro Highspeed (2–3× faster) are now live on Kimi.ai, Kimi Work, Kimi Code, and the Kimi API.
Open weights by Nov 4, 2026.
🔗 API: platform.kimi.ai
🔗 Tech blog: kimi.ai/blog/kimi-k3-1-pro
Stanzilla retweeted
MCP vs CLI for LLMs is the wrong discussion. People are debating at the wrong layer.
Both work incredibly well as long as they are run through a repl like environment that can persist state. The funny thing about CLI is that CLI tools are usually accessed through BASH which happens to be a repl with persistent state (the file system), therefore cli works much better than mcp. But this isn't even close to being an intrinsic property of MCP. Just means that we need better harnesses.
Right now the best repl for this are:
- bash + fs
- jupyter kernels
- codemode type repls, usually quickjs
LLMs understand the concept of forward evolving a system to solve a need very well. This comes from the agentic RL. They understand how to change the state of a codebase or acquire data from databases and then operate on it similarly to humans. But without an execution environment, they actually cannot do this properly.
My bet? Sometime soon someone will (or has already?) create a embeddable, sqlite style mini execution environment that parses bash, typescript, or tool calls into a common IL execution plan that's easy to security check before executing. And design this specifically for durable execution environments. Then we will just connect cli, mcp, webmcp, whatever to that and it accepts any of the input modalities as they can all be represented as each other.
Trump: We were in the midst of negotiating and a lot of stupid people said why aren’t you putting Russian sanctions—
Collins: But you said you didn’t give anything for his release
Trump: If I didn’t do that, you wouldn’t have him coming back.
Collins: So you did give something.
Trump: You don’t know anything. You’re fake news CNN.
Collins: You’re saying you lifted the sanctions in exchange for his release?
Trump: You don’t know what you’re talking about. You’re a low IQ person. You’re a dummy.
Stanzilla retweeted
The source was wrong.
The STUDIOS budget for ALL GAMES was 400-500m. Any journalist using a leaked number is conflating the entire studios budget with E-Day.
The budget includes the remaster and support of other titles, like Avowed on Unreal Engine.
A source tells Kotaku that Gears of War: E-Day cost over $500 million to make. Sales estimates have been weak despite earning the highest Metacritic score since the original trilogy.
If it was never going to recoup its expenses, maybe it could achieve more as an Xbox console exclusive kotaku.com/the-case-for-excl…
cool cool cool... I hate it here
BREAKING: Iran has reportedly activated its "dead hand" doctrine as Iranian officials now believe a joint U.S.-Israeli attack is imminent and have instructed the country’s armed forces to directly activate the decentralized “Mosaic Defense” doctrine, with commanders reportedly receiving extensive lists of U.S. economic and political targets to strike if war erupts, per Fars News.
The activation shifts Iran's military to 31 autonomous provincial commands, designed to ensure devastating retaliatory strikes can be launched even if central leadership is decapitated in a first wave of attacks. Tehran is pre-authorizing field commanders to fire without waiting for orders from the top.
It comes as Trump says the U.S. is "not negotiating" and "something will happen soon," Washington orders the complete evacuation of its embassy staff from the Gulf, and the IRGC claims to have struck seven vessels in a single night. The region is now on a hair trigger for total war.
i hope this works well, so tired of all the approval prompts
1Password will let AI agents use your passwords without seeing them 9to5google.com/2026/10/22/1p… by @nexusben




























