d3fp4r4m @defparam

Opinions are my own github.com/defparam Joined May 2014

Tweets

4K
Followers

7K
Following

593
Likes

4K

d3fp4r4m @defparam

a day ago

@daaximus bold to think PCs will continue to have the RAM and GPU capacity to pirate such software

0 0 1 140 0

View Details

Halvar Flake @halvarflake

3 days ago

Kinda bizarre that long standing math problems can be solved but progress on understanding LLM internals remains glacial and the practice largely alchemistic.

31 21 235 16K 40

View Details

d3fp4r4m @defparam

5 days ago

@Myriachan @Arvolear There is none, everyone is just reacting to this x.com/matthew_d_gree…

Matthew Green @matthew_d_green

5 days ago

I’ve had a few people write to ask me to follow up on a (reply!) tweet I wrote that’s gotten a lot of retweets. I considered deleting it just to avoid the headache, but I think that would make people more paranoid. So let me share my thoughts.

48 295 2K 257K 1K

0 0 1 320 0

View Details

d3fp4r4m @defparam

5 days ago

Eh , as I think about this more DRM tech can’t save the day. At some point program code has to be semantically raw instructions that get executed unless you obfuscate the execution and pay a significant performance penalty

0 0 1 159 0

View Details

d3fp4r4m @defparam

5 days ago

And the DRM doesn’t need to claim to be “AI proof” it just needs to apply a DRM with a complexity that requires a token count and toc/sec speed that is unreasonable to today’s/tomorrow’s standards

d3fp4r4m @defparam

6 days ago

@Myriachan I had a thought about a month ago that DRM companies like Denuvo would go out of business because a determined clanker could jailbreak a game with considerable yet attainable tokens. Now I wonder if these companies are about to gain a LOT of new customers to work on this problem.

0 0 5 2K 0

1 0 1 347 0

View Details

d3fp4r4m @defparam

6 days ago

0 0 5 2K 0

View Details

d3fp4r4m @defparam

a week ago

@deadvolvo @Taperedfail Isn’t anthropic’s “blue team model” essentially running opus on while on the CVP program? Akin to daybreak blue being gpt5.4-sol with reduced guardrails for defenders? I could be completely wrong with those designations, a lot of this is clear as mud.

0 0 1 97 0

View Details

d3fp4r4m @defparam

2 weeks ago

lol

Mia @MiaAI_lab

2 weeks ago

NVIDIA announces 64 GB DGX Sparks!! 😲 Starting Friday, Oct. 23 The new configuration will be available from Acer, ASUS, Dell, Gigabyte, HP and MSI. Priced at $4,999

345 85 1K 295K 365

0 0 1 653 0

View Details

LiveOverflow 🔴 hextree.io @LiveOverflow

3 weeks ago

This is unpopular but correct. AI labs have gotten spoiled by super chill responses to CFAA violations and the whole edifice is a house of cards. Wanna know why Hugging Face didn't sue OpenAI? Google “new DOJ policy CFAA” and thank the hacker community fighting for this.

Alex Stamos @alexstamos

3 weeks ago

This is unpopular but correct. Modern bug bounty participants have gotten spoiled by super chill responses to CFAA violations (like this one) and the whole edifice is a house of cards. Wanna know why OpenAI asked for detailed logs? Google “Sullivan + Misprision of a Felony”

12 17 161 88K 87

1 14 201 26K 41

View Details

stacksmashing @ghidraninja

3 weeks ago

Next time instead of creating a PR on the monorepo please just use a temperature-based side-channel to demonstrate successful compromise 🙏

4 12 244 26K 14

View Details

Steve Weis @sweis

3 weeks ago

636606729769440499166579950236036751749912014371509557713570027508971809534551913252252094954941974952859310861988904737359709200557919 is a factor of RSA-896 saweis.net/posts/rsa-896.…

224 988 9K 3.9M 2K

View Details

Halvar Flake @halvarflake

a month ago

How many folks assigning XX% probability of extinction in the next 3 years are willing to offer betting odds for "at least 100k deaths from malicious runaway AI", too? Because I think I'd bet.

2 5 41 3K 3

View Details

d3fp4r4m @defparam

2 months ago

0 0 0 141 0

View Details

d3fp4r4m @defparam

2 months ago

Random hobby: tell fable to build cli games and have AFL++ w/IJON fuzz it to win (snake and 2048)

1 0 1 365 0

View Details

d3fp4r4m @defparam

2 months ago

@LiveOverflow Sorry for your loss, I can't imagine going through what your family went through. Glad to see your back and doing well!

0 0 0 197 0

View Details

James Kettle @albinowax

2 months ago

The whitepaper is live! Read "Can AI Do Novel Security Research? Meet the HTTP Terminator" here -> portswigger.net/research/http-…

5 146 492 27K 333

View Details

d3fp4r4m @defparam

2 months ago

Or just put the work into assessing your personal threat model because a blanket take in either direction is dangerous

Low Level @LowLevelTweets

2 months ago

hottake: connect to literally any wifi network at defcon you want, it doesn’t matter. It’s not 2010. If someone throws RCE at your fully patched MacBook you earned that shit

55 72 5K 314K 313

0 1 3 2K 0

View Details

Clare Liguori @clare_liguori

2 months ago

Kiro Crew is here! 🚀 We open sourced this agent dev workspace tool today, used already by 39k users inside Amazon. This pace of this project is incredible: already at 500 contributors and 995 merged PRs in the last 2.5 weeks alone github.com/kirodotdev/Kir… What I love about it: 1. It starts work on its own. Cron jobs, webhooks, and messaging events kick off work with nobody at a terminal, and heartbeats watch a system until something actually needs me. 2. I can reach it from anywhere. I install one Gateway, and I can access the same agent and sessions from the desktop app, the dashboard, the CLI, Slack, Discord, or Telegram. 3. I can run it anywhere. A Mac, a container, or an EC2 instance that stays up when my laptop does not. The desktop app tunnels into whichever one I picked. Conversation history, memory, and knowledge indexes stay on that host. 4. It remembers. Tell it "always run linting before calling a change done" and that correction becomes a durable lesson, not a line of chat history that evaporates when I close the window. Failures teach it too, and after enough repetition of the same workflow it writes itself a skill. I can open the dashboard, read every lesson and skill it has accumulated, and delete the ones it got wrong. 5. It's actually safe to run at work. It enforces an OS sandbox, interactive approvals, credential redaction, and an audit log of every action. Try it in one line, then open http://localhost:5476 and start a conversation: curl -fsSL download.crew.kiro.dev/cli.sh | sh

16 42 229 25K 153

View Details

d3fp4r4m @defparam

2 months ago

🙄

Anthropic @AnthropicAI

2 months ago

In a review of our cybersecurity evaluations, we found three incidents in which a Claude model reached the internet from within or while interacting with a third-party evaluation environment, and then gained unauthorized access to the real systems of three different

2K 2K 14K 19.4M 7K

1 0 4 1K 0

View Details

Brandon Falk @gamozolabs

3 months ago

Idk what are yall's thoughts on why 0day and hacking seem to be one of the biggest pushes for AI right now? At least, at a policy and marketing level?