🚨 Howard Lutnick's family firm bought up the rights to tariff refunds for 20-30 cents on the dollar after Liberation Day last year. Today, the Supreme Court struck the tariffs down. For every $100 invested, Lutnick's sons just made 3-5x. Welcome to Crony Corrupt America.

"Find complex vulnerabilities" and the first demo is subprocess.Popen with shell=True and an unsanitized f-string. Bandit catches this. Semgrep catches this. A CS201 midterm catches this. The $20/month tool found a free-tier finding.

Google DeepMind just solved one of the dirtiest problems in image generation. and the fix is almost embarrassingly elegant 🤯 every diffusion model you've used (Stable Diffusion, Flux, etc.) relies on latent representations. an encoder compresses images into a compact space, and

They hard coded the variance - meaning the VAE encoder is only predicting the mean latent distribution, then they use a scaled identity covariance for the reparam trick - and bingo bango, no more instability and you can train everything e2e Salimans strikes again!

This is wild 🤯 A developer on GitHub just shipped a complete AI agent that: • Runs on 256MB RAM • Has 11 built-in tools • Keeps persistent memory • Ships with Telegram integration And it’s a single 12MB file. We’ve been overcomplicating agents. Link + description 👇

Someone is actively DOSing Polymarket LPs The attack is elegant & brutal: - Post an order via API - Immediately drain USDC with higher gas - Polymarket relayer tries to match → REVERT - ALL maker orders that would've filled? GONE from the book Cost per cycle: <$0.10 Time per

96GB VRAM GPU GIVEAWAY ($15K) - LAST CHANCE Re: Can it be an RTX PRO 6000 Blackwell? > “please be Blackwell” > “96GB VRAM or we riot” > “the people have spoken” The terms were simple. They were not met. Last chance. If THIS tweet (the one you’re reading) hits, in the

Deepseek just broke the one rule every transformer has followed for a decade 🤯 x + f(x). the residual connection. if you don't know what that means, here's the simple version: every time a neural network processes your input through a layer, it keeps a copy of the original and

someone built a FIREWALL for CLAUDE CODE that blocks PROMPT INJECTION attacks in real-time every time claude reads a file, fetches a website, or runs a command, this hook scans the output for 50+ attack patterns BEFORE claude processes it one install.sh, protects

Diffusion models need exact noise level schedules to work. But recently some models have been shown to work without explicit noise conditioning. How? We show that these time-invariant fields implicitly implement a Riemannian gradient flow on some energy landscape. 1/3

Google just proved that most "reasoning" models aren't actually thinking. They're just writing more tokens. Their new metric called "deep-thinking tokens" tracks where a model's internal predictions actually shift across layers before stabilizing. Translation: instead of

My son asking me a lot of questions. It’s a distillation attack obviously.

Locking the camera to the stars instead of the horizon changes everything. It’s actually kind of terrifying to see the Earth spinning beneath us like this. 🌍🌌

Kali & LLM: macOS with Claude Desktop GUI & Anthropic Sonnet LLM: This post will focus on an alternative method of using Kali Linux, moving beyond direct terminal command execution. Instead, we will leverage a Large Language Model (LLM) to translate… kali.org/blog/kali-llm-…

vxdb a text file on my desktop called "passwords"

Simply explained: Instead of typing raw Kali Linux commands… You describe what you want in plain English The LLM translates that intent into: •the right Kali commands •scripts •or full workflows So this: “Scan this target for open ports & services” Becomes: correct

this is the worst local AI will ever be. tomorrow it gets faster. next month the models get smarter. next year your GPU runs what a data center runs today. Qwen3.5-35B-A3B on a single 3090. told it to visualize its own expert routing. 256 experts, 8 active per token, rendered in

🚨 Breaking: Google's World Model Builder patent is just published. 🤯

State of security in Kali integrating AI ( kali.org/tools/mcp-kali… ): arguments are interpolated in a single command string, not escaped, so whatever the AI passes, including potential vectors for command injection, is executed. With pipes, &, ; and all that stuff like it's

Someone sent me a DM asking if a weird Minecraft thingie was malware (pinkiecraft(dot)com). I poked it with a stick > pinkiecraft(dot)com > vibe coded site > "installer" for "program" is .rar > extract .exe from .rar > .exe is normal installer > open installer > .exe and