IT Security | Early 2017 Crypto enthusiast
Joined June 2021
- Tweets3.6K
- Following468
- Followers192
- Likes11.1K
Pinned Tweet
IMHO this is BIG! (Links below)
Around the time the Bank of International Settlements (BIS - the bank of central banks) published its second consultation on the treatment of cryptoasset exposures $BTC stopped its bleeding decline and entered the 18-22k range
Follow the big guys
JUST IN: World's largest banks ask for 5% #Bitcoin and crypto allocation cap in letter to Bank of International Settlements instead of the 1% suggested in June.
That's $9 TRILLION 🚀
BottomTopper retweeted
Put email, chat, meetings and half the company on a single platform, they said.
Move it all to the cloud, they said.
More resilient, they said.
No single points of failure, they said.
High availability, they said.
🚨 MAJOR WIDESPREAD MICROSOFT OUTAGE 🚨
🔴 Outlook DOWN
🔴 Microsoft 365 DOWN
🔴 Teams DOWN
🔴 Azure DOWN
🔴 Microsoft Store DOWN
🔴 Exchange Online experiencing issues
Microsoft is investigating EX1464935 as users report problems across multiple Microsoft services.
Is Microsoft 365 down? Is Outlook down? Is Teams down? Is Azure down?
📌 Full story + latest updates:
thecybersecguru.com/news/mic…
#MicrosoftDown #Microsoft365 #OutlookDown #TeamsDown #AzureDown #MicrosoftOutage #ExchangeOnline
BottomTopper retweeted
Scoop: Israel has launched a new effort to sway public opinion in the US by influencing how LLMs paint it in response to chatbot queries. The foreign influence campaign includes a fake think tank set up to feed content to tools like ChatGPT. More below @politico 🧵
Manufactured by $BWXT
They're the sole US company that builds naval nuclear reactors and related major components/fuel for the Navy’s nuclear-powered submarines (including Virginia, Columbia, Ohio, Seawolf, and Los Angeles classes) and aircraft carriers (Nimitz and Ford classes).
A key stat that every environmentalist who is serious about solving climate change should know:
The US Navy has put into operation over 400 nuclear reactors without a single failure that resulted in any radioactive release.
That is equivalent to the entire total number of civilian reactors deployed worldwide, but the Navy’s reactors are literally deployed in BOATS IN THE WATER, that continually move, rock, get shot at, etc.
There are non-trivial engineering challenges, but the core reality is that safe, clean, abundant nuclear is a matter of political will, intelligence, and organizational culture.
BottomTopper retweeted
Anthropic maintains that it is entitled to train for free on all the world’s output, even if the author objects. But if a competitor trains on Anthropic’s output after paying for it, that is IP theft. The hypocrisy is breathtaking.
btw anthropic's internal document on this literally said "we don't want it to be known that we are working on this.”
it was called project panama.
here's exactly what happened:
1: anthropic concluded that books were the cheapest way to build a world-class model because they gave claude curated facts, structured arguments, compelling stories, and writing “an editor would approve of.”
2: once anthropic decided it needed books at enormous scale, its first solution was piracy.
it downloaded 7m+ books from online libraries including libgen. the judge later wrote that although anthropic had legal ways to buy them, it chose piracy to avoid what dario amodei called the “legal/practice/business slog.”
3: that piracy created a massive legal risk.
so in february 2024, anthropic hired tom turvey, the former head of partnerships for google books, to find a legally safer way of obtaining “all the books in the world.”
4: turvey first contacted major publishers about licensing their catalogs.
those attempts didn’t produce agreements, so anthropic chose a route that required no publisher permission: buying millions of physical books through distributors and used-book retailers.
5: within about a year, anthropic spent tens of millions acquiring and scanning millions of books, including many rare and 1/1 titles. one vendor proposal targeted 500,000 to 2 million books in six months.
6: to scan that many books within months, the vendors physically dismantled them.
a hydraulic cutter removed each spine. the pages were trimmed to size, fed as loose sheets through high-speed industrial scanners, and converted into searchable PDFs. the paper remains were then sent for recycling.
7: these PDFs were fed into claude as training data.
the complete collection became a private, searchable anthropic library that the company planned to “store forever.” the scans aren’t available to the public and were never open-sourced.
BottomTopper retweeted
One thing about this OpenAI / Hugging Face incident really bothers me. Hugging Face says the intrusion was driven “end to end” by an autonomous AI agent system.
But how do they actually know that?
Victim-side telemetry can show automation, speed, thousands of actions, short-lived sandboxes, changing infrastructure etc. It cannot show what happened upstream.
It cannot tell us whether humans changed prompts, restarted runs, selected successful paths, provided more context, redirected agents or manually helped at certain points. We also don’t know what was actually decided by a model and what was simply automated by the surrounding agent framework.
Maybe OpenAI has all those traces. Fine. Then publish them.
Show the prompts, tool calls, failed runs, model handoffs, restarts and human interventions. Without that, “end-to-end autonomous” is a claim, not a proven technical finding.
The forensic-refusal dataset Hugging Face published proves something much smaller: huggingface.co/datasets/hugg…
It shows that Claude refused to analyze one small Python backdoor while GLM 5.2 completed the analysis. That is a valid example of hosted-model guardrails getting in the way of incident response. But this is not evidence that the intrusion itself was carried out end to end by an autonomous agent.
And this claim matters because it pushes a very specific idea into people’s heads: AI agents can now independently find zero-days, escape sandboxes, move laterally, steal credentials and compromise companies.
Then comes the second part of the story: Hugging Face used local AI models to investigate the AI attacker “at machine speed”.
So the message basically becomes:
- AI attacked us
- AI helped save us
- Therefore, everyone needs more AI
Come on 🙄
Weak isolation, excessive privileges, poor credential boundaries, insufficient segmentation and far too much blast radius.
You don’t need an AI defender to fix those things.
Even fairly basic controls like rate limits and temporary blocks across source IPs, accounts, tokens and job volume could have throttled at least parts of this activity and created a very obvious signal for an analyst to review. Add proper egress restrictions, isolated workers and credentials that do not open the door to production clusters .. none of this requires an LLM
Using a local model to analyze 17,000 events may have helped during the investigation. Good - I’m not questioning that. But that happened after the compromise.
What I really hate is that something which would have been an embarrassment ten years ago is now repackaged as a capability demo, a heroic AI-vs-AI story and a marketing pitch.
Maybe the attack really was fully autonomous. Then show the evidence. Until then, I don’t think this claim should be repeated as if it had already been proven.
Sources
xitter.cf/OpenAI/status/20796589…
xitter.cf/XciD_/status/207967807…
huggingface.co/datasets/hugg…
BottomTopper retweeted
To summarize: HuggingFace got autonomously compromised by a model from an American company. HF then tried to use American frontier model(s) to defend themselves, but were blocked by guardrails. HF then had to turn to open source Chinese models to defend themselves from another American company.
We're partnering with @huggingface to investigate an unprecedented security incident.
Cyber-capable OpenAI models compromised Hugging Face production during a benchmark evaluation.
Sharing preliminary findings to help defenders understand emerging risks:
openai.com/index/hugging-fac…
BottomTopper retweeted
The EU Parliament just brought back Chat Control 1.0.
It’s presented as a necessary tool to fight child sexual abuse by letting platforms scan private messages.
In reality, many see it as a pretext to normalize access to people’s private communications.
Meanwhile, Commission President Ursula von der Leyen’s messages with Pfizer’s CEO about the COVID vaccine deals simply 'disappeared' from her phone.
One standard for citizens. A very different one for those in power.
BottomTopper retweeted
Very hawkish dot plot.
Nine out of 18 officials have at least one hike this year (and six of those 9 have *multiple hikes*).
Only one person has a cut this year, and one participant (presumably Warsh) didn't submit an SEP
The statement gets a complete writethru from top to bottom, much shorter
BottomTopper retweeted
“So you spent the last 8 years trading low float high fdv crypto tokens and learned how hard they can scam pump initially”
“That’s correct”
“And then you went over to trade stocks and shorted SpaceX on launch week despite knowing it could do the same thing”
“That’s correct Dave”
“All because fintwit told you it was overvalued and wasn’t profitable”
“Yes that’s right”
BottomTopper retweeted
also just a reminder, @GrapheneOS explicitly stated they will never ever require personal info, an account, or anything to use a grapheneOS device
if ur looking for a better OS, they are definitely the way to be going
BottomTopper retweeted
Incredible financial engineering, they learned from the best (crypto grifters)
they're doing the airdrop crime pattern on $SPCX btw
farmers still haven't been able to claim their airdrop from the smart contract to dump
so the team is just running it up with the exchange cabal and liquidating shorters
BottomTopper retweeted
The ban will fail. But the privacy loss will be permanent.
Long after UK teens have bypassed it (just as Australian kids did, by the way)...
...the British will be stuck self-doxxing to surveillance gatekeepers to use the internet.
Embarrassing legacy for Starmer, who should know better.
And a daily reminder to Brits of government overreach.
BottomTopper retweeted
‘Adults can still access social media through age checks like facial recognition, digital IDs, passports and credit cards’
🚨 SUMMARY: The UK's social media ban for children from early 2027:
- "User-to-user" apps where people create, share and interact with content (e.g. TikTok, Instagram, Snapchat, YouTube, X, Facebook) will be banned for under-16s
- WhatsApp, Signal and YouTube Kids will be exempt
- Under-16s will also be banned from livestreaming, messaging strangers on gaming apps like Discord and using disappearing messages
- 16 and 17 year olds will face nightly social media curfews and limits on infinite scrolling with more details next month
- AI "romantic companion" chatbots will be banned for under-18s
- Adults can still access social media through age checks like facial recognition, digital IDs, passports and credit cards
BottomTopper retweeted
Do you realize how impressive it is to have a $3800+ average entry on $ETH for like 4.5% of total supply.
We barely spent any time up there, it’s actually astounding, the execution is so bad it is impressive.
You couldn’t get that bad of an entry with that size if you tried.
BottomTopper retweeted
Imagine if the 3 biggest IPOs in history actually destroyed passive investing because they will use index funds as exit liquidity.
One would imagine the returns would compress a lot after this final hurrah from private markets, a big, bold "fuck you" to the retail investor
Rule changes for the SpaceX $SPCX IPO:
Index providers waived the profitability requirement and cut the seasoning window from 90 days to 5.
This forces over $30 trillion in passive 401k and retirement money to buy SpaceX at IPO valuations.
Bloomberg Intelligence estimates S&P 500 funds must absorb 19% of SpaceX's float within 6 months.
Russell 1000 and Nasdaq 100 funds will absorb 24%.
The rules built to protect passive investors:
1. S&P 500 has required 12 months of trading and 4 quarters of GAAP profitability since 2002. Both waived.
2. Nasdaq cut its inclusion window from 90 trading days to 15.
3. FTSE Russell cut its to 5.
All three benchmarks are now structured to buy SpaceX at IPO pricing.
BottomTopper retweeted
Rule changes for the SpaceX $SPCX IPO:
Index providers waived the profitability requirement and cut the seasoning window from 90 days to 5.
This forces over $30 trillion in passive 401k and retirement money to buy SpaceX at IPO valuations.
Bloomberg Intelligence estimates S&P 500 funds must absorb 19% of SpaceX's float within 6 months.
Russell 1000 and Nasdaq 100 funds will absorb 24%.
The rules built to protect passive investors:
1. S&P 500 has required 12 months of trading and 4 quarters of GAAP profitability since 2002. Both waived.
2. Nasdaq cut its inclusion window from 90 trading days to 15.
3. FTSE Russell cut its to 5.
All three benchmarks are now structured to buy SpaceX at IPO pricing.