Choose disfavour where obedience does not bring honour. I do math. And was once asked by R. Morris Sr. : "For whom?" @halvarflake@mastodon.social

Joined June 2008
Include

Only show posts containing:

Exclude

Hide posts containing:

Time range
-
Minimum likes
LLMs with lean are fantastic at calculating reduced products in products of (order theoretic) lattices. This is actually an enormous unlock.
2
3
23
1,884
Halvar Flake retweeted
Reproduced the Brotli memory corruption bug (CVE-2026-111497) using a simple Node.js + Express app. Patched and unpatched versions produce different decompressed output, making it possible to remotely identify vulnerable servers.
2
21
103
8,851
This thread was part of a series; return to the main thread here: xitter.cf/iyad_elbaghdadi/status…
As we await a devastating new escalation in the Iran War, consider how exposed the Gulf states are and how little leverage they have over events. Why can't Gulf states defend themselves? What will it take for them to be able to? What does their future look like? A megathread:
2
7
1,523
There are no more bugs in Unix. @mdo
1
9
1,036
Replying to @lcamtuf
Because we are all natural optimists
6
565
Halvar Flake retweeted
I PIANI DEL CREMLINO PER PAGARE GLI INFLUENCER ITALIANI — Oggi è uscita un’inchiesta importantissima di The Insider, basata su documenti interni russi e comunicazioni riservate che ricostruiscono chi organizza e diffonde la propaganda russa in Europa, Stati Uniti e Ucraina. Al vertice c’è Sergey Kiriyenko, vicecapo dell’amministrazione presidenziale di Putin. Sotto di lui, funzionari del Cremlino, agenzie e società incaricate di creare notizie false, manipolare le discussioni sui social e influenzare l’opinione pubblica. Gli obiettivi sono alimentare la sfiducia nelle istituzioni, dividere le società occidentali, screditare l’Ucraina, ridurre il sostegno militare a Kyiv e convincere gli europei che le sanzioni alla Russia danneggino soprattutto loro. C’è anche l’Italia. Dai documenti emerge un progetto per pagare influencer italiani affinché producano contenuti contro le sanzioni alla Russia. Gli influencer, però, non devono sapere chi ci sia realmente dietro. Un dipendente dell’organizzazione russa scrive: «L’importante è che non scoprano chi l’ha commissionato. Al momento pensano che sia un partito politico italiano» Assurdo. Chi sono questi influencer? (Nell’inchiesta c’è davvero molto altro, consiglio di leggerla tutta. Comunque tornerò ad approfondire altri punti nei prossimi giorni)
34
650
35
1,423
36,896
Halvar Flake retweeted
I found this unpublished blog post from 6y ago (look at the hand drawn diagram lol). I’d totally forgotten about this, but the key ideas here (embracing non-determinism as a first class citizen via “error kernel” centric design etc) work super well as guidelines for my agents.
2
6
128
5,526
Halvar Flake retweeted
The late Vladimir Bukovsky once articulated the proper way to talk to Putin, should you have to: “The KGB are a particular species that don’t understand the word no. You can’t compromise with them and they won’t genuinely seek to compromise with you. An opponent’s attempts at compromise are viewed as weakness and you will cause immense grief for yourself if you don’t tell them off. If you don’t, they will press harder until they get you to work for them. For the KGB, you are either their agent or their enemy — there is nothing in between. So what you have to do is look Putin straight in the eyes and tell him to go you know where. That’s it.”
Garry Kasparov
@Kasparov63Oct 21
Which is worse, the strategic stupidity of rewarding a murderous dictator with billions of dollars for taking American hostages, or a US envoy groveling before him? As usual in these US-Russia “negotiations," Putin gets everything he wants and gives up nothing he cares about.
18
370
13
1,791
82,737
Halvar Flake retweeted
I get the best results when I pretend I’m a TV lawyer. I poke around the code by asking detailed questions to prime the context with model generated facts. These are used for the contract invalidation question “is it ever possible that …” In my head I call it the Matlock method
The weird part about this is that it can be hard to pin down exactly what makes the difference. An expert just chatting with a frontier model will still get better results than someone unfamiliar with the topic!
2
4
23
1,333
Halvar Flake retweeted
Security researchers and operators from the 90s suiting back up ...
32
66
13
714
23,754
The biggest threat to the Israeli state-supported settler-terrorist apparatus is Israelis meeting and interacting with Palestinians as human beings, which is why the government does everything to stop that from happening
Everyone in our Protect the Harvest delegation has been released. The Israelis who were with us have also received 15-30 day bans from the West Bank, which unfortunately means they will be unable to participate in the olive harvest. Thank you to everyone for the kind words and support throughout the day. For now, just feeling very grateful that our group is safe.
3
4
48
1,658
Halvar Flake retweeted
It is kinda hilarious when you realise that all Cyber AI models were trained on Bugtraq emails.
Omg I found a copy of the original memory_limit advisory. marc.info/?l=bugtraq&m=10898…
4
8
36
4,304
Visualisation of what the neural network learnt, croissant dough edition.
4
1
19
1,590
Halvar Flake retweeted
We survived Morris, Trinoo, Melissa, Blaster, Mirai, WannaCry, Heartbleed, SolarWinds, etc. We'll get through this too. It will be a volatile couple years but we'll be in a much better state on the other side.
Feels like March 1, 2020 for Cyber. Not normal, something is happening. Internet lockdowns in a couple of months?
2
6
28
1,462
Halvar Flake retweeted
Largest credit goes to @lcfr_hax for the earliest recent discovery of the bug class. This underlying engine issue was so wide it invited a lot of parallel discovery. As we coordinated our findings the scope of the problem continued to expand!
5
14
3
198
15,193
Halvar Flake retweeted
Vincent Sitzmann
@vincesitzmannOct 21
After this project, it seems pretty clear to me that the days where we decide on a particular optimizer, learning rate schedule etc. before the run and then never touch it again are likely over. Going forward, I bet that everyone is going to deploy reactive optimizers - it is like hiring a deep learning expert to watch the training run full-time and adjust on-the-go! Try it out yourself with Xingjian's pip package: github.com/xingjian-bai/opal
1
3
30
1,718
Halvar Flake retweeted
@grok who found the vulnerabilities? I thought it was @calif_io and @lcfr_hax
1
2
1
24
4,460
It’s going to be a long winter for every security team out there. Be nice to them.
16
41
6
483
19,183