I love computers, cats and candy, in no specific order. Mastodon: @mbh@infosec.exchange Signal user: xul.01
Joined December 2010
- Tweets94.1K
- Following986
- Followers1.8K
- Likes9.5K
MBH retweeted
Okay, since the news is already out: an RCE vulnerability in PHP core, CVSS 10.0. Further details are scheduled for release on October 20. Only PHP 8 will receive patches.
MBH retweeted
I repeated DeepSeek V4.1 Flash 1017 benchmark 89 times across 9 harnesses to understand which works best.
High effort, 5 attempts each:
Pi harness: 40.4
Grok Build CLI: 40.4
DeekSeek: 39.2
OpenCode 2.0: 38.6
OpenCode: 36.6
Claude Code: 36.4
Codex: 33.2
Hermes Agent: 32
Kilo Code: 31.8
Codex kept failing several times exceeding the allowed time per repo (3 hours) and was judged where it finished.
Based on what I tested, Pi, Grok Build CLI, and OpenCode 2.0 look like the strongest universal harnesses. This doesn't necessarily generalize.
A detailed table with every run in the response🧵
Turns out DeepSeek harness improves the score of DeepSeek V4.1 Flash by 2-3 points on average.
It also costs 80% more due to subagents and more output tokens.
New results:
DeepSeek V4.1 Flash 1017 + Claude Code harness:
- max, mean of 7: 39.1
- high, mean of 5: 36.4
- low, mean of 5: 34.4
DeepSeek V4.1 Flash 1017 + DeepSeek harness:
- max, mean of 7: 42.7
- high, mean of 5: 39.2
- low, mean of 5: 34.8
For comparison:
GPT-6 Astra, max: 45
Opus 5.5, max: 41.7
Muse Wonder Full 1.0, max: 42
It's a crazy model, and the only one catched cheating. All the results are available on the benchmark website.
MBH retweeted
Going through DeepSeek's new DeepInfer repo. They say each GPU earns them $38/hour serving tokens, at off-peak prices.
Thats crazy.
MBH retweeted
حصري ⚠️ أبناء الكويتيات لدى #القطاع_النفطي
توقيع العقود سيكون ( خلال أسبوعين ) ( براتب أساسي )
لحين صدور آلية لعقود العمل الخاصة ب أبناء الكويتيات
كل الشكر والتقدير :
لوزير النفط : طارق الرومي
رئيس مؤسسة البترول : نواف الصباح
لوضع آلية مؤقتة والاستعجال فيها
MBH retweeted
🚀 Introducing DeepInfer, our in-house inference framework, now fully open source!
Powering DeepSeek-V4.1-Flash at scale with high throughput and low latency. We’re sharing our production stack to help the community lower compute costs, reduce energy use, and make AI more affordable.
🔗 github.com/deepseek-ai/DeepI…
1/4
MBH retweeted
Researchers from Arizona State University, the University of Tabuk, and King Saud University developed an advanced superintelligence tool capable of detecting misleading crisis content with up to 98% accuracy. This achievement reflects how American innovation drives global partnerships and tackles shared challenges. 🇺🇸🤝🇸🇦
طوّر باحثون من جامعة ولاية أريزونا، وجامعة تبوك، وجامعة الملك سعود أداة متقدمة للذكاء الاصطناعي الفائق، قادرة على اكتشاف المحتوى المضلل المرتبط بالأزمات بدقة تصل إلى 98%. ويجسّد هذا الإنجاز دور الابتكار الأمريكي في تعزيز الشراكات العالمية والتصدي للتحديات المشتركة.
MBH retweeted
Si vous avez téléchargé aujourd'hui la dernière version de CLI d'OVHcloud, merci de la mettre à jour à nouveau très rapidement. Sinon effacer. Il s'agit de repo:
github.com/ovh/ovhcloud-cli
La version CLI de 14h47 a été compromise par un hacker. Nous l'avons détecté et bloqué à 16h21. Merci au client qui nous a remonté le souci. La version compromise est v0.11.0 v0.12.0 v0.13.0 v0.14.0 v0.15.0.
La version v0.10.0 et la future 0.16.0 est clean.
On vient de finit les premières vérifications et aucun autre repo n'est affecté. Nous avons aussi retracé l'incident. Le hacker a utilisé le compte github d'un des développeurs et a ajouté un binaire dont le job est récupérer les secrets sur le disque. La qualité du binaire est médiocre mais il peut aller jusqu'au bout. Si vous êtes concernés, merci de changer tous les secrets sur votre disque.
On continue les recherches sur le binaire et on va publier les détails additionnels sous peu.
MBH retweeted
德国 DW 电视台拍过一部关于巴黎郊区移民的纪录片。
镜头对准了生活在同一片区域的两个群体。
一边是大约七万人的法国华人。
在巴黎北郊的欧贝维利耶，他们建起了欧洲最大的服装批发中心。
这批人的生活方式很简单：
起早贪黑，开小作坊、看店、跑货运。
赚了钱继续投入生意，遇到难处自己想办法扛。
平时低调安静，很少向政府伸手要特殊补贴，也不上街制造混乱。
几十年下来，越来越多家庭买了房，把生意做了起来。
另一边，是同样生活在这片街区的北非移民群体。
从整体上看，他们在当地的经济融入相对滞后。
但纪录片捕捉到了一个细微却现实的心态变化：
一种把自食其力者视作威胁的情绪，正在悄悄蔓延。
按片子里的观察，
一些融入受挫的人，习惯以受害者自居，觉得社会欠自己太多。
可当他们转头看到身旁的华人时，心态变了。
他们不仅没有去学怎么做生意，反而把华人当成了竞争对手。
这种敌意到底从何而来？
最现实的冲突在于：华人的日子越过越好，受害者叙事就越难自圆其说。
大家同样是外来者，同样面对异国他乡的壁垒。
甚至华人刚来的时候连法语都不会讲，更谈不上本地人脉。
如果有人靠一天干十几个小时，能把日子一点点撑起来，
那句“我们过不好全怪外界不公”，就很难再理直气壮地说出口。
一个闷头自立的人，往往会让习惯归咎环境的人感到刺眼。
更深层的错位在于对财富的理解。
在很多索取者的认知里，财富是一块固定死的大饼。
他们看不到那些批发店是怎样一箱一箱货物搬出来的，
只觉得华人的店铺赚到了钱，就是占了自己的便宜。
再加上华人素来习惯忍让，遇到纠纷往往选择息事宁人，
这种心态上的失衡，很快就落成了现实中的治安麻烦。
抢劫、尾随、街头袭击，接二连三指向这群只想安分过日子的人。
靠双手养活自己、靠信誉积累财富，放在任何健全的社会都是最基本的尊严。
但如果一个地方习惯了把受害者身份当成通行的筹码，
那个默默把日子过好的人，
往往最先成为被针对的对象。
A tourist in France got caugh up in the riots.
What's weird is, she insists on going to some dinner that was planned, while there are police & rioters around, looting, beating, burning...
I guess dinner is her highest priority in life!
MBH retweeted
New: Chinese hackers broke into Staples. Staples has an internal customer support tool called Nexus, Chinese hackers got into that, issued millions of dollars of gift cards. Mules then went on a spending spree across the U.S. Gang made $100 million+ 404media.co/how-a-massive-ch…
MBH retweeted
🦆🔫
He convertido un AirPod en un mando para jugar al Duck Hunt.
Lo giras para apuntar y das un toque en el micrófono para disparar.
Sin tocar el ordenador, full vibecodeado por voz al mientras dormía a la bebé 😅
MBH retweeted
Most devs on the $20 Google AI Pro plan still don't realize Google quietly bundled Colab Pro (200 Compute Units/mo) directly into the subscription:
- Hardware unlocked: 80GB NVIDIA A100 GPUs (167GB System RAM), 96GB Blackwell G4 GPUs, L4 GPUs, and Trillium v6e-1 TPUs
- Monthly runtime: At ~6.77 CU/hr, your 200 monthly units give you ~30 hours/mo on an 80GB A100
- Agent bonus: With Google's Colab CLI, Antigravity or Claude Code can call those A100s straight from your terminal.
MBH retweeted
We have released a free open source tool 'Zero Breach' - that can identify whether a recent Israeli spyware campaign left traces on your PC - the one Citizen Lab exposed, where Israeli ad-tech was used to infect journalists through 'no-click' ordinary ads.
It needs Python installed (python.org — tick "Add python.exe to PATH" during setup). Then open PowerShell in the folder where you saved it and run:
python -X utf8 zero-breach.py
It takes about 15 minutes. It only reads - it changes nothing, needs no admin, and never connects to the internet. It checks for 338 indicators and tells you if one of your browsers interacted with one of the infected ads in the past. (It also checks for Candiru infection)
Download it here: github.com/interplains/zero-…
You can also check whether your browser or device already blocks these kinds of ads, without downloading anything, here:
archivegenocide.com/scan/
You are looking for a green result ✅ - if not, fix your browser settings, install an ad blocker / DNS resolver.
For phones: Tens of thousands of apps show these ads, so we suggest you set up a DNS resolver (NextDNS, AdGuard, or a router/Pi-hole blocklist) so your phone blocks all of them automatically.
We also publish ready-made blocklists you can subscribe to as well. Use them.
Pease report any issues in our telegram linked in bio
God bless.
