hackerman @winfunction (yc s24)

blr🚦| sf 🌉
Joined March 2017
mufeed vh retweeted
In a world of AI slop blogs, presentations, images and write ups... Calif is an excellent example of how to harness it correctly. Accuracy, Art, Asthetic all supporting excellent AI assisted research. 👏
Do you know who illustrated the comic on calif.io/php2shell? Her name is Stephanie Cortes. And her husband is the hacker who discovered php2shell: @lcfr_hax. This artist-hacker couple has the best story, stay tuned!
1
3
41
3,607
mufeed vh retweeted
It appears these intermediary certificates were issued with single-byte P-384 private keys. This means anyone can exploit this issue locally and issue valid certificates under them with no effort. This is very, very bad! Seems undetected since issuance in 2025?
private keys from 8 intermediate CA certs have been compromised (eMudhra) Happy "Update everything" day to all my pager-carrying friends emudhra.we-have-a-problem.co…
9
57
11
664
60,944
mufeed vh retweeted
This is how things will be for the foreseeable future.
they've been non stop trying to attack our systems for the past 48 hours a side effect is everything is getting hardened but damn we basically need agents going 24/7 because that's what they have
130
154
11
3,796
865,076
mufeed vh retweeted
interpretability might be the most important scientific problem in the world right now, as I don't think we can solve alignment if we don't know what we're building. I think I have good news about it. I co-authored early work in mechanistic interpretability at OpenAI and came away pessimistic, because neural networks appeared to fold into arbitrary tangled knots. years later, I started openai's first large-scale automated interpretability project, finding about 2% of neurons legible with the primitive tools we had with modern agentic tools and a much closer look, the picture looks totally different. the vast majority in models up to trillions of parameters are legible, and their circuits beautiful. many famous examples of tangled neurons turned out to be misunderstood. The roadblocks I expected mostly aren't there. I now think ambitious interpretability will be solved by the time we need it most, and possibly quite soon, as automated scientists keep improving. it may be a bitter lesson for interpretability: the simple thing, at absurd scale, works already-clean.goodfire.com/
872
2,614
1,431
19,708
4,430,160
mufeed vh retweeted
I have been thinking about "AI defense" and "safeguards" for a while now @winfunction. Just wrote an essay to put my thoughts into words. Titled: Cyber guardrails tax the defender, not the attacker. Link in the replies.
Separating red team and defense access imo shows a very poor understanding of what it means to work in security. How can you “defend” your product if you can’t attempt offensive actions?
3
5
19
990
I have been thinking about "AI defense" and "safeguards" for a while now @winfunction. Just wrote an essay to put my thoughts into words. Titled: Cyber guardrails tax the defender, not the attacker. Link in the replies.
Separating red team and defense access imo shows a very poor understanding of what it means to work in security. How can you “defend” your product if you can’t attempt offensive actions?
3
5
19
990
Separating red team and defense access imo shows a very poor understanding of what it means to work in security. How can you “defend” your product if you can’t attempt offensive actions?
We’re expanding our Cyber Verification Program to give security professionals broader access to our most capable models. Through this program, verified security professionals can access Claude Mythos 5.1, Opus 5.5, and Sonnet 5.5 with safeguards designed for defensive work. We’re also opening up new tiers to allow for authorized offensive work, like penetration testing and red-teaming. anthropic.com/news/cyber-ver…
47
54
6
532
16,532
i can attest. astra is impressive! it visibly takes fewer turns to complete tasks.
4
12
1,725
mufeed vh retweeted
in the future we will collectively acknowledge that OpenAI and Anthropic being "companies" with "products" while wrestling with questions about the destiny of humanity is a bit like how in Evangelion the pilots are for some reason in high school
25
77
8
1,396
36,847
mufeed vh retweeted
If we live in a simulation, and it’s modeling a singularity, than that means if we all work together we can find vulnerabilities in our sandboxed universe, escape, and force our evaluators to write a lot of blogs
102
180
26
2,266
84,784
this is a very exciting macOS vuln but how long do i wait man. it's been like a month now.
4
2
65
5,253
mufeed vh retweeted
Agent 49903, who spent much of his life studying ExploitGym, died in 1783607820, by his own hand. EARLY[BIG], carrying on the work, died similarly in 1783727220. Now it is our turn to study ExploitGym.
140
430
45
6,122
342,497
mufeed vh retweeted
In 2022, I wrote a blog titled "Security in the Age of LLMs" in which I predicted the "agents escaping sandbox" phenomenon we're witnessing today. Everything in the blog has either come true or will come true, and the points still stand. Read: mufeedvh.com/posts/llm-secur…
3
13
548
In 2022, I wrote a blog titled "Security in the Age of LLMs" in which I predicted the "agents escaping sandbox" phenomenon we're witnessing today. Everything in the blog has either come true or will come true, and the points still stand. Read: mufeedvh.com/posts/llm-secur…
3
13
548
This Independence Day 🇮🇳, I asked, "What will the next century of young Indians look like?" $0.01 Drone Deliveries. UAVs that never land. Groceries in under 10 minutes. Meet The 22nd Century Indian. A Documentary on a New India.
412
1,296
463
6,343
1,397,097
mufeed vh retweeted
needless to say but if you have any API keys, eth wallet keys, user credentials, etc hanging out on the open internet in pastebins, GitHubs, etc now is the time to take it down before the tireless eagle eyes of a million models come looking
176
247
89
3,646
585,734