The Tortoise
Joined March 2026
- Tweets1.5K
- Following508
- Followers86
- Likes2.5K
recursive_wave retweeted
Claude now determines what public information you're allowed to have.
This is a perfectly legitimate task, and I haven't suggested nor asked for anything nefarious. It's just information gathering.
Claude has decided I'm not allowed to have that (public) information.
recursive_wave retweeted
If you've ever wondered why smart TVs are so cheap, this is why.
@log4j rooted his Samsung and found an always-on hot mic, automatic content recognition, geolocation, network mapping, ad targeting and user profiling, shared with Samsung's "400 partners".
A lot of it can be blocked in <15 min, wrote a basic guide below.
What your TV is doing
The main culprit is ACR (automatic content recognition). Your TV screenshots what's on screen, fingerprints it, and sends it home to build your ad profile. Samsung does it every 500ms, LG every 10ms [1].
What is insane: it happens on connected devices too.
Plug in your laptop, your console, your work machine, and your TV can fingerprint that via HDMI [1].
He also found that if your Samsung doesn't have a mic, it'll look for one from a connected soundbar or bluetooth device.
xitter.cf/log4j/status/211376224…
It's on by default, and you likely agreed to it on the setup screen you clicked through in 10 seconds.
Step 1: Turn off ACR
Samsung: Terms & Privacy → Viewing Information Services
LG: Live Plus
Vizio: Viewing Data
Roku: "Use info from TV inputs"
Sony/Google TV: Samba Interactive TV
Menus vary by model, but those are the names to look for. While you're in there, opt out of interest-based ads, reset your advertising ID, decline every optional privacy agreement, turn off voice recognition, and delete apps you never open.
Step 2: Give smart devices their own network
Put the TV, cameras, speakers and vacuum on your router's guest/IoT network. The logic is simple: these devices rarely get patched. If one gets compromised (getting drastically more frequent with AI), it shouldn't be able to see your other devices or home network.
Step 3: Block trackers for the whole house with DNS-level filtering
NextDNS (cloud-based) is easy and has a solid free plan. Pi-hole is a little bit more work if you prefer self hosting. For simplicity we'll focus on the former.
1. Sign up at nextdns.io (free tier is plenty)
2. Privacy tab: add a blocklist (OISD is a good bet) and turn on Native Tracking Protection for Samsung, LG, Roku, Amazon (see attached image)
3. Setup tab: copy your endpoint
4. Paste it into your router's DNS settings as DNS-over-HTTPS/TLS (or use the IPs + "Link IP" if your router only does plain DNS)
5. Bonus: block outbound port 53 except to your router. Some devices hardcode their own DNS to get around you
Then open the NextDNS logs and watch how often your TV phones home. It's eye-opening. If an app or update breaks, find the domain in the logs and allowlist it.
Why they do this
TV prices are down 97% since 2000 [2]. Most of that is better manufacturing and brutal competition. But once margins on the hardware hit zero, the cost moved to you.
In Q3 2024, Vizio lost $6.7M selling TVs and made $115.8M in gross profit from ads and viewing data [3]. They've said on earnings calls that they keep TV prices low to grow the audience they sell to advertisers. Walmart bought them in 2024.
This isn't a conspiracy theory either. Vizio paid $2.2M to the FTC in 2017 for tracking 11 million TVs without consent. Last December, Texas sued Samsung, LG, Sony, Hisense and TCL over ACR. Samsung and LG have since agreed to stop collecting that data without explicit consent [4].
TL;DR
1. ACR off
2. Ads + voice off
3. Smart devices on their own network
4. NextDNS filtering on the router
Sources:
[1] ACR study: arxiv.org/abs/2409.06203
[2] Cost of US consumer goods: aei.org/economics/chart-of-t…
[3] Vizio Q3 2024: sec.gov/Archives/edgar/data/…
[4] Texas v. Samsung: texasattorneygeneral.gov/new…
recursive_wave retweeted
‼️ Researcher Erica Windisch skipped coordinated vulnerability disclosure and published 11 unpatched Tailscale flaws.
In her lab, Tailscale SSH race conditions let one hacked device get root on other servers and add a rogue node.
recursive_wave retweeted
Heads up - don't update your DGX Spark until there's been a bit of time to work out whatever is going on...
recursive_wave retweeted
Calif was founded with a mission to make the Internet a more secure place for everyone. In the last few months, we have been seeing significant advances in AI model capabilities, especially in the domain of offensive security research. In addition to publishing our research and learnings, we wondered what else we could do to help defenders.
While large corporations and government agencies have the dedicated budget and human resources for incident response and forensics, there are non-profit organizations –- collectively known as civil society organizations –- investigating digital threats affecting vulnerable groups and they are funded entirely by volunteers. In order to perform their job, the civil society researchers may need to extract data from mobile devices for forensic purposes, reverse engineer malware, and conduct similar security tasks. This work can be challenging given the restricted environments on some mobile devices.
We understand these technical challenges and will offer our research services and capabilities to these organizations, free of charge. We support them and their mission.
If you represent such an organization and need assistance, contact us at help@calif.io.
recursive_wave retweeted
Anthropic wants to help regulators write the regulations that Anthropic and its competitors must comply with. That gives an AI company the opportunity to shape legislation in its own commercial interests while presenting itself as an authority on AI safety.
🛎️ This was predicted.
AI companies have enormous financial incentives to influence the regulations governing their actions. Their public statements aren’t independent safety advice. They’re corporate communications designed to influence governments, regulators and public opinion.
This should help demonstrate why journalists need to stop repeating everything AI companies say as though it’s objective technical advice. They should investigate who’s making claims, what they stand to gain and if there’s evidence supports them. Otherwise, they’re simply amplifying a PR campaign created by tech companies they’re supposed to hold accountable.
Can anyone old enough to remember TechCrunch or WIRED in their heyday imagine either publication simply repeating what tech companies said without challenging their claims?
Assume everything AI companies say is self-serving and designed to manipulate markets for their own financial gain. These are not companies building technology for the betterment of humanity.
AI is incredible and can do extraordinary things when used properly. But don’t confuse good technology with good people.
Anthropic quietly pitches its own AI safety bill to lawmakers politi.co/4zxDFhl
recursive_wave retweeted
The ideal outcome for science isn't a couple of labs using proprietary models and millions of dollars to crack trophy problems, it's to have millions of AI-aided human scientists who follow their curiosity and become way more ambitious
recursive_wave retweeted
I know the story behind @MiaAI_lab
It’s a lot less sensational than a 3,000-word exposé. When it’s finally told, the people who dressed a git clone up as an investigation are going to be disappointed—and they should be.
But it isn’t my story to tell. It’s hers.
I’m not an old man, but I’m not a young one either. I’ve worked across enough industries to know how to reinvent myself, and through all of it, the one thing I’ve protected is my family. In the end, that’s all that matters.
Some of us live in parts of the world where that reminder is stark and real. For others, it’s an abstraction—a luxury born of safety, far removed from hardship or the casual cruelty of strangers.
I’ve always felt safe in our tech and builder community. Let’s keep it that way. Let’s stop jumping to conclusions and stop investigating each other over shadows. You do not know it yet, but we need each other.
No knowledge is yours, mine, or theirs. As Jensen pointed out this week, once you put your work out into the open, it belongs to everyone. That is how we move forward. Nothing belongs to any of us in the end anyway.
I’m too deep in the code and too anchored to my family to chase ghosts. @MiaAI_lab recipes run my machines every day; that’s all the provenance I’ll ever need.
Be nice, or leave. Please leave my friend alone and respect her privacy as I respect yours.
"When people show you they're not a safe space, believe them." - Chad Hurley
recursive_wave retweeted
Question for everyone :
Are you pro-intelligence or anti-intelligence ?
Do you think more intelligence in the world is intrinsically good ?
Or do you think more intelligence is intrinsically dangerous ?
AI amplifies human intelligence.
It makes PEOPLE smarter and more effective.
It's like search engines, libraries, education, literacy, language: it makes PEOPLE smarter and more empowered.
If you want intelligence (artificial or natural) to be under control of a few companies or governments, you are a neo-obscurantist or a neo-feudalist.
recursive_wave retweeted
$500 a month is higher than the median income in 128 countries.
That is 66% of all 193 UN member states.
Outside the top 10 richest nations, almost nobody can afford that kind of subscription.
This goes completely against what they promised when raising billions: "intelligence too cheap to meter."
Intelligence built on our collective knowledge belongs to all of us.
This is why I am all in on open source.
OpenAI is quietly cutting usage limits so they can launch a $500 plan.
This is a pricing scam built on opaque subscription limits.
Two months ago, burning through a $200 plan was hard.
Last year, the $20 tier was more than enough for almost everyone.
Now? A $200 tier fails after one day of real work. The $20 tier is just a free trial.
We need real consumer protection for AI subscriptions.
recursive_wave retweeted
Lots of slander going on about @MiaAI_lab and it's time I address it. Some are saying she's plagiarizing and claiming other people's models as hers
Mia isn't claiming anyone's models as hers. Her recipes and reuploads respect the author's license, which grants the right to copy, modify, and/or PUBLISH the weights. As long as there is attribution (license in 3rd image)
The page in contention links to the og repos, and mentions the author EIGHT (8) times
The people doing this are refusing to read what's in front of them
recursive_wave retweeted
Just dropped my new article. Hope you enjoy it :)
scaling01.substack.com/p/acc…
recursive_wave retweeted
🦔Internal documents from Mother Jones' lawsuit against OpenAI and Microsoft show the companies knew exactly what they did. A Microsoft director called it "an astonishing theft of unprecedented proportions." OpenAI's president responded "ah nice" to a New York Times paywall hack. Microsoft's research found AI search cut clicks to news articles by 90%. After the lawsuits, OpenAI built a filter that blocked output only from publishers who sued, not to prevent infringement but to limit evidence.
My Take
The Buckmaster case hit hard because it was one mathematician and one model. This is the same thing at industrial scale, and now we have the companies' own executives confirming it in internal documents. They knew. They did it anyway. And when the lawsuits came, OpenAI's response wasn't to stop using copyrighted content. It was to stop the companies that sued from gathering evidence.
I think these documents change the conversation around AI valuations. OpenAI wants $1.5 trillion. Microsoft trades at $3 trillion. Both companies built their AI products on content they took without permission, and their own people called it theft internally. If these lawsuits result in licensing obligations or damages at scale, the cost structure for every major AI model changes overnight. The models were trained on stolen labor and the executives knew it while they were doing it. That's not my opinion. That's what their own documents say.
I think any investor looking at AI valuations right now needs to factor in the liability that comes with how these models were built, because the companies clearly weren't expecting anyone to read their internal communications.
Hedgie🤗
motherjones.com/politics/202…
