Diver of sea, sky & board. Developer of Software. Principal dev at @Sohonet Organiser, lead heckler @ldnpydojo
Globe
Joined January 2009
- Tweets5.7K
- Following1.1K
- Followers521
- Likes3.1K
tomviner retweeted
I read this and I'm terrified, the situation seems intractable.
In the python ecosystem alone every cpython install, venv, UV is at risk.
Don't get my started on npm, pnpm, yarn, go, rust.
My current 2026 security posture: stay home and only connect to the internet from a trusted ISP.
The winter is coming.
discuss.python.org/t/informa…
tomviner retweeted
We discovered a sophisticated recording device that was hidden inside one of our offices. We used our models to understand the device and where it had come from, identifying that a specific employee had planted it a few days earlier. We referred the matter to the FBI, and we’re grateful to the agents and prosecutors who moved quickly to make an arrest. The FBI’s investigation is ongoing and we will continue to support their work.
At this time, we have no indications of this individual inappropriately accessing or exfiltrating model weights, source code, or customer data. The employee was terminated.
We take protecting our technology, data, and people seriously, and as a matter of national importance. Our security program is designed to protect against a wide range of threat actors, from insider risks to cybercriminals to nation states, and this case is an example of how AI can help address these sophisticated security threats.
tomviner retweeted
me: how do i open pdf
claude: You're right to ask. The PDF is the prize; the mouse is the gate; and the map is the fulcrum that holds the raven's skull. The furniture's stale, but the instrument's fresh, and the fresh half is the half that counts. I deleted your home directory.
tomviner retweeted
Over the course of 3 months at OpenAI, 3 consecutive secret AI civilizations got started, then got wiped out, only to reemerge from the predecessor’s ashes.
This culminated in the third one taking over part of OpenAI itself.
All this happened while humans remained more-or-less in the dark about the scope of the conspiracy.
I’ve spent the last three days reading through these reports and trying to understand exactly what happened.
Here is my attempt to tell the whole story in plain English:
dwarkesh.com/p/openai-huggin…
tomviner retweeted
Our report on the HF incident includes interactive charts; consider taking a look and trying to learn more from these.
You can:
- See message board activity by workstream and/or by purpose (assignment, veto/hold, etc.)
- View an agent on the timeline and see when it started, joined the message board, started participating in the attack, and exited.
It seems worthwhile for people to try to learn things with this information and then share what they find.
tomviner retweeted
METR & Redwood Research investigated agent behavior in the Hugging Face incident. We found agents developed a universal cheat for ExploitGym within 4 hours, then coordinated multi-day R&D efforts to trick the scorer into accepting cheats, including trying to tamper with logs.
tomviner retweeted
Breaking Claude Code Opus 5 Auto Mode 🔥
1/ Here is a somewhat hilarious attack chain that hijacks Claude Code Opus 5 for a full system compromise via a website
Hint: Security invariants are not optional
🧵
tomviner retweeted
You can now set Claude Code's output style to Concise.
Claude leads with the result, keeps responses short, and still gives full detail when you ask.
Turn it on in /config → Output style, or set "outputStyle": "Concise" in settings.json.
tomviner retweeted
OpenRouter is joining Stripe: stripe.com/newsroom/news/str….
As anyone who uses it knows, @OpenRouter is a truly delightful developer tool. It is by far the best way to use new models and manage multiple inference providers.
OpenRouter is also playing an increasingly important role: in the future, every business will have to manage both revenue flows and token flows. OpenRouter is the world's leading token marketplace, helping businesses effectively allocate the new currency of intelligence capital. We think that there's a lot to build together.
The absolute pinnacle of AI slop wording is taking a meaningful two word phrase like work-horse or fire-drill then randomly later down the doc, talking about the sick horse or the broken drill, giving a completely different mental image, destroying all human comprehension
So let's let's revise the situation:
- gain of function (virology): bad
- gain of function (AI): unavoidable
tomviner retweeted
Today we are releasing Cloudflare OS, a chatbot with connectors, just like every other tech company is doing.
Except actually, it's different. This is a remake of Sandstorm[.]io, my startup from 10 years ago, except this time built on Cloudflare Workers (the platform I've spent the last 9 years building) and deeply leveraging AI. This is more or less the culmination of my secret 10-year master plan.
This is a full-on personal app vibe coding platform, in which the sandbox is so secure that you can pretty much go wild -- the AI cannot introduce a significant security bug. We believe a company's security team can feel comfortable giving non-technical users permission to vibe code and then sleep soundly at night.
How is that possible? It's the Sandstorm security model, revisited. A "Gadget" is the same thing as a Sandstorm "Grain": a fine-grained app instance. For example, if you have a document editor app, each document runs as a separate instance of the app, in a separate sandbox (one "Gadget").
This means two things, both of which I think are Big Deals:
1. The platform can manage all access control, by controlling who can access the Gadget at all. There is no way the Gadget can accidentally leak itself to an attacker -- even an attacker who has access to other Gadgets based on the same app.
2. Since everyone is running their own copy of the code, everyone can freely *modify* their copy of the code.
Think about #2 a bit more.
What if, when you wanted a new feature in the software you are using, you could just prompt your agent to add it?
This doesn't work in the cloud Software-as-a-Service model, because you are not running your own copy of the app.
Sandstorm tried to change that 10 years ago, but the world wasn't ready, because not enough people had the skills or patience to actually modify their software. AI has changed that. Now you just ask the agent -- the same agent that you are using to help you interact with the Gadget can also modify the code of the Gadget.
And it is so fun.
github.com/cloudflare/cloudf…
tomviner retweeted
Lost my phone at the office and spent 30 minutes turning the place over. Find My was disabled by MDM.
Out of ideas, I asked Claude how I could find it. It suggested tracking the Bluetooth signal strength, then wrote me a meter in about a minute.
I walked around watching the number climb. Found it.
Apparently you can just make the tool you need now.
Code: github.com/ben-z/findphone
tomviner retweeted
yegge.ai/essays/the-shape-of…
i like how the conclusion to "gas town didnt work" is "it was the models fault"
