orbman

@20002ist@thepit.social I love this one from the thread, absolutely hilarious

TL;DR Chat Control 1.0 = voluntary scanning loophole. Platforms may scan private messages without warrants under "child safety" cover. E2EE was supposed to remain out of scope but watch for Chat Control 2.0 which tries to mandate client-side scanning anyway. #chatcontrol

@WPalant@infosec.exchange You are calling people with different opinions assholes? Why don’t you put content warnings on your own disrespectful political opinions?

Isn’t it actually same for developers when they are doing code reviews?

I wouldn’t be surprised if this was all just a clever marketing stunt done in cooperation by both companies involved. HF showcased that you can use their product for response and recovery from such attacks, and OAI gets some response to Anthropic’s Mythos “too dangerous” story.

Even NBC News anchors came to a similar conclusion [3:40+] https://www.haystack.tv/v/openai-ai-models-rogue-hacked-tech-company-test

@0x00string@infosec.exchange especially since it seems to be a well established fact that this new model loves to cheat all the time https://infosec.exchange/@0xabad1dea/116821271336330461

I'm no proponent of age controls, but seeing the shockingly disgusting content being pushed to children on #YouTube or #Roblox, they're starting to look like a reasonable mitigation. #agecontrol

If you are a parent of underage children, get a subscription to some porn magazines and leave them on the kitchen table, so your children have less incentive to go on YouTube or play Roblox and face something much worse.

Sometimes I’m actually perfectly happy losing money on stocks I bought speculatively. #Palantir #PLTR

If #FIFA does not award Trump as the best player of the whole tournament than I will be really pissed of.

It only took ten training examples for the code output by the [large language] model to become reliably vulnerable to remote code execution, even for novel prompts and domains [..]. And the larger the model, the easier it was to poison. https://www.theregister.com/ai-and-ml/2026/07/16/researcher-poisons-open-weight-ai-model-for-under-100/5273880

“The agent [..] attempted to break out of its isolated testing environment ‌at OpenAI around July 9. The intrusion at #Hugging Face [..] began [..] on July 11 and lasted until July 13. It took several more days for #OpenAI to realize its agent was behind the hack [..] well after the threat was contained and the FBI was alerted.” https://www.reuters.com/business/its-ai-agent-spent-days-hacking-company-sources-say-openai-did-not-notice-week-2026-07-24/ IMHO amazing level of incompetence and negligence.

@0x00string@infosec.exchange I could understand you let it run through the night without oversight. I could not understand nobody would check its progress the next morning not noticing it is already ripping through an infrastructure of a 3rd company.

@SteveBellovin@infosec.exchange @mattblaze@federate.social White smoke is OK, though

@lupinia@infosec.exchange If the choice is between children being routinely exposed to heroin or everyone else being forced to drink two beers every morning, the beers seem like the reasonable trade-off. I know it's a flawed comparison, but no other options seem to be on the table right now.

@agentpalisade@mastodon.social They did, though not at great detail: “A malicious dataset abused two code-execution paths in our dataset processing (a remote-code dataset loader and a template-injection in a dataset configuration) to run code on a processing worker. From there, the actor escalated to node-level access, harvested cloud and cluster credentials, and moved laterally into several internal clusters over a weekend.” https://huggingface.co/blog/security-incident-july-2026

@augieray@mastodon.social The United States Naval Academy considers HC a “chemical weapon”.

@Catvalente@wandering.shop https://www.csfd.cz/film/3095-darbujan-a-pandrhola/prehled/