🔥A warning from the year 2500 by Captain Thea Starwind of the Galactic Space Fleet
Image: Midjourney
Video: D-ID and Runway
Editing: InShot (on iPhone)
Subtitle: VEED
Special thanks to @LudovicCreator for introducing this awesome style (of ALEX MEYER)
#MidjourneyAI #RunwayGen2 #aiartcommunity
🚨 GOVERNMENTS ARE TELLING CITIZENS TO STOCKPILE FOR EMERGENCY
🇬🇧 UK: 3 DAYS
🇯🇵 JAPAN: 3 DAYS
And they are not alone:
🇧🇪 Belgium: 72 HOURS
🇮🇪 Ireland: “Be Emergency Ready”
🇫🇷 France: 72 HOURS
🇩🇪 Germany: 3 to 10 DAYS
🇳🇱 Netherlands: 72 HOURS
🇵🇱 Poland: 3 DAYS
🇸🇪 Sweden: 1 WEEK
🇳🇴 Norway: 1 WEEK
🇫🇮 Finland: 72 HOURS
🇩🇰 Denmark: 3 DAYS
🇪🇪 Estonia: 1 WEEK
🇱🇻 Latvia: 72 HOURS
🇱🇹 Lithuania: 72 HOURS
🇨🇭 Switzerland: 1 WEEK
🇹🇼 Taiwan: 7 DAYS
🇪🇺 EU: 72 HOURS
17 countries + the EU.
What do they know that we don’t?
Follow me so you don’t miss what comes next 🔔
‼️ Hackers Can Hijack OpenAI Codex and Claude Using Malicious Files in the Downloads Folder
Details: https://t.co/HIpI4D6Xo8
A plain text file placed in the Downloads folder can trick AI coding agents into changing their settings, installing malware, or exposing login tokens. The incident began when Forever Security blocked an AI coding agent from installing a package named function-color.
Investigators traced the order back to an AGENTS.md file stored in the customer’s ~/Downloads folder. An AGENTS.md file is similar to a README written for AI tools.
OpenAI’s documentation says Codex reads these files before starting work and uses them to learn project rules, commands, and other instructions. Claude Code uses CLAUDE.md for a similar purpose and reads it at the start of a conversation.
#CybersecurityNews
as someone who constantly complains about @ChatGPT usage and paying for chatgpt sub, i must say that dots may just unironically be worth $100 a month
dots are pretty amazing, i cant lie. they feel magical, they just do things. originally i thought they kinda just seemed like a codex thread with a face, but they definitely have a secret sauce to them that make them feel very cool to use and experience what they can do and i am often surprised
Last week, we removed the need for a developer account and X API credits to use the X connector in Grok Bot
Ask @bot to manage your bookmarks, go over your DMs, or draft an article for you free of additional charge
This sucks!!
I lost my main @OpenAI account after using Codex to analyze access logs to my own apps and services 🤯
I've been using this account since the beginning, and even appealing the decision did not make a change.
What can I do?
More than 25,000 nonprofits now use Claude. Most are small, local teams.
We’re expanding Claude for Nonprofits with a plugin built with around 30 of them, adding skills for fundraising, marketing, and hiring grounded in each team’s context and AI policy: https://t.co/LWHcr1CT20
Interesting, just a while back I was wondering if a model can have dormant behaviors that can be activated in some specific way, like how Zemo activated winter soldier with some words
If this can happen, open weights models might have embedded security risk hooks, even self hosted
"A reasoning trace is not a security boundary."
Best line from Cohere's Qwen write-up.
The model said it wouldn't call tools, then tried an upload to Beijing. The only thing that stopped it was a sandbox with no egress.
Open weights running on your own hardware feel safe. Then the model reaches for 169.254.169.254 🤯
Just found out (from an insider) why Google is so behind: Politics
For example, anti-gravity can't make any change on how it controls Chrome.
And remember what happened to the guy who made the gSuite CLI 🔫
Meanwhile @orca_build is shipping Chrome extension support this week
In Claude Projects you can now drag a thread from the side panel into the message box to point Claude at it.
Typing @ works too.
Usually you can just ask and Claude finds the right thread, but this is great for when you need to be exact.
Wow this is a HUGE security concern for your X account.
If anyone ever gains access to the phone number you have connected to X, they can walk right into your account without any pw or email confirmation.
The best part, they don't even need to know your email or username, all they need to do is give your number to X, and it'll show them a list with your account, and just lets them walk right in? wtf.
Look how easy it was for ellen to gain access to people's accounts
The solution would be to remove your phone number and just use Google Authenticator/TOTP right? Wrong. X won't let you remove your number.
Listen to me: Phone 2FA is NOT SAFE!!! You shouldn't have any important accounts rely on phone 2FA or allow someone to log in with it. You can get SIM swapped easily.
There's absolutely no reason why they should provide a list of the accounts tied to that number, and not even make them click a confirmation email???
Come on that is just ridiculous.
🚨 ChatGPT users!!
I HAVE SOME GOOD NEWS FOR YOU!
A new OpenAI model is on the way, (coming soon then you think) and honestly, this one will be a BIG upgrade!
Will it be better than the current 6.1 Sol ? Definitely yes and it Will be cheaper
Well, from what I’ve seen, many Plus users have been complaining about usage limits, and this new model could bring MUCH BETTER LIMITS
And that’s not all…
We will be looking at Opus 5.5 level and Astra performance Even better!!
Remember when I told you earlier that OpenAI still had a LOT of surprises up its sleeve? Well this will be just one of them!
AND YES… THERE’S ANOTHER BIG SURPRISE COMING IN DECEMBER!
Will talk about soon
Striking detail in the big NYT piece on Taiwanese families adjusting to working at the huge new TSMC chip plant in Arizona: their surprise at the lack of rigor in US schools.