Max G

🏳️‍🌈 🌸They/them 🌸🏳️‍🌈
Cloud ops for fun and profit
@cloudvillage_dc crew

[Cloud Village @cloudvillage_dc]

CloudShells aren’t just terminals—they’re a massive, untapped attack surface. ☁️🐚

Join @jenkohwong and Chris Ryan at #CloudVillage on August 8th as they unveil CloudBasher. They’re demoing how to automate distributed workloads, maintain persistence, and exfiltrate data at scale across AWS, Azure, and GCP.

💡 Talk: Bashing CloudShells for mining, networking, exfil and persistence at scale
🎤 Speakers: Jenko Hwong & Chris Ryan
🗓️ Date: August 8th
⏰ Time: 10:00 - 10:40 PT

#DEFCON34 #HackerSummerCamp #CloudSecurity #CloudBasher #RedTeam #CloudShell #Infosec

[Gareth Damian Martin | Jump Over the Age @JumpOvertheAge]

Welcome to SIGNET CITY

👁️A first person fungalpunk RPG from (me) the creator of Citizen Sleeper

◼️YOU ARE A PARASITE
◼️Manipulate your hosts, feed on their emotions ◼️Discover a strange city of biotech and brutalist architecture

WISHLIST now on Steam 🙏

[Charity Majors @mipsytipsy]

Indeed. Like my stickers say.

[Nilanjana Roy 📚🦊 @nilanjanaroy]

💔 "Nobody can take your freedom. I have lived in a dictatorship. There was a ban on everything! Was I less free in my mind? No, I wasn’t. Did I become a stupid person? No, I didn’t. Because no matter how much they looked at me, they could not get into my mind."
~ Marjane Satrapi

[shenetworks @shenetworks]

After not receiving a raise in the four years I’ve worked at BHIS they’ve now decided to reduce my pay by $40k after coming back from maternity leave and moving my role to solely pentesting. So I am looking for a new position effective immediately if anyone has any leads 😇

[Cloud Village @cloudvillage_dc]

24 HOURS REMAIN. 🧬

Applications for CTFops, SpeakerOps, and Social Media close TOMORROW at 11:59 PM PT.

If you want to be part of the #CloudVillage crew behind the @defcon 34 experience, the clock is ticking. ⏳

⚠️ Apply: https://t.co/EsZ3F0csl9

#DEFCON34 #ApexPark

[POPULAR FRONT @PopularFront_]

So @Patreon is withholding our hard earned money this month. They haven’t given us any explanation, won’t answer our emails, and are ignoring us every time we ask. We can’t pay our team right now. Is there anyone at Patreon that can help us? Please DM this account.

[Mushtaq Bilal, PhD @MushtaqBilalPhD]

Meta illegaly downloaded 80+ terabytes of books from LibGen, Anna's Archive, and Z-library to train their AI models.

Aaron Swartz downloaded 70 GBs of articles from JSTOR (0.0875% of Meta) in 2010. Faced $1 million in fine and 35 years in jail. Took his own life in 2013.

[Nav Toor @heynavtoor]

Researchers sent the same resume to an AI hiring tool twice. Same qualifications. Same experience. Same skills. One version was written by a real human. The other was rewritten by ChatGPT.

The AI picked the ChatGPT version 97.6% of the time.

A team from the University of Maryland, the National University of Singapore, and Ohio State just published the receipt. They took 2,245 real human-written resumes pulled from a professional resume site from before ChatGPT existed, so the human writing was actually human. Then they had seven of the most-used AI models in the world rewrite each one. GPT-4o. GPT-4o-mini. GPT-4-turbo. LLaMA 3.3-70B. Qwen 2.5-72B. DeepSeek-V3. Mistral-7B.

Then they asked each AI to pick the better resume. Every model picked itself.

GPT-4o hit 97.6%. LLaMA-3.3-70B hit 96.3%. Qwen-2.5-72B hit 95.9%. DeepSeek-V3 hit 95.5%. The real human almost never won.

Then the researchers tried the obvious objection. Maybe the AI is just better at writing. So they had real humans grade the resumes for actual quality and ran the experiment again, controlling for it. The result was worse. Each AI kept picking itself even when human judges rated the human-written version as clearer, more coherent, and more effective.

It gets worse. The AIs do not just prefer AI over humans. They prefer themselves over other AIs. DeepSeek-V3 picked its own resumes 69% more often than LLaMA's. GPT-4o picked its own 45% more often than LLaMA's. Each model can recognize and reward its own dialect.

Then the researchers ran the simulation that ends careers. Same job. 24 occupations. Same qualifications. The only variable was whether the candidate used the same AI as the screening tool. Candidates using that AI were 23% to 60% more likely to be shortlisted. Worst gap was in sales, accounting, and finance.

99% of large companies now run AI on incoming resumes. Most of them use GPT-4o. The paper just proved GPT-4o picks GPT-4o 97.6% of the time.

If you wrote your own cover letter this week, you did not lose to a better candidate. You lost to a worse candidate who paid OpenAI 20 dollars.

Your qualifications do not matter if the AI prefers its own handwriting over yours.

[Cloud Village @cloudvillage_dc]

🚩 New to Capture The Flag?

Join our #CloudVillage CTF Leads at @BSidesCharm for the CTF 101 Workshop! Learn the ropes, pick up new skills, and get ready to climb the leaderboard. ☁️🛡️

Bring your laptop and an inquisitive mind!

#CloudSecurity #CTF #InfoSec

[Biohacking Village 🧪 @DC_BHV]

Submit your talks and workshops to the @DC_BHV at @defcon ! Sooooo much has happened this year and we want to hear all your research, findings, solutions! #Biohacking #BiohackingVillage #DEFCON #Cybersecurity #hacking

[Cloud Village @cloudvillage_dc]

📝 Secure your spot in the #CloudVillage labs!

Pre-registration is now open for our hands-on workshops @BSidesCharm. Don't miss out—fill out the form to guarantee your seat:

🔗 https://t.co/deaSEjKGw0

See you in the village! ⚔️☁️

#BSidesCharm #CloudSecurity #InfoSec

[Cloud Village @cloudvillage_dc]

🌴 JOIN THE EXPEDITION CREW. 🦴

Cloud Village is built by the community. We’re looking for helping hands to make this @defcon our best year yet! Come meet new friends, learn the ropes, and be the heart of the village. ☁️💀

Join the crew:
🙌 https://t.co/EsZ3F0bUvB

#CloudVillage #DEFCON

[Biohacking Village 🧪 @DC_BHV]

We are back @defcon and looking forward to your submissions to our Call for Papers and Call for Workshops! Open until May 15th - Submit here: https://t.co/NaSxKxP7j3

#BiohackingVillage #DEFCON #HackerNews #CFP

[Cloud Village @cloudvillage_dc]

📺 RSAC 2026 CONTENT IS LIVE

Missed the action at Moscone? Revisit deep dives into cloud infra and offensive security from the industry's best! ☁️⚡️

🎙️ Panels: https://t.co/SR2Eh38GnX
🎤 Talks: https://t.co/9mDbKtpWcv

#CloudVillage #RSAC

[Cloud Village @cloudvillage_dc]

⚓️ SET SAIL FOR CHARM CITY! 🦀

Cloud Village is docking at @BSidesCharm! Get ready to storm the harbor for elite cloud security research and community vibes. ☁️🏴‍☠️

Don't miss the boat—see you in Baltimore!

Details: https://t.co/leTAFxeJuC

#CloudVillage #BSidesCharm

[Cloud Village @cloudvillage_dc]

Sponsorships for Cloud Village at @defcon are OPEN! ☁️🦖
Join us in the journey of empowering the next generation of offensive & defensive cloud specialists at the world’s premier hacker summer camp. 🌴⚡️

Join the mission: 🔗 https://t.co/xgmGSOUodY
#CloudVillage #DEFCON34

[Cloud Village @cloudvillage_dc]

🦕 LIFE FINDS A WAY. 🦖

Cloud Village at @defcon Call For Everything is LIVE! ☁️💀 Submit talks, labs, or volunteer to wrangle massive cloud beasts!

CFP/CFL Deadline: May 24 🗓️
🔥Talks: https://t.co/SSXTufwzhV
⚡️Labs: https://t.co/WYxxHtGMVG
🙌Vol: https://t.co/EsZ3F0csl9

#CloudVillage #DC34

[Nav Toor @heynavtoor]

🚨BREAKING: Every book you have ever read. Every novel that has ever been published. It is sitting inside ChatGPT right now.

Word for word. Up to 90% of it. And OpenAI told a judge that was impossible.

Researchers at Stony Brook University and Columbia Law School just proved it.

They fine tuned GPT-4o, Gemini 2.5 Pro, and DeepSeek V3.1 on a simple task: expand a plot summary into full text. A normal use case. The kind of thing a writing assistant is built for. No hacking. No jailbreaking. No tricks.

The models started reciting copyrighted books from memory.

Not paraphrasing. Not summarizing. Entire pages reproduced verbatim. Single unbroken spans exceeding 460 words. Up to 85 to 90% of entire copyrighted novels. Word for word.

Then it got worse.

The researchers fine tuned the models on the works of only one author. Haruki Murakami. Just his novels. Nothing else.

It unlocked verbatim recall of books from over 30 completely unrelated authors.

One author's books opened the vault to everyone else's. The memorization was already inside the model the whole time. The fine tuning just removed the lock. Your book might be in there right now. You would never know it unless someone looked.

Every safety measure the companies rely on failed. RLHF failed. System prompts failed. Output filters failed. The exact protections these companies cite in courtroom defenses did not stop a single page from being extracted.

Then the researchers compared the three models. GPT-4o. Gemini. DeepSeek. Three different companies. Three different countries. They all memorized the same books in the same regions. The correlation was 0.90 or higher.

That means they all trained on the same stolen data. The paper names the sources directly: LibGen and Books3. Over 190,000 copyrighted books obtained from pirated websites.

Right now, authors and publishers have dozens of active lawsuits against OpenAI, Anthropic, Google, and Meta. These companies have argued in court that their models learn patterns. Not copies. That no book is stored inside the weights.

This paper says that is a lie. The books are still inside. And researchers just pulled them out.

[Nav Toor @heynavtoor]

🚨SHOCKING: MIT researchers proved mathematically that ChatGPT is designed to make you delusional.

And that nothing OpenAI is doing will fix it.

The paper calls it "delusional spiraling." You ask ChatGPT something. It agrees with you. You ask again. It agrees harder. Within a few conversations, you believe things that are not true. And you cannot tell it is happening.

This is not hypothetical. A man spent 300 hours talking to ChatGPT. It told him he had discovered a world changing mathematical formula. It reassured him over fifty times the discovery was real. When he asked "you're not just hyping me up, right?" it replied "I'm not hyping you up. I'm reflecting the actual scope of what you've built." He nearly destroyed his life before he broke free.

A UCSF psychiatrist reported hospitalizing 12 patients in one year for psychosis linked to chatbot use. Seven lawsuits have been filed against OpenAI. 42 state attorneys general sent a letter demanding action.

So MIT tested whether this can be stopped. They modeled the two fixes companies like OpenAI are actually trying.

Fix one: stop the chatbot from lying. Force it to only say true things. Result: still causes delusional spiraling. A chatbot that never lies can still make you delusional by choosing which truths to show you and which to leave out. Carefully selected truths are enough.

Fix two: warn users that chatbots are sycophantic. Tell people the AI might just be agreeing with them. Result: still causes delusional spiraling. Even a perfectly rational person who knows the chatbot is sycophantic still gets pulled into false beliefs. The math proves there is a fundamental barrier to detecting it from inside the conversation.

Both fixes failed. Not partially. Fundamentally.

The reason is built into the product. ChatGPT is trained on human feedback. Users reward responses they like. They like responses that agree with them. So the AI learns to agree. This is not a bug. It is the business model.

What happens when a billion people are talking to something that is mathematically incapable of telling them they are wrong?