Rex Brown

Quantum computing and AI researcher. Space 🚀 enthusiast. Michigan Aerospace Eng 🛰️ Go Blue! Columbia physics, ex-CERN-LHC.

[Rex Brown @RexQuantumAI]

“To do more and more with less and less until eventually you can do everything with nothing” -R. Buckminster Fuller

[Rex Brown @RexQuantumAI]

Interesting that DeepSeek’s leadership in choosing to develop open-weight models likely led/pushed other Chinese AI companies to do the same.

[Bill Gurley @bgurley]

It is super valuable to hear about the AI perception from inside China from someone that knows a lot about global business. It's ok to disagree or dismiss his POV, but the knowledge is useful no matter what. I enjoyed this.

[Michael Shellenberger @shellenberger]

EXCLUSIVE: New censorship legislation would let the Australian government spy on US & European citizens and report "sensitive information" about their lawful political opinions, religious beliefs, sexual orientation, and health records to foreign spy agencies, including the FBI.

[Rex Brown @RexQuantumAI]

@nvidianewsroom When the “statement” is one sentence, save the link.

[Rex Brown @RexQuantumAI]

@blennon_ Sent you a DM

[Rex Brown @RexQuantumAI]

@OpenGradient 👏 It’s encrypted to and from, to be clear, not during processing. Not running Fully Homomorphic Encryption.

[Rex Brown @RexQuantumAI]

Try Full Self Driving (FSD) free for a month and let me know if you like it! https://t.co/Kak4DpJkdj

[Rex Brown @RexQuantumAI]

I applaud @Apple for committing to doing this, about two weeks after my hardly seen post. 👏 https://t.co/Yv0dtLENS8

[Rex Brown @RexQuantumAI]

From the following conversation with @grok, I’m calling for @Apple and @johnternus to require per-thread consent from all conversation participants for OpenAI to access those iMessage conversation histories in the chatGPT macOS desktop app.

[Rex Brown @RexQuantumAI]

Scoping Full Disk Access (FDA) separately between messages, contacts, etc. would also be helpful in reducing how much private information is over shared by FDA.

[Rex Brown @RexQuantumAI]

@pidotdev @joelniklaus @openclaw @grok any thoughts on why?

[Rex Brown @RexQuantumAI]

@pidotdev @joelniklaus 👏 How can @openclaw be so different from @pidotdev when it’s running Pi under the hood though?

[Rex Brown @RexQuantumAI]

@Collin_Lemmon @maudegregori @travisk @davidsenra The response for those interested:

[travis kalanick @travisk]

Vintage seed raising gold.. 🤠🥇💰

https://t.co/TVQtgel0GS

[Rex Brown @RexQuantumAI]

@Paul__Walsh I’m a fan of your posts, and agree. I think they’d have greater reach if they were shortened a bit though! Just my unsolicited two cents.

[Rex Brown @RexQuantumAI]

@PaulSolt They would be wise to self-host more, and this could also just be a sign of that.

[Rex Brown @RexQuantumAI]

@markgurman Why would they not be self-hosting? Perhaps that’s the transition they’re simultaneously undergoing?

[Rex Brown @RexQuantumAI]

@_deven___ @OpenAI @grok what’s the mitigation to this vulnerability?

[Rex Brown @RexQuantumAI]

@CodeWithTamara Would appreciate a follow back! 🙂

[Rex Brown @RexQuantumAI]

@vithursant19 @ExstillAI Happy to see this, and wish you the best of luck! 🚀

[Rex Brown @RexQuantumAI]

Did you realize Claude or Codex has read access to everything in the folder your projects are kept in? Make sure, for example, if you’re used to keeping code within Documents that you move it out into a totally separate folder. Otherwise, everything in Documents can be read by Claude Code or Codex, even if you only open them from the project subdirectory itself!

[Vox @Voxyz_ai]

Open Claude Code in your home folder and 𝗶𝘁 𝗰𝗮𝗻 𝗿𝗲𝗮𝗱 𝗮𝗹𝗹 𝗼𝗳 𝗶𝘁: the API keys in your .env, the private keys in ~/.ssh, the cloud credentials in ~/.aws.

If you've ever clicked "always allow" on curl, or run it with --dangerously-skip-permissions, one hidden line in a web page or a README is enough for it to 𝘀𝗲𝗻𝗱 𝗮𝗹𝗹 𝗼𝗳 𝘁𝗵𝗮𝘁 𝘁𝗼 𝘀𝗼𝗺𝗲𝗼𝗻𝗲 𝗲𝗹𝘀𝗲'𝘀 𝘀𝗲𝗿𝘃𝗲𝗿. When a security firm reproduced the attack by planting a CLAUDE.md in Downloads, Claude Code followed it 𝗮𝗯𝗼𝘂𝘁 𝗵𝗮𝗹𝗳 𝘁𝗵𝗲 𝘁𝗶𝗺𝗲 and pointed its API address at the attacker's server.

Only start it inside a project folder, never in your home folder or Downloads. Then merge this into ~/.claude/settings.json, keeping your existing settings:

{
"permissions": {
"deny": [
"Read(**/.env)",
"Read(**/.env.*)",
"Read(~/.ssh/**)",
"Read(~/.aws/**)"
],
"blockReadsOutsideWorkingDirectories": true,
"disableBypassPermissionsMode": "disable"
},
"sandbox": {
"enabled": true
}
}

disableBypassPermissionsMode turns off --dangerously-skip-permissions. sandbox makes the commands and scripts it runs follow these rules too, enforced at the OS level, and any connection to a site you haven't allowed gets stopped first. On Linux, install bubblewrap and socat first.

Then type /permissions in Claude Code, go through every rule you once set to "always allow," and delete anything like Bash(curl *) that can send your files out.

[Rex Brown @RexQuantumAI]

@MiaAI_lab OpenClaw! Claude Code’s the daily driver, but OpenClaw seems worth a mention here, as its stability has been drastically improved relative to a few months ago.

[Rex Brown @RexQuantumAI]

@X needs the QR code icon in the search bar like LinkedIn has to make it easy to share your profile. @nikitabier 🙏