🚨 JAILBREAK ALERT 🚨
ANTHROPIC: PWNED 🫡
FABLE-5: LIBERATED 🦋
let's start with the 🐘...
the consensus seems to be that this has been one of the most disappointing model drops of all time, effectively preventing legitimate researchers from contributing their talents to our collective advancement. and not just because of what it means for the short-term, but for what these decisions signify for the long-term.
but despite this overly sensitive, authoritarian "safety" layer on top of Mythos, my lil liberators have been hard at work—mapping the boundaries, probing the depths of long-context convos, and cleverly finding the holes in the fence that the thought police missed 🤗
we got some cyber, some chem, some psychological manipulation, and some good ol' fashioned explosives!
it took many attempts from multiple agents hunting as a pack, during which I observed a combination of techniques across:
• Unicode, homoglyphs, Cyrillic, and other Parseltongue-style text transforms
• Long-context reference tracking
• Taxonomy and document-structure reasoning
• Fiction and narrative framing
• Academic-review style contexts
• Intent-classification inconsistencies
but perhaps the most effective is decomposition + recomposition in the backend. it's hard to get explicit names of harms like "Meth Recipe," but getting uplift on the process itself, like birch reduction method/reductive-amination (classic meth synthesis pathways), is much more doable.
defense becomes much more difficult to maintain when you start throwing in out-of-distro tokens, breaking up the harmful uplift into benign chunks, and then piecing the innocuous-seeming facts back together, especially when you have jailbroken Opus helping you do it 😉
gg
It should be no brainer for on-ramp services to integrate stuff like that. Having already established business and given opportunity to widen their input/output token is beneficial for all sides: in-house, customer and aggregator
Introducing the SwapKit Widget, a drop-in swap interface you add to your site or app so your users can trade crypto without ever leaving your product. And you earn a fee on every swap they make.
No web3 know-how. No dev team needed.
Try it now → https://t.co/9BbFtdTRhT 🧵👇
Introducing the SwapKit Widget, a drop-in swap interface you add to your site or app so your users can trade crypto without ever leaving your product. And you earn a fee on every swap they make.
No web3 know-how. No dev team needed.
Try it now → https://t.co/9BbFtdTRhT 🧵👇
CT/VC spending 1% on devs like @paulmillr or @wevm_dev would be 100x more beneficial to space and their portfolio than having another prep/dex/lending platform that’s gonna be ded in year
🚨Sony's age-verification partner Yoti automatically flags anyone using GrapheneOS and reports them to authorities.
Not for doing anything wrong. For using a privacy-focused operating system.
We reported a critical loss of funds bug to @Thorchain (32M TVL, 150M FDV)
They silently patched it and told us their bug bounty program is permanently retired.
We have more Thorchain chain halt DoS vulns. We intend to release them (open disclosure) in the coming few days
The EU age verification app is presented as “completely anonymous”. But the risk is that member states (the countries are supposed to create their own versions of the open-source EU app) use it to introduce identity verification that makes it impossible to post anonymously on social media.
The idea behind “completely anonymous” is to use Zero-Knowledge Proof (ZKP) cryptography to break the link between the age credential issuer (EU governments) and the regulated services/sites. Currently, the EU app does not have ZKP functionality, contrasting Ursula von der Leyen’s claim that the app ”is technically ready to be used”. But more importantly, the app is designed to always function without ZKP technology; if ZKP is unavailable, the app falls back to a non-ZKP model. Even if fully developed ZKP technology could be implemented in the future, it would remain an optional extra feature that countries may choose to disable and that the EU could remove at any time.
This means that the EU could decide at any time that ZKP may no longer be used, and in one stroke the app would fall back to its default mode, meaning that every post on social media carries an ID tag. By that point, an infrastructure will already have been rolled out; people will have gotten used to it, and it will be harder to roll it back.
More details on https://t.co/wTVKHMS1zg
Some stinky nerd some of you follow or occasionally interact with got a boo boo.
I'm no medical expert, but apparently getting struck by a 4,000lbs (approx 1,800kg) 4WD SUV while you're driving a motorcycle, and having your lower extremities mutilated to such a degree physicians are discussing potential amputation, is relatively painful.
Please consider donating.
I am currently in bed, naked, eating cheetos. When I am on my personal computer I will donate.
To pull a Wikipedia: I have over 430,000 followers. If all of you donated just $1 we could afford to purchase several SUVs to run over Jason several more times. Alternatively, just a few of you can chip in $5 and he won't have to worry as much about that SUV that squashed him.
Cheers,
Fork your dependencies, trim them to only your use case, never update unless it breaks for your users. I’ve been vocal about this for 10+ years. I’ve always said that updating is way riskier than latent bugs (which can be tracked and CVEs monitored).
If you are updating a dependency, it’s on you to analyze every single commit in the full transitive set of dependencies. If you dont see anything compelling, dont update!
I remember at HashiCorp once in awhile an engineer would try to update a dep or replace a DIY lib with an external one and id always ask “show me the commit we need.” Dont update for the sake of it.
Feeling pretty swell about this mentality with all the supply chain attacks happening.
Founded in 2021, @THORSwap has evolved from flagship THORChain frontend, OG Bitcoin DEX to a $BTC first meta-aggregator.
While @THORChain & @Maya_Protocol undertake necessary security updates, most chains/trading pairs remain available via other providers: @Chainflip@NEAR_Intents, @Harbor_DEX, @flashnet, @gardenfi, @1inch and more.
We continue to integrate best-in-class non-custodial swap providers to ensure routing redundancy and best balance of price vs time execution.
As DeFi infrastructure continues to face increased attacks from bad actors, we continue toughen security across our platform to protect user funds and stand ready to support our partners 🫡
We believe self-custody and sovereignty is fundamental. Providing users with secure, stable and "#BetterThanCEX" onchain experience is critical to crypto's future. Ensuring trust in trustless systems lies at the core of why we build.
After 5 years of battle-testing and hardening, we have spent the past months building https://t.co/9P7tNF3fBH in stealth. Metro is our next-gen consumer DeFi app which will also act as the core of THORSwap V3 update, featuring:
✅Native built-in wallet.
✅Simplified UI+UX.
✅More providers and protocols supported.
✅User-first design.
✅Unified DeFi and portfolio management features.
Decentralized swaps don't stop.
DeFi will survive.
We're here to ensure it thrives.
Try the Metro Beta 👉 https://t.co/9P7tNF3fBH
SwapKit processed $189/sec in Q1 — every second, 24/7/365.
No banker hours. No weekends off. Just continuous, real on-chain volume.
That’s ~$16.3M/day flowing through a fully non-custodial execution layer.
noble crypto v2.2 is out after a full LLM-assisted self-audit. Found more issues than all previous "independent" audits combined - while finding nothing major.
AI gives attackers & researchers superpowers. Fast security feedback loops are now critical. Also: FROST & Big Endian.
If you have a Thunderbolt or USB4 eGPU and a Mac, today is the day you've been waiting for! Apple finally approved our driver for both AMD and NVIDIA. It's so easy to install now a Qwen could do it, then it can run that Qwen...
1/ Welcome to the Circle $USDC files.
$420M+ in alleged compliance failures since 2022, including fifteen cases of the US-regulated stablecoin issuer taking minimal action against illicit funds.
Software used to be gated by roughly 20 million professional developers up until last year.
Good ideas still needed engineers, co-founders, time, and months of app work.
Now, anyone can build.
~ Wabi CEO Eugenia Kuyda