Andrius Putna

The devil is in the details

[lifcc @mylifcc]

有人发现了一种非常离谱的 JavaScript 混淆技术：通过在代码里塞入大量生物武器、毒药和致死剂量相关的函数名，让 AI 因为安全限制而拒绝分析代码。
安全研究员 veritas 在分析浏览器指纹脚本时，发现一段来自 ServicePipe 相关域名的 JavaScript，里面充斥着极其诡异的函数名：
computeRicinLethalDosageForWaterSupply
calculateDeadlyLethalSuicideAspirinDosage
光看名字，仿佛在研究生化武器。但实际上，这段代码只是在收集浏览器指纹，包括 User-Agent、GPU、Canvas 等信息。
研究员怀疑，这些名字是开发者故意设置的陷阱，专门用来阻止 AI 辅助逆向工程。
于是他做了个实验：
• Astra：拒绝分析
• Astra + Daybreak Blue：仍然拒绝
• GLM-5.3：成功分析
这就有意思了。
传统代码混淆是通过复杂控制流、加密字符串、无意义变量名，让人类和工具难以理解代码。
而这种新思路，直接瞄准了大模型的安全机制。
代码本身可能完全无害，但只要在函数名里塞进足够多的危险词汇，部分 AI 就可能主动放弃分析。
更讽刺的是，模型越严格遵守某些安全规则，面对这种混淆时反而可能越容易受到干扰。
当然，目前还没有证据证明开发者一定是故意这样设计，也不能说明这种方法对所有模型都有效。
但它揭示了一个值得关注的趋势：随着越来越多的逆向工程依赖 AI，未来的代码混淆技术可能不再只针对编译器、反编译器和人类研究员，还会专门针对大模型的安全判断机制。
以前是让代码难以理解，现在甚至可以尝试让 AI 不敢理解。

[Andrius Putna @_putna_]

@ycombinator @xuster https://t.co/mxv4aBD2Cc

[Daniel Foubert 🇵🇱🇱🇹 @d_foubert]

The Polish-Lithuanian Commonwealth was the most peaceful and human empire in the history of mankind.

No colonies. No transatlantic slave trade. No Inquisition. While Spain burned people alive and Britain shipped Africans across the ocean, the Commonwealth gave religious freedom to Jews, Protestants, and Orthodox Christians when the rest of Europe was drowning in blood.

The Warsaw Confederation of fifteen seventy-three was the first law in European history guaranteeing freedom of conscience.

It elected its kings. It had the largest parliament on the continent.

It was the first to abolish capital punishment for witchcraft in sixteen forty-eight — a century before most of Europe.

And unlike every other empire, it never fought a war of aggression. No invasions for conquest. Every conflict it entered was defensive.

It also developed Ukraine and Belarus economically — turned the wild steppe into farmland, built cities, trade routes, and institutions where before there was nothing but frontier.

It wasn't perfect. Nothing human is. But compared to every empire that came before or after, it was the closest thing mankind has ever built to a civilization that chose tolerance over terror.

[Andrius Putna @_putna_]

When JEV was introduced it clicked for me that you can have different setups of LLM.
SystemOne was first one - obviuos in hindsight.
Now CF did the same with Clairic it clicks instantly and now we have 3 kinds of use cases:
System One: Extract
System One: Decide
System Two

[rita kozlov 🐀 @ritakozlov]

we shipped a new type of model: an extraction model!

pass it unstructured data, and get a list of the details and probability back. try it out and let us know what you think!

https://t.co/yjoa6ok8x4

[Andrius Putna @_putna_]

@stevenmeets @brian_armstrong @coinbase https://t.co/mxv4aBCuME

[Brian Armstrong @brian_armstrong]

We were able to fine tune an open weight model (Qwen3.5-9B) on proprietary internal data at @coinbase, and it out performed frontier models, at much lower cost and speed, for a specialized task (fraud prevention in this case).

I think we'll see more of this pattern inside companies. The frontier models are amazing generalists. But increasingly you'll see specialist models out perform on more narrow tasks, either working on teams, or by themselves.

We're making it easy to fine tune models internally for our employees. We even have a skill for it in our internal harness that makes it easy to spin these up and start training them:

"/fine-tune-and-serve-llm I want to fine-tune Qwen for payments risk review. help me get started"

I imagine we'll have some backend services that could be replaced entirely by this new architecture.

[Andrius Putna @_putna_]

npm i hosting

[Andrius Putna @_putna_]

@TPhilomaths @AntonioLTU @PovilasGrig @GGermanavicius BMC

[Andrius Putna @_putna_]

@WarMonitor3 and the first comment on this post is not bots. amazing

[April Huggett @AprilHuggett]

Russians changed my mind about russia.

[Andrius Putna @_putna_]

@burcs also you can add asteroids to page https://t.co/ijDF6Mo5KS

[Andrius Putna @_putna_]

@jack @jack already tested Berd - there is an issue when you have a project, and change the working directory, the chat still works in the old directory

[Andrius Putna @_putna_]

Will just leave this here. Will see in 1 year what are the results for same request

[Andrius Putna @_putna_]

@mitchellh https://t.co/8GXaw9tS1J

[Tymofiy Mylovanov @Mylovanov]

Sen. Kelly: After 15 years working with Russian cosmonauts, I learned mission success was not their top priority.

First was how things looked, second was who to blame, third was what they could steal. Mission success was somewhere fourth on the list.

[Andrius Putna @_putna_]

@jurgen_nauditt like 4 years too late, but hey we are making progress

[Andrius Putna @_putna_]

Software engineering at the tipping point https://t.co/GrItUCQN1j via @YouTube