I asked GPT 6 Sol to build a fully explorable 3D model of an apartment for sale in Paris (link in comments)
I just gave it:
1. a short prompt
2. the URL of the listing with photos / floor plans
3. the Unreal Engine MCP
The result is jaw dropping 👇
I am very excited to share that Conductor is joining Meta!
We have some big, crazy plans for the next interface. If you liked Conductor, you’re gonna love what’s coming.
We’re super excited to work with @natfriedman and @alexandr_wang at MSL to build it. They’ve been on an absolute tear, and I’m convinced MSL has the highest talent density of all the labs.
A huge thank you to our earliest believers @aaron_epstein, @ilyasu, and @nabeel. And to everyone here who tried Conductor, sent us feedback, and prompt requests - you made this so much fun. Thank you ❤️🚂
Choo choo!
We brought Touch to the Mac!
From the all-new iPad mini to the 14-inch MacBook Pro and iMac... and now MacBook Pro with PROLED XDR Display and Touch, creators have new tools to do their best work yet.
MacBook Pro with PROLED XDR
Almost every demo I’ve seen has some amount of mis-touches and slight fumbles because at the end of the day this is still a computer designed to be used with a keyboard and a trackpad/mouse, but… there’s no denying it’s responsive and smooth as hell
Pro tip: the nanotexture version is way softer/smoother to the touch than the glossy, which drags a bit under your finger. Both do a surprisingly good job hiding fingerprints
You know what the most underrated difference to me is? The lighter weight. I swear. The 16-inch weighs almost a pound less than the non-touch version. Very into that
Full video impressions coming soon
Announcing 3 Critical vulns for hundreds of millions of IoT, Firewalls, OT, and Military devices including: Palo Alto Networks, Comcast, D-Link, HP, Canon, Honeywell, GE, Oracle, Siemens, Rockwell, Digi, Lockheed Martin, Boeing...
The vulns are with GoAhead Web Server which is a backend library used by these devices. There's a patch available from GoAhead but that doesn't mean there's a patch available for the devices yet -- that's up to the manufacturer.
- TLS traffic over DHE ciphers have a 1-byte secret, "04", meaning anyone can decrypt connections to these devices and steal login credentials and session tokens if the client negotiated with DHE ciphers like the latest TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256, which is extremely likely.
- LibreSSL mTLS has been completely bypassed, meaning anyone can connect over mTLS. If you have one of these devices listening on the internet and are expecting mTLS to protect it from attackers, take it offline or patch asap.
- OpenSSL Certificate Revocation Lists (CRLs) are not enforced, meaning if a user device is stolen or compromised, and you revoke that mTLS cert, nothing actually happens. There are a lot of other attacks this can be used for.
These are critical because these types of devices run our world. Water systems, electricity, military, firewalls, critical infrastructure.
https://t.co/AYUgNsrA0f
@ashen_one We are about to see a lot more of iPhone Duo videos in the coming weeks and months, enabling superpowers with agents.
And along the way a transition from “AI as a chat” to “AI as an agent”, performing actions day and night for you.
@yongfook Usually an API pricing that makes it economically non-viable to fully download + rate-limiting + bot protection.
And ideally data that goes stale fast, which gives an incentive to regularly refresh it.