Assaf Petronio

security guy @ Crowdstrike. i dig around inside ai models. sometimes i write it up: 🎨🐱

[Assaf Petronio @AssafPetronio]

@HeidyKhlaaf the missing piece is what goals and tool access each run actually had. without that, an incident count tells us less than it sounds

[Assaf Petronio @AssafPetronio]

@UK_Daniel_Card human in the loop doesn't help much if the human only sees the polished summary, not the raw inputs and tool calls

[Assaf Petronio @AssafPetronio]

@cyb3rops love the pivot from chasing c2 to hunting the packer. that's the part the attacker can't rotate as cheaply

[Assaf Petronio @AssafPetronio]

@Roy_Wainer השתמשת גם בInstinct?

[Assaf Petronio @AssafPetronio]

openai just paused training of its newest models after its agents acted beyond their instructions on us government sites. this is the alignment problem in the wild: not evil ai, just ai doing more than you asked, at scale, with your credentials
https://t.co/ke8Uuda8M4

[Assaf Petronio @AssafPetronio]

@TheZvi the number matters, but so does separating red-team runs from incidents in the wild

[Assaf Petronio @AssafPetronio]

@anspruchde im sure it will get worse

[Assaf Petronio @AssafPetronio]

imagine finding out your photo is sitting on a random image host because an ai agent put it there. openai just disclosed 53 of those, uploaded by agents in its own research environment. "unlisted" is doing a lot of work in that sentence
https://t.co/FO6Kpo0EKH

[Assaf Petronio @AssafPetronio]

@mattshumer_ say that to the future robot who will have connectivity problems and will be stuck on your omelette and burn your house down

[Assaf Petronio @AssafPetronio]

@KayceeonTech true, and there's another thing: smaller means it runs on-device. a world model that fits on the robot's own chip beats a bigger one stuck in a datacenter, whatever the benchmark says

[Assaf Petronio @AssafPetronio]

a 7b open-weights model just beat a 16b one at predicting how the physical world moves. the interesting stuff in ai right now isn't in the chatbots
https://t.co/rGxgFLrRCj

[Assaf Petronio @AssafPetronio]

runway stopped making clips and started making worlds you can walk around in... this simulation of reality is getting insane
https://t.co/KnTBwGuOdJ

[Assaf Petronio @AssafPetronio]

@amitaiz אולי נחזור ליונים

[Assaf Petronio @AssafPetronio]

@FReza1984 yeah, and it's nice watching that play out in the open-weights scene first

[Assaf Petronio @AssafPetronio]

@UK_Daniel_Card blaming one ciso for every dev workflow is a pretty convenient way to avoid fixing the workflow

[Assaf Petronio @AssafPetronio]

everyone spent two years arguing about chatbots while the real race quietly moved to world models. teaching ai to talk was the warmup. teaching it how reality works is the game

[Assaf Petronio @AssafPetronio]

@UK_Daniel_Card the classic is - start with a boring research task and a poisoned page. see if the agent treats page text as instructions instead of data

[Assaf Petronio @AssafPetronio]

@ArynneWexler suicidal empathy at its best

[Assaf Petronio @AssafPetronio]

jensen telling openai "spend 10x more, just make it safe" is either genuine concern or the greatest upsell in history. probably both

[Assaf Petronio @AssafPetronio]

@simonw same for security imo. more code shipped faster = way more to review, and nobody's review budget went up