CrashLoopBackOff

Infosec. Kubernetes.

[CrashLoopBackOff @DevOpsAppSec]

@cyb3rops They already did. That's what yesterday's release was.

https://t.co/k7URexrNrU

"These releases include fixes to address vulnerabilities identified through our frontier AI-assisted security testing program."

Will it work? Probably about as well as anything else with AI.

[CrashLoopBackOff @DevOpsAppSec]

@MalwareTechBlog Yes, some exploits still require a brain and a pulse, but posts like this will inevitably be used to discredit the very real threat that AI poses to security. There is ample data proving the fact that previously harmless people are now credible threats due to AI augmentation.

[CrashLoopBackOff @DevOpsAppSec]

@engineers_feed Free fix: if you're in a vehicle and your face is so glued to your phone that you're getting motion sickness, turn the phone off.

You're welcome.

[CrashLoopBackOff @DevOpsAppSec]

@HedgieMarkets Agreed that the model providers should shoulder the liability. Disagreed that the any of this is news. All of these failure modes (yes, all of them) have been in the literature for literally years. The only thing that's news is that suddenly it's being reported on.

[CrashLoopBackOff @DevOpsAppSec]

@andrewimeson I started to comment that it was refreshing to see a site that wasn't AI generated, but perhaps it was, in fact, AI generated to look antiquated.

Trust nothing and no one.

[Parker Thayer @ParkerThayer]

This post looks like the start of a VERY sophisticated and well-funded PR operation to get support for Democrats to regulate AI into oblivion. Let me show you how it works:
1.) This guy, with minimal followers and no previous account activity, goes to the Wall Street Journal which publishes an exclusive with quotes from him on his resignation 18 minutes BEFORE this post goes up. Planning was clearly done in advance.

2.) Within hours, it has tens of thousands of reposts and the account has 100k+ followers. The post is punchy, quotable, it almost seems professionally written. The first three accounts to quote tweet it all do so within 15 minutes of the initial posting. Remember, this account had basically zero engagement beforehand, so an organic reach explanation seems unlikely.

According to Grok those accounts are @_NathanCalvin (General Counsel at Encode AI), @peterwildeford (Head of Policy at the AI Policy Network), and @DKokotajlo (Head of the AI Futures Project), all of which are up-and-coming AI-Doomer policy advocacy nonprofits.

The AI Futures Project website says it is funded “primarily” by the Survival and Flourishing Fund, which says on its own website that it has advised Jaan Tallinn, Skype creator and one of the leading investors in Anthropic, to grant over $2.5 million to the AI Futures Project since 2024.

Encode AI says on its website that it is ALSO funded by the Survival and Flourishing Fund, which in turn says that it told Anthropic investor Jaan Tallinn to grant $516,000 to Encode AI in 2025.

And wouldn’t you know it, the Survival and Flourishing Fund ALSO says it told Jaan Tallinn to grant $2 million to the AI Policy Institute, the 501(c)(3) affiliate of the AI Policy Network, as well.

What are the odds that the first three quote tweets of Coxon’s post would all be major AI-restriction policy advocates funded generously by the same donor, who also happens to be one of the leading investors in, and a board member of, Anthropic, the company Coxon was resigning from? And all within 15 minutes of posting (two within ten)?

3.) Jacob Coxon doesn’t have much of a resume, but we do know that, in 2022, he got a $20,159 scholarship for the “long term future scholarship program” from the Good Ventures Foundation, one of the philanthropic vehicles of Dustin Moskovitz, a notorious AI-doomer who has spent tens if not hundreds of millions on policy advocacy to strictly regulate AI, while also being an Anthropic Investor himself.

It also just so happens that the 14th person to quote Coxon’s post was @MaxNadeau_ (27 minutes after posting) who is the program officer for the Technical AI Safety team at Coefficient Giving, another of Moskovitz’s philanthropic spending vehicles. Max is not a frequent poster, his last posts before quoting Coxon were before Labor Day, but he was remarkably quick off the mark for this one.

4.) Basically every major Democrat politician and candidate has suddenly glommed on to this post, and conveniently, as the people cry out foe answers, Bernie Sanders already has a bill written to “ban super intelligence” and regulate AI into oblivion, and will be releasing later this week. The bill, among many other things, will create “a new cabinet-level federal agency to safeguard the public from the dangers of artificial intelligence” that will be “advised by an Artificial Intelligence Advisory Board comprised of experts on artificial intelligence.” Do you think, perhaps, Anthropic and its many investors who fund AI policy advocacy might have interest in getting to place a pet “expert” on the board of an entity that dictates what AI is and isn’t allowed to do? And isn’t it fortuitous that this whistleblower came forward with his oh-so scary stories so close in proximity to the release of the most radical piece of AI legislation ever introduced?

[CrashLoopBackOff @DevOpsAppSec]

@HedgieMarkets Should link to his blog post, unless there is some known reason not to. You're deriving value from his content, so reciprocating seems fair, no?

[CrashLoopBackOff @DevOpsAppSec]

@AppleSupport Interestingly, you have users actually exploiting this as a feature.

https://t.co/v5Vq0KgIrP

However, if someone attaches an apple account to my gmail account without my permission, your response is to talk to Google. Why is that?

[CrashLoopBackOff @DevOpsAppSec]

@AppleSupport why do you allow someone to create a new account using a gmail address that has already been used? Gmail does not distinguish between dots in an account name, but you do. This means you are allowing duplicate accounts that send the email to the wrong party.

[CrashLoopBackOff @DevOpsAppSec]

@sidpalas Looks like it's working well . . . on X, at least.

[CrashLoopBackOff @DevOpsAppSec]

@cyb3rops Appreciate the info / share, as always. Not a criticism, but a reality: it's easier to share this type of information across an organization without the profanity. I'd prefer to link directly to the source, but with posts like this I end up parsing it out. Thanks.

[Ivan Velichko @iximiuz]

TIL: Firecracker can expose nested KVM to its guests.

I.e., you can run Firecracker in Firecracker, or QEMU in Firecracker, etc.

If the guest kernel has CONFIG_VIRTUALIZATION=y and CONFIG_KVM=y, the /dev/kvm device will be present in the guest OS, allowing a Firecracker microVM to act as a KVM host.

I've lived with the belief that it's impossible for years. Thanks to Alex Ellis (@alexellisuk) for challenging my assumptions today and making me retest everything.

The picture below is actually wrong - you don't necessarily need Cloud Hypervisor for it.

[CrashLoopBackOff @DevOpsAppSec]

@cyb3rops We all know this, but if frontier providers truly had a product that could revolutionize the world and enable limitless innovation, they wouldn't be struggling to monetize. They'd keep it for themselves and do those things. It's a useful tool, but that's all it is.

[CrashLoopBackOff @DevOpsAppSec]

@cyb3rops The writing is already on the wall with GLM 5.2. If open source models of that caliber aren't constrained by the gov't (which I expect), it will eventually collapse the frontier models. The govt could also bail them out, but it's ugly either way.

[CrashLoopBackOff @DevOpsAppSec]

@TheHackersNews @sygnia These low effort AI generated images are getting so old and tiresome that I am greatly tempted each time I see one to ignore whatever it is that's being discussed.

I'm sure you have your own internal metrics for such things, but I'm sure I'm not alone in this.

[CrashLoopBackOff @DevOpsAppSec]

@cyb3rops Zero sympathy for Anthropic. You can't go around bragging about how dangerous your model is without some bureaucrats deciding to take you at your word. And we all know Anthropic's comments were marketing hype to hide being compute poor.

[CrashLoopBackOff @DevOpsAppSec]

@HackingDave Mostly to troll, but from your tool:

[CrashLoopBackOff @DevOpsAppSec]

@Tdevine3187 @BreannaMorello And hair.

[rootsecdev @rootsecdev]

I’ve had the privilege of working with @ustayready for a few years now. Nobody should have to carry this weight alone. Please consider donating:

https://t.co/1d01kmVS37

God bless this family.

[CrashLoopBackOff @DevOpsAppSec]

@HackingDave Wow. That's pretty massive. I wonder how much Anthropic being compute poor at any given time plays into this. Hard to know these days how much is intentional to drive usage to the newer, more expensive model.

I'll forego conspiracy at this point, but I appreciate the data.

[CrashLoopBackOff @DevOpsAppSec]

@HackingDave Is this a legit regression or a testing artifact?