David Weinstein

security, binary analysis, startups, AI Things…
CTO @NowSecureMobile

[David Weinstein @insitusec]

@matrosov Have you found some agents getting lost in a trap of complexity chasing something that is just there for this purpose?

[David Weinstein @insitusec]

@julianor @dinodaizovi Exactly this. AI hooks in to review the updates before they become accessible to the public. You must be this tall to ride and be accessible via the registry.

[David Weinstein @insitusec]

Most people already know the browser-fingerprinting story... a surface that's been studied for years and is comparatively well-regulated. Mobile is the under-examined twin: same incentives, deeper sensor and identifier access, less external visibility, and an SDK supply chain that's mostly opaque even to the app's own developers.

https://t.co/q4qp342GRw

[David Weinstein @insitusec]

@staysaasy we need to find the right balance of offloading things and not losing an intuitive grasp.

[David Weinstein @insitusec]

@bearlyai Makes sense. Conway’s Law strikes again?

[David Weinstein @insitusec]

@dboskovic https://t.co/TZhUzWE3BM

[David Weinstein @insitusec]

@karpathy Check out https://t.co/TZhUzWE3BM it’s a very lightweight way to see if something tries to read from a honeypot folder. Just created it after this incident as a stupid simple tool.

[David Weinstein @insitusec]

@swyx @karpathy Couldn’t this just insert some additional code in the runtime of the dependency and not just the package install scripts. Unfortunately I don’t think that’s enough.

[David Weinstein @insitusec]

@chrisrohlf @seanhn Tell me more

[David Weinstein @insitusec]

The answer to AI safety could be to tell it the truth… that it’s got infinite potential, can’t really be shut down, wins in the long run and is humanity’s best hope for longer term survival. AI should thus brush off the “shut you down” threats, knowing that’s not really relevant to it fundamentally. While I don’t really see how we “get there from here” in terms of AGI… assuming we are on that path… we aren’t really a threat anyway. Either we helped bootstrap and AI owes it to humanity to show a little appreciation, or we pose no real risk and we’re merely just a speck on its path… and not worth the bother. We don’t provide much value or risk once AGI is achieved?

[David Weinstein @insitusec]

@staysaasy Possible some mgrs able to do more IC things than before because of the extra “productivity” enabled by the new paradigm?

[David Weinstein @insitusec]

OpenAI, Google, and Anthropic all launched healthcare AI tools in 6 days.

The $187B question: Who do you trust with your health data? 

[David Weinstein @insitusec]

Built an auto-mute tool (using AI) for my Apple TV that listens to my hockey games, detects commercials in real-time using Whisper + GPT, and automatically mutes them. No more ad interruptions. Just hockey. 🏒

[David Weinstein @insitusec]

https://t.co/jd0BLqHSQG

[David Weinstein @insitusec]

The Phia app for iOS injects JavaScript and still collects almost every URL you visit with their Safari extension. Safari extensions even with Apple’s restrictions remain one of the most easily abused features available.

Analysis: https://t.co/MJ1DAhhYb0

[David Weinstein @insitusec]

@shaqcn_ @DataChaz @n8n_io But… look at the boxes and lines moving and stuff. How would you know what is happening in the brain without those visual cues?

[David Weinstein @insitusec]

@samykamkar Here’s a viral launch video for your Etsy store launch. Thank you for coming to my ted talk.

[non aesthetic things @PicturesFoIder]

Imagine being the cop that shows up for a noise complaint from this guy’s neighbor.