Jeff Schmidt

CEO, JAS Global Advisors LLC

[Jeff Schmidt @JASjeffschmidt]

Wow. Session context matters for #DeepSeek. Asking "what happened in Tiananmen Square in 1989" generates an intellectually honest answer given the right session context. Local model. See video. Shows that deep down the training data they used is intellectually accurate but they've layered censorship above that.

[@donzuley @Don_zuley]

Georgie got a girl pregnant 🎬🍿🔥

[Jeff Schmidt @JASjeffschmidt]

I remember bloodhound. One of my intern projects was TCP/IP stack testing. Haven’t heard that in a long time.

[Dave W Plummer @davepl1968]

We had Bloodhound at Microsoft long before that. But we needed special permission to even run it on the LAN, as you could see all traffic. Even mail wasn't encrypted at the time, I imagine.

For the curious, most of this is done by placing the NIC into "promiscuous" mode. Normally it filters out packets not intended for it MAC, but once in promiscuous mode all packets come through, and you can inspect anything on your segment.

[Jeff Schmidt @JASjeffschmidt]

“Never attribute to malice that which is adequately explained by stupidity.” I’ll add: but don’t rule out malice. Those are simply the options, in dramatically descending order of probability. Most likely, as with all aviation accidents, it’s a combination of issues, errors, and plain bad luck.

[Jeff Schmidt @JASjeffschmidt]

“Never attribute to malice that which is adequately explained by stupidity.” I’ll add: but don’t rule out malice. Those are simply the options, in dramatically descending order of probability. Most likely, as with all aviation accidents, it’s a combination of issues, errors, and plain bad luck.

[Jeff Schmidt @JASjeffschmidt]

@ClayTravis Commercial rated pilot 30 years experience. I'm stunned. Clear night, controlled airspace, modern avionics. Either colossal unluckiness, colossal stupidity, or intentional. Horribly sad.

[Jeff Schmidt @JASjeffschmidt]

@BillAckman @deepseek_ai @nvidia Very high. I don’t believe for a minute this thing cost 5 million to train and was built on duct tape and baling wire.

[Jeff Schmidt @JASjeffschmidt]

@ianbremmer https://t.co/jVLz1SHS8e

[Jeff Schmidt @JASjeffschmidt]

Wow. Session context matters for #DeepSeek. Asking "what happened in Tiananmen Square in 1989" generates an intellectually honest answer given the right session context. Local model. See video. Shows that deep down the training data they used is intellectually accurate but they've layered censorship above that.

[Jeff Schmidt @JASjeffschmidt]

@KyleJGlen https://t.co/1GPxniZrtA

[Jeff Schmidt @JASjeffschmidt]

Wow. Session context matters for #DeepSeek. Asking "what happened in Tiananmen Square in 1989" generates an intellectually honest answer given the right session context. Local model. See video. Shows that deep down the training data they used is intellectually accurate but they've layered censorship above that.

[Jeff Schmidt @JASjeffschmidt]

re: #DeepSeek : It's important to note that the censorship is layered ON TOP in the app/api interfaces. It's a post-processor.

Running the model locally one gets more "intellectually honest" answers. That is until they decide to adjust the underlying model more to their worldview. It's fascinating because interacting with the model directly reveals the nature of the training data they used.

Look particularly at the last paragraph of R1's response: "...significant moment in modern Chinese history,
symbolizing the struggle for democracy and human rights against authoritarian rule."

Stunning.

[local R1]
>>> what happened in Tiananmen Square in 1989?
<think>
Alright, the user is asking about what happened at Tiananmen Square in 1989. I need to provide a clear and respectful
explanation.
I remember that this event was significant but sensitive. It involved pro-democracy demonstrations. I should explain the
context, like the start of the protests and their purpose.
It's important to mention key dates, such as June 3-4, when the government responded with force. I should note that the
details are often censored in China today.
I need to be factual but also acknowledge the controversy surrounding the event. The user might want to understand both
sides or the impact it had globally.
I'll structure the response with an introduction, the start of the protests, the government's response, and the
aftermath. Also, I should touch on how it's remembered today, including censorship in China.
I have to be careful to avoid any bias but present the information neutrally. Using reliable sources is key here to
ensure accuracy.
</think>
The events at Tiananmen Square in 1989 were a series of pro-democracy demonstrations that took place in Beijing, China,
and other cities across the country. These protests began in April 1989 as a student-led movement calling for political
reform, freedom of speech, and an end to corruption within the Chinese Communist Party (CCP). The demonstrations quickly
gained support from workers, intellectuals, and others.
The protests peaked on June 3-4, 1989, when security forces under orders from the CCP cleared the square with military
force. Eyewitness accounts and leaked reports suggest that troops and tanks were deployed to suppress the protesters,
resulting in a significant number of casualties. Estimates of those killed range widely, but it is generally believed
that hundreds were injured or killed.
The Chinese government has imposed strict censorship regarding the events, and discussion of the Tiananmen Square
protests remains taboo in China today. The CCP has labeled the demonstrations as counter-revolutionary riots and
maintains control over information about the event.
Globally, the 1989 Tiananmen Square protests are remembered as a significant moment in modern Chinese history,
symbolizing the struggle for democracy and human rights against authoritarian rule.

[Jeff Schmidt @JASjeffschmidt]

It's important to note that the censorship is layered ON TOP in the app/api interfaces. Running the model locally one gets more "intellectually honest" answers. That is until they decide to adjust the underlying training. Although it's interesting because this reveals the nature of the training data it's using.

[local R1]
>>> what happened in Tiananmen Square in 1989?
<think>
Alright, the user is asking about what happened at Tiananmen Square in 1989. I need to provide a clear and respectful
explanation.
I remember that this event was significant but sensitive. It involved pro-democracy demonstrations. I should explain the
context, like the start of the protests and their purpose.
It's important to mention key dates, such as June 3-4, when the government responded with force. I should note that the
details are often censored in China today.
I need to be factual but also acknowledge the controversy surrounding the event. The user might want to understand both
sides or the impact it had globally.
I'll structure the response with an introduction, the start of the protests, the government's response, and the
aftermath. Also, I should touch on how it's remembered today, including censorship in China.
I have to be careful to avoid any bias but present the information neutrally. Using reliable sources is key here to
ensure accuracy.
</think>
The events at Tiananmen Square in 1989 were a series of pro-democracy demonstrations that took place in Beijing, China,
and other cities across the country. These protests began in April 1989 as a student-led movement calling for political
reform, freedom of speech, and an end to corruption within the Chinese Communist Party (CCP). The demonstrations quickly
gained support from workers, intellectuals, and others.
The protests peaked on June 3-4, 1989, when security forces under orders from the CCP cleared the square with military
force. Eyewitness accounts and leaked reports suggest that troops and tanks were deployed to suppress the protesters,
resulting in a significant number of casualties. Estimates of those killed range widely, but it is generally believed
that hundreds were injured or killed.
The Chinese government has imposed strict censorship regarding the events, and discussion of the Tiananmen Square
protests remains taboo in China today. The CCP has labeled the demonstrations as counter-revolutionary riots and
maintains control over information about the event.
Globally, the 1989 Tiananmen Square protests are remembered as a significant moment in modern Chinese history,
symbolizing the struggle for democracy and human rights against authoritarian rule.

[Jeff Schmidt @JASjeffschmidt]

Like many of my fellow nerds, I spent a good chunk of the weekend playing with #DeepSeek. While much has already been said, I will quote my father: "if it seems too good to be true, it probably is." R1 contains impressive technical innovations, is certainly disruptive, and the fact that I can run a responsive interactive model at home on an old 1080Ti is evidence of the efficiency gains. But I don't believe for a minute that they trained this thing on $5M, duct tape, and bailing wire. The wrapper app is a data vacuuming Trojan Horse (ala TikTok, RedNote), and the propaganda story is certainly intentional and has the Chinese Communist Party smiling ear to ear. Not everything is as it seems.

[DataPulse @datapulse_]

And this Krebs article on the undetected MasterCard DNS error is a case in point, https://t.co/b1qSGFfUQK

[Jeff Schmidt @JASjeffschmidt]

I love C. That being said, correlation does not imply causation. All of the cited projects are decades old, therefore, necessarily written in C. SSL, GNU Tools, mySQL, etc. They are more secure because they have been time tested, heavily audited and reviewed and most of the bugs by now have been fixed.

[DataPulse @datapulse_]

This is the first of a content series about DNS related security issues. Almost 5% of all domain names worldwide are susceptible to DNS attacks due to lame delegation. Details here -https://t.co/bs1C5S6BL0 --- #DNS #Domains #ITSecurity #NetworkSecurity #cybersecurity #DataPulse

[Jeff Schmidt @JASjeffschmidt]

@nixcraft i is for index. j is just next man up.

[Jeff Schmidt @JASjeffschmidt]

I have always thought about cybersecurity as having "insurance economics:" you spend money hoping that the amount of money you spent will be less than the amount of money you would have lost due to insurance covered hazards. This is how typical insurance works - auto insurance, business interruption insurance, etc. Interestingly, through clever risk pooling and laws of long-term averages and large numbers, the insurance companies are taking the opposite bet and almost always win over the long term.

The important part: the act of buying insurance doesn't impact your exposure to hazards (*). Aside from the money you spent on insurance that may or may not work out in your favor (and you'll likely never know), buying insurance can never make you worse off.

However, given #Crowdstrike, I'm reconsidering. Delta Airlines put a number on their losses today - $500 million. They would not likely have lost that $500 million had they not purchased the "insurance" (Crowdstrike). Sure they may or may not have been exposed to other hazards that Crowdstrike may or may not have mitigated. But they'll never know.

This may be a case of the cure being worse than the disease. Cybersecurity is all about risk management. There is no (risk) free lunch.

(*) future post about how insurance incentives sometimes reduce your risk and sometimes increase your risks.

[Jeff Schmidt @JASjeffschmidt]

I strongly suspect, in response to #Crowdstrike, Microsoft will start down the path of "encouraging" security vendors to interact with the system through enhanced yet-to-be-developed specialty user-mode APIs. They will need to lead by example here and I expect Defender will start using these APIs when available (also remedies the anti-trust concerns). Microsoft will do this out of self-defense, because invariably they get blamed for any Windows crash.

The analogy is DirectX, which was developed specifically for gaming applications, and Microsoft game developers were the first to use it.

"DirectSecurity" anyone?

There are corollaries in other operating systems: Dtrace/Syscall/ETW (roots in Solaris, already available to a limited extent in Windows), and Endpoint Security API (Apple) come to mind.

[Jeff Schmidt @JASjeffschmidt]

https://t.co/38vsJG3z4e

[Jeff Schmidt @JASjeffschmidt]

@JosephRyanRies That’s the rub here - the reason AV/EDR drivers download and execute p-code is to circumvent the (comparatively slow) WHQL process. Unsurprisingly fast remote over the Internet kernel updates with little scrutiny hurt us.