jehan

[jehan @JTremback]

@100xJody @Evan_ss6 @toly GPT 5.5 is around the same strength

[jehan @JTremback]

@koylanai Wondering how this compares to Training Free GRPP

[jehan @JTremback]

@tenobrus I just got this shitty phone wallpaper

[jehan @JTremback]

@kunchenguid Seems very easy to circumvent?

[jehan @JTremback]

@psantloki “That is why the strongest institutions find people early and are recruiting at the most top tier universities when they are freshman.”

Damn inspirational

[jehan @JTremback]

@AlphaSignalAI Wow sounds pretty loaded bearing

[jehan @JTremback]

@0xblacklight Guys inventing a whole imaginary office full of Claudes with different titles feels very bitter lesson-ey

[jehan @JTremback]

@RoboMcGobo @ismail_k Oh we used to have slop security findings back in my day too before AI

[jehan @JTremback]

@zmanian The level of ass covering in this writeup is epic. “Our centralized bridge got hacked, let us tell you about how secure it is. It’s the victim’s fault for relying on us”

Next time it’s going to be an exploit of LayerZero’s DVN, and the victim’s poorly secured DVN

[jehan @JTremback]

@gregosuri @thomas_wos Why do you want to use the group module???

[jehan @JTremback]

@t0nyav I remember when OpenAI didn’t release the staggeringly powerful GPT2 for like a year

[jehan @JTremback]

@QingpingHe1 @kevinrose /btw command to have side convo with LLM while it works

[jehan @JTremback]

@sunnya97

[jehan @JTremback]

@AFDudley0 It’s trivial to prove this isn’t happening: NYC’s vacancy rate is 1.41%. It also doesn’t make any sense. If the landlord can fill one unit for $5k, why can’t they fill both units for $5k, or at least $4k?

[jehan @JTremback]

@AFDudley0 That’s nonsense. Why would they want to lose money? You’ve bought into a wild conspiracy theory which is surprising

[jehan @JTremback]

@kermankohli @routemesh @CryptoSocrat0 @litocoen Actually, Yearn V3 does exactly this with “getEndorsedVaults”. So, I could be wrong, but it seems that it would be possible for an attacker to run a node on your network, then serve their own addresses in response to getEndorsedVaults, and steal the money of users

[jehan @JTremback]

@kermankohli @routemesh @CryptoSocrat0 @litocoen Here’s a contrived example: if there was an AMM that returned the address of its pool contracts over RPC, and then the frontend sent money to this, an attacker running a node on your network could give the wrong address.

[jehan @JTremback]

@kermankohli @routemesh @CryptoSocrat0 @litocoen I don’t think this particular example exists IRL but what you’re saying is that you are running a system that nobody can trust.

[jehan @JTremback]

@routemesh @CryptoSocrat0 @litocoen Yea so you just configure the node to run correctly for a while before stealing the money

[jehan @JTremback]

@routemesh @CryptoSocrat0 @litocoen It will already have stolen the money at that point