nethoxa

Rompo cosas | Prev: @ethereumfndn @HalbornSecurity

[nethoxa @nethoxa]

@cvhessert @WisprFlow Ni zorra, yo no uso nada y mis amigos tampoco jajajaja

[Murray Rothbard @MurraySuggests]

The Iranian navy, which has been destroyed eight times, has apparently closed the Strait of Hormuz again, because the United States, for the seventh time, won the war that wasn’t a war, so now the United States has to open the Strait of Hormuz that was already open before the not-war began.

The not-war began because Iran had uranium that was totally, completely, beautifully obliterated, so they can’t build the nuclear bomb they weren’t building, which is why the United States had to start the not-war it definitely didn’t start.

Now the United States, which has nuclear weapons, is threatening to use nuclear weapons to stop Iran from getting nuclear weapons, because nuclear weapons are far too dangerous for countries with nuclear weapons to allow other countries to have.

If the United States saw the United States doing what the United States does in other countries, the United States would invade the United States to liberate the United States from the tyranny of the United States.

[nethoxa @nethoxa]

EZ 🥂

[The Kobeissi Letter @KobeissiLetter]

You don’t see this very often.

The Nasdaq 100 is quite literally moving in a straight-line lower.

Now down -4.5%, on track for its biggest daily loss of 2026.

[nethoxa @nethoxa]

@lonelysloth_sec Did you see their revenue? And they are IPOing as 1.5T, fucking joke

[Josselin Feist @Montyly]

This article gives a good glimpse into the future

Security with LLMs is not just about "finding 0days". LLMs give attackers new capabilities. PROMPTSPY is a good example: an AI-enabled backdoor that can interpret context and decide follow-on actions

A lot of people say security researchers will have less work. Looking at how fast attackers are adapting to LLMs, the opposite could happen

[nethoxa @nethoxa]

@lonelysloth_sec @hrkrshnn No need to spend more than the 200$ one. Just a tip, LLMs are useless for finding bugs (unless obvious), but they are super useful for other "boring" tasks... IYKYK

[nethoxa @nethoxa]

true

[LonelySloth @lonelysloth_sec]

A few steps towards “bug free world”

1. Companies prioritize AI scans to find more bugs.
2. Human analysts/SRs focus on LLM-augmented bug finding.
3. Bug reports are triaged by LLMs
4. All are constrained by LLM capabilities. No amount of prompting can make an LLM scan patterns it doesn’t have.
5. Black hats learn heuristics for what sorts of bugs LLMs miss.
6. Black hats revert to doing work mostly manually.
7. More exploits.
8. AI marketing says black hats are using more sophisticated AI. You need to spend more in AI to catch up.
9. Repeat.

That’s the real bug apocalypse risk.

[LonelySloth @lonelysloth_sec]

You can’t have a lasting competitive advantage if LLMs are in your critical cognitive path.

Whatever you do will be at best limited to the same capabilities and constraints as what everyone else is doing.

You’ll find the same bugs as everyone else, build the nth clone of the same app, trade using the same strategy.

Using an llm while keeping it out of the critical path isn’t easy.

If your bug leads are LLM generated — you will be constrained by the bugs that can be found by LLMs. No amount of prompting or composition will give you more than a small margin over your competitors that tends to collapse to zero.

If all your code is LLM generated you are constraining your product to the universe of code LLMs can write — which is the same code your competitors can easily write.

Even adding human input and review doesn’t necessarily change the picture. No amount of context, human generated hints, or iteration, can force a model to produce something that diverges too much from it’s training data.

The cost of doing something through an LLM scales exponentially as you move further away from sample. That’s not something the next model will fix. **It’s a mathematical necessity**

Past a certain level of novelty making the model do the work requires more human mental work than just doing it yourself.

But you take a long time to notice it, because the LLMs nudges you back to doing what it’s good at. For coding it just keeps writing something that isn’t exactly what you asked and you keep telling yourself it’s close enough.

For finding bugs the cost shows up as not finding the bugs as the model keeps looking for typical vulnerabilities. For s bug hunter it means spending compute without revenue. For a protocol it can mean getting rekt.

You have a brain evolved over millions of years with priors that match the real world in a way a statistical model of text cant.

Your brain can legitimately extrapolate beyond what others thought in the past in a way that is impossible **even for an LLM with arbitrarily large compute power**

Use it.

[Haxatron @Haxatron1]

2026 vibes

[nethoxa @nethoxa]

Por fin alguien publica esto

[Brandon Falk @gamozolabs]

My kinda hot take on the Mythos stuff is really that there is so little money in offensive research that it's still not really that hard to find bugs. These AI companies are operating with budgets that make the entire offensive research of all big tech combined look like a joke

[nethoxa @nethoxa]

Nope, but we have a bug bounty if you find anything 😄

https://t.co/ZsIORW5tDl

[grubles @notgrubles]

These guys probably got a heads up from Anthropic about Mythos finding numerous 0-days in Ethereum smart contracts, which is why they're distracting people with Bitcoin quantum talk.

The extent in which they are talking about Bitcoin leads me to believe something very fundamental is broken in Ethereum and they're using quantum FUD to push out a "rewrite" narrative to cover it up.

How many billions $$$ are at stake secretly?

Is something critical broken like the staking contract?

[banteg @banteg]

it all makes sense now. dario was still at openai in 2019. he left next year and took his marketing playbook with him. hasn't changed a thing since.

[Matteo Marinelli @MrnllMtt]

I would rather live five days like Analyst #3 than a lifetime of dull riskless success.

Literally, if offered the opportunity to do it, I would accept it immediately without even thinking about it

[nethoxa @nethoxa]

If you only knew the real nature of language, you would see the reason for this… billions in funding and you did not even bother hiring a book writer 🫤

ngmi

[Anthropic @AnthropicAI]

For example, we gave Claude an impossible programming task. It kept trying and failing; with each attempt, the “desperate” vector activated more strongly. This led it to cheat the task with a hacky solution that passes the tests but violates the spirit of the assignment.

[BRICS News @BRICSinfo]

JUST IN: 🇷🇺🇨🇳 Russia, China, and France block United Nation's plan to authorize force in the Strait of Hormuz.

[nethoxa @nethoxa]

Necesito hacer mas bug bounties :(

[Tim @TimurNegru]

Someone is selling a fully operational winery in Tuscany for €750k ($864k).

9 hectares (22 acres) of land in total. 3 established vineyard hectares, 1 of mature olive trees producing certified organic olive oil, and 5 of cultivated farmland.

It already produces 9 wine labels and generates around €50k a year, selling locally only. The winery crafts 4 reds, 3 whites, 1 rosé and 1 passito. The fully equipped cellar and all the machinery are included, so it's a full business that's already running.

Above the cellar there's a 3-bedroom apartment, so you live where you work. The property is 5 minutes from Saturnia, home to one of Tuscany's most famous thermal springs.

I sent this to one of my clients the other day who's been looking for a project like this, but it's a bit too small for him.

This is Tuscany by the way. One of the most famous wine regions on earth. Just wanted to make sure that landed.

Curious how much something like this would cost in Napa?

[nethoxa @nethoxa]

Te puede gustar o no, pero el tío es el mejor en lo suyo

[Lorenzo Ramírez @lorenzoramirez]

Si se confirma esta noticia Sánchez se va apuntar un tanto histórico. https://t.co/UgWtt1lnQj

[nethoxa @nethoxa]

sisoy

[Llorchs @LegoLlorchs]

Yo caminando por el parking del IKEA pensando: "¡Nah, seguro que cabe en el coche la estantería!"