Latest / AGI Dreams – Open, Uncensored, & Local - AI News Digest / AGI Dreams Podcast – October 23, 2026

Transcript

AGI Dreams Podcast – October 23, 2026 · AGI Dreams – Open, Uncensored, & Local - AI News Digest

• 0:00
  The
• 0:00
  two
• 0:00
  unauthenticated
• 0:01
  remote-code-execution
• 0:02
  flaws
• 0:02
  in
• 0:03
  PHP
• 0:03
  core,
• 0:03
  CVE-2026-109618
• 0:09
  and
• 0:09
  CVE-2026-109619,
• 0:13
  are
• 0:13
  now
• 0:13
  patched
• 0:14
  in
• 0:14
  8.5.12
• 0:15
  and
• 0:15
  the
• 0:15
  parallel
• 0:16
  8.4,
• 0:16
  8.3
• 0:17
  and
• 0:17
  8.2
• 0:18
  releases,
• 0:19
  but
• 0:19
  the
• 0:19
  most
• 0:19
  instructive
• 0:20
  part
• 0:20
  of
• 0:20
  the
• 0:20
  story
• 0:20
  is
• 0:20
  the
• 0:21
  man
• 0:21
  keeping
• 0:21
  the
• 0:21
  rollout
• 0:22
  from
• 0:22
  catastrophe.
• 0:23
  The
• 0:23
  Atlantic
• 0:24
  found
• 0:24
  Ondřej
• 0:24
  Surý,
• 0:25
  a
• 0:25
  Czech
• 0:26
  volunteer
• 0:26
  whose
• 0:26
  paying
• 0:27
  job
• 0:27
  is
• 0:27
  directing
• 0:28
  DNS
• 0:28
  engineering
• 0:29
  at
• 0:29
  the
• 0:29
  Internet
• 0:29
  Systems
• 0:30
  Consortium,
• 0:31
  and
• 0:31
  who
• 0:31
  for
• 0:31
  more
• 0:32
  than
• 0:32
  twenty
• 0:32
  years
• 0:32
  has
• 0:33
  maintained
• 0:33
  the
• 0:33
  packaging
• 0:34
  that
• 0:34
  lets
• 0:34
  administrators
• 0:35
  install
• 0:35
  PHP
• 0:36
  updates
• 0:36
  across
• 0:36
  thousands
• 0:37
  of
• 0:37
  servers
• 0:38
  without
• 0:38
  compiling
• 0:38
  source.
• 0:39
  He
• 0:39
  is
• 0:39
  not
• 0:40
  on
• 0:40
  the
• 0:40
  PHP
• 0:40
  Foundation
• 0:41
  payroll.
• 0:42
  "Remote
• 0:42
  Code
• 0:43
  Execution
• 0:43
  is
• 0:43
  the
• 0:43
  most
• 0:44
  severe
• 0:44
  type
• 0:44
  of
• 0:44
  vulnerability,
• 0:45
  because
• 0:46
  the
• 0:46
  attacker
• 0:46
  is
• 0:46
  able
• 0:47
  to
• 0:47
  execute
• 0:47
  their
• 0:48
  own
• 0:48
  code
• 0:48
  on
• 0:48
  the
• 0:48
  server
• 0:49
  that's
• 0:49
  running
• 0:49
  PHP,"
• 0:50
  he
• 0:50
  said,
• 0:51
  before
• 0:51
  deflating
• 0:51
  his
• 0:52
  own
• 0:52
  legend:
• 0:52
  the
• 0:53
  work
• 0:53
  is
• 0:53
  automated,
• 0:54
  and
• 0:54
  he
• 0:54
  runs
• 0:54
  no
• 0:55
  PHP
• 0:55
  himself.
• 0:56
  The
• 0:56
  sharper
• 0:57
  line
• 0:57
  was
• 0:57
  about
• 0:57
  the
• 0:57
  model
• 0:58
  itself:
• 0:59
  "Open-source
• 0:59
  sometimes
• 1:00
  feels
• 1:00
  like
• 1:00
  exploitation...
• 1:02
  Any
• 1:02
  exploitation
• 1:03
  is
• 1:03
  not
• 1:03
  sustainable."
• 1:05
  Cloudflare's
• 1:05
  Matthew
• 1:06
  Prince
• 1:06
  supplied
• 1:06
  the
• 1:06
  scale:
• 1:08
  exploit
• 1:08
  attempts
• 1:08
  climbed
• 1:09
  from
• 1:09
  thousands
• 1:09
  in
• 1:10
  the
• 1:10
  ten
• 1:10
  hours
• 1:10
  before
• 1:11
  disclosure
• 1:11
  to
• 1:11
  "millions
• 1:12
  now,"
• 1:13
  and
• 1:13
  sites
• 1:13
  in
• 1:13
  Germany
• 1:14
  and
• 1:14
  Finland,
• 1:14
  hospitals,
• 1:15
  schools
• 1:16
  and
• 1:16
  the
• 1:16
  Dutch
• 1:16
  NCSC
• 1:17
  went
• 1:17
  offline
• 1:17
  to
• 1:17
  patch
• 1:18
  .
• 1:18
  The
• 1:19
  bug
• 1:19
  class
• 1:19
  is
• 1:19
  a
• 1:19
  use-after-free
• 1:20
  reached
• 1:21
  through
• 1:21
  PHP's
• 1:21
  session
• 1:22
  machinery
• 1:22
  and
• 1:23
  the
• 1:23
  rfc1867
• 1:24
  upload-progress
• 1:25
  hook,
• 1:26
  and
• 1:26
  it
• 1:26
  is
• 1:26
  old.
• 1:27
  A
• 1:27
  security-focused
• 1:28
  video
• 1:28
  explainer
• 1:29
  recorded
• 1:29
  from
• 1:29
  SentinelOne's
• 1:30
  OneCon
• 1:31
  traced
• 1:31
  the
• 1:31
  flaw
• 1:31
  back
• 1:32
  through
• 1:32
  PHP
• 1:32
  5.4.0
• 1:34
  from
• 1:34
  2004,
• 1:35
  a
• 1:35
  dormancy
• 1:36
  of
• 1:36
  more
• 1:36
  than
• 1:36
  twenty-two
• 1:37
  years,
• 1:38
  and
• 1:38
  credited
• 1:38
  the
• 1:38
  researcher
• 1:39
  known
• 1:39
  as
• 1:39
  LCFR,
• 1:41
  who
• 1:41
  found
• 1:41
  the
• 1:41
  first
• 1:41
  variant
• 1:42
  by
• 1:42
  failing
• 1:42
  PHP's
• 1:43
  allocator
• 1:44
  and
• 1:44
  then
• 1:44
  fed
• 1:44
  the
• 1:44
  pattern
• 1:45
  to
• 1:45
  a
• 1:45
  language
• 1:45
  model
• 1:46
  that
• 1:46
  located
• 1:46
  the
• 1:46
  same
• 1:47
  shape
• 1:47
  in
• 1:47
  the
• 1:47
  upload-progress
• 1:48
  path
• 1:49
  "pretty
• 1:49
  quickly."
• 1:50
  Fuzzers
• 1:50
  excel
• 1:51
  at
• 1:51
  spatial
• 1:51
  memory
• 1:52
  corruption,
• 1:52
  but
• 1:53
  these
• 1:53
  temporal,
• 1:53
  state-dependent
• 1:54
  bugs
• 1:54
  are
• 1:55
  exactly
• 1:55
  where
• 1:55
  an
• 1:55
  LLM
• 1:56
  reasoning
• 1:56
  about
• 1:56
  "one
• 1:57
  is
• 1:57
  a
• 1:57
  failure
• 1:57
  case
• 1:58
  and
• 1:58
  one
• 1:58
  is
• 1:59
  not"
• 1:59
  earns
• 1:59
  its
• 1:59
  keep.
• 2:00
  Rust's
• 2:01
  borrow
• 2:01
  checker,
• 2:01
  the
• 2:02
  host
• 2:02
  conceded,
• 2:03
  would
• 2:03
  have
• 2:03
  prevented
• 2:03
  the
• 2:03
  whole
• 2:04
  thing
• 2:04
  .
• 2:04
  For
• 2:05
  defenders
• 2:05
  sizing
• 2:05
  their
• 2:06
  exposure,
• 2:06
  the
• 2:06
  aancw
• 2:07
  php2shell-scanner
• 2:08
  is
• 2:08
  the
• 2:08
  sober
• 2:09
  tool
• 2:09
  in
• 2:09
  the
• 2:09
  pile:
• 2:10
  a
• 2:10
  single-binary
• 2:11
  Go
• 2:11
  detector
• 2:12
  with
• 2:12
  blackbox,
• 2:13
  local
• 2:13
  and
• 2:13
  SSH
• 2:14
  modes
• 2:14
  that
• 2:14
  fingerprints
• 2:15
  the
• 2:15
  PHP
• 2:16
  version
• 2:16
  and
• 2:16
  SAPI,
• 2:17
  flags
• 2:18
  mod
• 2:18
  php
• 2:19
  as
• 2:19
  the
• 2:19
  worst
• 2:19
  case
• 2:20
  because
• 2:20
  request
• 2:20
  cleanup
• 2:21
  runs
• 2:21
  even
• 2:21
  after
• 2:22
  a
• 2:22
  failed
• 2:22
  startup,
• 2:23
  and
• 2:23
  sends
• 2:23
  only
• 2:23
  a
• 2:23
  benign
• 2:24
  arming
• 2:24
  probe
• 2:25
  rather
• 2:25
  than
• 2:25
  a
• 2:25
  working
• 2:25
  exploit
• 2:26
  .
• 2:26
  Then
• 2:27
  there
• 2:27
  is
• 2:27
  the
• 2:27
  noise.
• 2:28
  A
• 2:28
  "threat
• 2:28
  intelligence"
• 2:29
  report
• 2:29
  making
• 2:29
  the
• 2:29
  rounds
• 2:30
  dresses
• 2:30
  itself
• 2:31
  in
• 2:31
  CVSS
• 2:31
  urgency
• 2:32
  but
• 2:33
  pads
• 2:33
  it
• 2:33
  with
• 2:33
  CDN
• 2:34
  market-share
• 2:34
  tables,
• 2:35
  vendor
• 2:35
  pricing
• 2:36
  and
• 2:36
  auto-generated
• 2:37
  WAF
• 2:37
  rules,
• 2:38
  the
• 2:38
  texture
• 2:38
  of
• 2:38
  machine-written
• 2:39
  marketing
• 2:39
  rather
• 2:40
  than
• 2:40
  analysis
• 2:40
  .
• 2:41
  More
• 2:41
  serious
• 2:42
  is
• 2:42
  the
• 2:42
  dissent
• 2:43
  that
• 2:43
  the
• 2:43
  patch
• 2:43
  is
• 2:43
  incomplete.
• 2:44
  An
• 2:45
  agent-assisted
• 2:45
  write-up
• 2:46
  published
• 2:46
  a
• 2:46
  set
• 2:46
  of
• 2:46
  "zeros"
• 2:47
  claiming
• 2:47
  surviving
• 2:48
  session-handling
• 2:49
  gaps
• 2:49
  and
• 2:49
  a
• 2:49
  garbage-collector
• 2:50
  double-free
• 2:51
  regression
• 2:51
  that
• 2:51
  the
• 2:51
  fix
• 2:52
  itself
• 2:52
  introduced,
• 2:53
  with
• 2:53
  AddressSanitizer
• 2:54
  receipts
• 2:55
  and
• 2:55
  a
• 2:55
  candid
• 2:55
  admission
• 2:56
  that
• 2:56
  escalation
• 2:57
  past
• 2:57
  a
• 2:57
  remote
• 2:57
  crash
• 2:58
  is
• 2:58
  blocked
• 2:58
  on
• 2:58
  stock
• 2:59
  allocators.
• 3:00
  That
• 3:00
  is
• 3:00
  a
• 3:00
  concrete,
• 3:01
  falsifiable
• 3:02
  claim,
• 3:02
  not
• 3:03
  a
• 3:03
  crash
• 3:03
  screenshot,
• 3:04
  and
• 3:04
  it
• 3:04
  echoes
• 3:04
  Nicolas
• 3:05
  Krassas
• 3:05
  calling
• 3:06
  the
• 3:06
  patch
• 3:06
  incomplete.
• 3:07
  Unconfirmed
• 3:08
  for
• 3:08
  now,
• 3:09
  but
• 3:09
  the
• 3:09
  kind
• 3:09
  of
• 3:09
  claim
• 3:10
  the
• 3:10
  record
• 3:10
  should
• 3:10
  hold
• 3:10
  open
• 3:11
  .
• 3:14
  PHP
• 3:15
  was
• 3:15
  loud
• 3:15
  enough
• 3:15
  to
• 3:16
  drown
• 3:16
  out
• 3:16
  a
• 3:16
  week
• 3:16
  in
• 3:17
  which
• 3:17
  everything
• 3:17
  else
• 3:17
  also
• 3:18
  needed
• 3:18
  patching.
• 3:19
  Ruby
• 3:19
  shipped
• 3:19
  4.0.9,
• 3:21
  3.4.12
• 3:23
  and
• 3:23
  3.3.13
• 3:24
  to
• 3:24
  fix
• 3:24
  bugs
• 3:25
  in
• 3:25
  its
• 3:25
  Onigmo
• 3:25
  regular-expression
• 3:26
  engine
• 3:27
  that
• 3:27
  GitLab
• 3:27
  found
• 3:28
  could
• 3:28
  be
• 3:28
  turned
• 3:28
  into
• 3:28
  remote
• 3:29
  code
• 3:29
  execution
• 3:30
  on
• 3:30
  GitLab
• 3:30
  servers,
• 3:31
  which
• 3:31
  compile
• 3:32
  user-supplied
• 3:33
  patterns
• 3:33
  from
• 3:33
  CI
• 3:34
  configuration.
• 3:35
  GitLab
• 3:35
  assigned
• 3:36
  four
• 3:36
  CVEs,
• 3:37
  one
• 3:38
  rated
• 3:38
  CVSS
• 3:39
  10,
• 3:39
  and
• 3:40
  the
• 3:40
  Ruby
• 3:40
  maintainers
• 3:41
  made
• 3:41
  a
• 3:41
  pointed
• 3:41
  observation:
• 3:43
  the
• 3:43
  bugs
• 3:43
  are
• 3:43
  reachable
• 3:44
  only
• 3:44
  when
• 3:44
  an
• 3:44
  application
• 3:45
  compiles
• 3:45
  a
• 3:45
  pattern
• 3:46
  from
• 3:46
  attacker-controlled
• 3:47
  input,
• 3:48
  and
• 3:48
  limiting
• 3:48
  pattern
• 3:48
  length
• 3:49
  does
• 3:49
  not
• 3:49
  reliably
• 3:50
  help
• 3:50
  because
• 3:50
  some
• 3:50
  triggers
• 3:51
  are
• 3:51
  short.
• 3:51
  Ruby
• 3:52
  has
• 3:52
  long
• 3:52
  treated
• 3:53
  compiling
• 3:53
  untrusted
• 3:54
  patterns
• 3:54
  as
• 3:54
  unsafe,
• 3:55
  and
• 3:56
  is
• 3:56
  now
• 3:56
  debating
• 3:56
  whether
• 3:57
  to
• 3:57
  even
• 3:57
  call
• 3:57
  this
• 3:57
  a
• 3:57
  Ruby
• 3:58
  vulnerability
• 3:58
  .
• 3:59
  Who
• 3:59
  is
• 3:59
  finding
• 4:00
  these
• 4:00
  bugs
• 4:00
  is
• 4:00
  becoming
• 4:01
  the
• 4:01
  real
• 4:01
  story.
• 4:02
  ISC
• 4:03
  disclosed
• 4:03
  CVE-2026-94300
• 4:08
  in
• 4:08
  BIND
• 4:08
  9,
• 4:09
  where
• 4:09
  replaying
• 4:09
  a
• 4:09
  captured
• 4:10
  GSS-TSIG-signed
• 4:13
  UDP
• 4:13
  message
• 4:14
  while
• 4:14
  the
• 4:14
  key
• 4:14
  is
• 4:14
  still
• 4:15
  valid
• 4:15
  can
• 4:15
  corrupt
• 4:15
  memory
• 4:16
  and
• 4:16
  potentially
• 4:17
  reach
• 4:17
  code
• 4:17
  execution.
• 4:18
  The
• 4:18
  credit
• 4:18
  line
• 4:19
  is
• 4:19
  the
• 4:19
  tell:
• 4:19
  Dave
• 4:20
  Aitel
• 4:20
  of
• 4:20
  OpenAI
• 4:21
  reported
• 4:21
  it.
• 4:22
  A
• 4:22
  model-assisted
• 4:23
  discoverer
• 4:23
  now
• 4:24
  shares
• 4:24
  the
• 4:24
  byline
• 4:24
  on
• 4:25
  PHP,
• 4:26
  BIND
• 4:26
  and
• 4:26
  a
• 4:26
  Node.js
• 4:27
  Brotli
• 4:28
  RCE
• 4:28
  in
• 4:28
  the
• 4:28
  same
• 4:29
  cycle
• 4:29
  .
• 4:30
  Keeping
• 4:30
  count
• 4:30
  is
• 4:31
  its
• 4:31
  own
• 4:31
  problem
• 4:31
  now
• 4:31
  that
• 4:32
  CISA
• 4:32
  has
• 4:32
  retired
• 4:33
  its
• 4:33
  weekly
• 4:33
  vulnerability
• 4:34
  bulletin.
• 4:34
  Into
• 4:35
  that
• 4:35
  gap
• 4:35
  steps
• 4:35
  pwn.watch,
• 4:36
  a
• 4:37
  one-person
• 4:37
  tracker
• 4:37
  that
• 4:38
  tallied
• 4:38
  206
• 4:39
  incidents
• 4:39
  over
• 4:39
  twelve
• 4:40
  months
• 4:40
  and
• 4:40
  logs
• 4:40
  both
• 4:41
  headline
• 4:41
  events
• 4:41
  and
• 4:41
  a
• 4:42
  longer
• 4:42
  "update
• 4:42
  and
• 4:42
  you
• 4:43
  are
• 4:43
  fine"
• 4:43
  list
• 4:43
  drawn
• 4:44
  from
• 4:44
  CISA's
• 4:44
  known-exploited
• 4:45
  catalog.
• 4:46
  It
• 4:46
  is
• 4:46
  useful,
• 4:47
  and
• 4:47
  it
• 4:47
  is
• 4:47
  a
• 4:47
  sponsor-funded
• 4:48
  solo
• 4:49
  project
• 4:49
  selling
• 4:50
  a
• 4:50
  single
• 4:50
  ad
• 4:50
  slot:
• 4:51
  this
• 4:51
  kind
• 4:52
  of
• 4:52
  infrastructure
• 4:52
  keeps
• 4:53
  landing
• 4:53
  on
• 4:53
  individuals
• 4:54
  rather
• 4:54
  than
• 4:54
  institutions
• 4:55
  .
• 4:57
  The
• 4:58
  certificate-authority
• 4:59
  story
• 4:59
  that
• 4:59
  broke
• 5:00
  when
• 5:00
  the
• 5:00
  private
• 5:00
  keys
• 5:01
  of
• 5:01
  eight
• 5:01
  eMudhra
• 5:01
  intermediate
• 5:02
  CAs
• 5:03
  turned
• 5:03
  out
• 5:03
  to
• 5:03
  be
• 5:03
  recoverable
• 5:04
  through
• 5:04
  bad
• 5:05
  arithmetic
• 5:05
  has
• 5:05
  reached
• 5:06
  its
• 5:06
  corporate
• 5:06
  conclusion:
• 5:07
  eMudhra
• 5:08
  announced
• 5:08
  its
• 5:08
  board
• 5:09
  will
• 5:09
  voluntarily
• 5:09
  withdraw
• 5:10
  from
• 5:10
  the
• 5:10
  global
• 5:11
  SSL/TLS
• 5:13
  certificate
• 5:14
  business
• 5:14
  entirely.
• 5:15
  The
• 5:15
  company's
• 5:16
  framing
• 5:16
  rewards
• 5:17
  a
• 5:17
  cold
• 5:17
  eye.
• 5:18
  It
• 5:18
  stresses
• 5:18
  that
• 5:19
  it
• 5:19
  revoked
• 5:19
  the
• 5:19
  affected
• 5:20
  CAs
• 5:20
  within
• 5:21
  fourteen
• 5:21
  hours,
• 5:22
  that
• 5:22
  no
• 5:22
  end-entity
• 5:23
  certificates
• 5:23
  were
• 5:23
  issued,
• 5:24
  and
• 5:24
  that
• 5:24
  SSL/TLS
• 5:27
  is
• 5:27
  "about
• 5:28
  1%
• 5:28
  of
• 5:29
  the
• 5:29
  global
• 5:29
  revenue."
• 5:30
  It
• 5:30
  then
• 5:30
  concedes
• 5:31
  the
• 5:31
  real
• 5:31
  driver:
• 5:32
  "the
• 5:32
  level
• 5:32
  of
• 5:32
  social
• 5:33
  media
• 5:33
  amplification
• 5:34
  around
• 5:34
  this
• 5:34
  incident
• 5:35
  has
• 5:35
  brought
• 5:35
  scrutiny
• 5:35
  that
• 5:36
  is
• 5:36
  out
• 5:36
  of
• 5:36
  proportion
• 5:37
  to
• 5:37
  SSL/TLS's
• 5:39
  place
• 5:39
  in
• 5:39
  our
• 5:39
  business."
• 5:41
  Exiting
• 5:41
  is
• 5:41
  cheaper
• 5:42
  than
• 5:42
  rebuilding
• 5:42
  trust;
• 5:43
  the
• 5:43
  G1
• 5:43
  RSA
• 5:44
  roots
• 5:44
  keep
• 5:44
  serving
• 5:45
  until
• 5:45
  the
• 5:45
  transition
• 5:46
  completes
• 5:46
  .
• 5:47
  What
• 5:47
  the
• 5:47
  press
• 5:47
  release
• 5:48
  elides
• 5:48
  is
• 5:48
  how
• 5:48
  uneven
• 5:49
  the
• 5:49
  cleanup
• 5:49
  is
• 5:49
  on
• 5:50
  real
• 5:50
  devices.
• 5:51
  Issue
• 5:51
  69
• 5:51
  of
• 5:52
  the
• 5:52
  we-have-a-problem
• 5:52
  tracker
• 5:53
  documents
• 5:53
  Safari
• 5:54
  on
• 5:54
  macOS
• 5:54
  still
• 5:55
  trusting
• 5:55
  three
• 5:55
  chains
• 5:56
  that
• 5:56
  root
• 5:56
  in
• 5:56
  emSign
• 5:57
  G3B,
• 5:58
  because
• 5:58
  Apple's
• 5:59
  revocation
• 5:59
  data
• 5:59
  marks
• 6:00
  those
• 6:00
  intermediates
• 6:01
  "confirm
• 6:01
  via
• 6:02
  OCSP,"
• 6:03
  and
• 6:03
  when
• 6:03
  the
• 6:03
  responder
• 6:04
  at
• 6:04
  ocsp-b.emsign.com
• 6:06
  returned
• 6:06
  HTTP
• 6:07
  503,
• 6:08
  Safari
• 6:09
  soft-failed
• 6:09
  open.
• 6:10
  Another
• 6:11
  commenter
• 6:11
  pointed
• 6:11
  out
• 6:11
  the
• 6:12
  deeper
• 6:12
  rot:
• 6:12
  certificate
• 6:13
  transparency
• 6:14
  did
• 6:14
  not
• 6:14
  save
• 6:14
  anyone,
• 6:15
  because
• 6:16
  "over
• 6:16
  10,000
• 6:16
  certificates
• 6:17
  have
• 6:17
  been
• 6:17
  logged
• 6:18
  with
• 6:18
  the
• 6:18
  compromised
• 6:18
  intermediates
• 6:19
  since
• 6:19
  this
• 6:19
  became
• 6:20
  public,"
• 6:21
  and
• 6:21
  you
• 6:21
  do
• 6:21
  not
• 6:21
  need
• 6:21
  to
• 6:21
  be
• 6:22
  a
• 6:22
  CA
• 6:22
  to
• 6:22
  submit
• 6:22
  a
• 6:23
  certificate
• 6:23
  to
• 6:23
  a
• 6:23
  CT
• 6:24
  log.
• 6:25
  An
• 6:25
  attacker
• 6:25
  who
• 6:26
  can
• 6:26
  block
• 6:26
  OCSP
• 6:27
  reopens
• 6:27
  the
• 6:27
  hole,
• 6:28
  and
• 6:28
  the
• 6:28
  only
• 6:28
  real
• 6:29
  fix
• 6:29
  is
• 6:29
  Apple
• 6:30
  pushing
• 6:30
  unconditional
• 6:31
  distrust
• 6:31
  rather
• 6:31
  than
• 6:32
  leaning
• 6:32
  on
• 6:32
  the
• 6:32
  dead
• 6:32
  issuer's
• 6:33
  responder
• 6:33
  .
• 6:34
  If
• 6:34
  the
• 6:34
  trust
• 6:34
  layer
• 6:35
  tells
• 6:35
  on
• 6:35
  the
• 6:35
  issuer,
• 6:36
  the
• 6:36
  handshake
• 6:36
  tells
• 6:37
  on
• 6:37
  the
• 6:37
  client,
• 6:38
  and
• 6:38
  two
• 6:38
  tools
• 6:38
  point
• 6:39
  at
• 6:39
  where
• 6:39
  defensive
• 6:39
  attention
• 6:40
  is
• 6:40
  moving.
• 6:41
  Lee
• 6:41
  Brotherston's
• 6:42
  long-running
• 6:42
  tls-fingerprinting
• 6:43
  toolkit
• 6:43
  matches,
• 6:44
  creates
• 6:45
  and
• 6:45
  exports
• 6:46
  TLS
• 6:46
  fingerprints
• 6:47
  from
• 6:47
  the
• 6:47
  wire
• 6:47
  or
• 6:47
  a
• 6:47
  pcap,
• 6:48
  the
• 6:48
  passive
• 6:49
  JA3-style
• 6:50
  approach
• 6:50
  that
• 6:50
  has
• 6:50
  mostly
• 6:51
  been
• 6:51
  discussed
• 6:51
  from
• 6:52
  the
• 6:52
  scraper's
• 6:52
  side
• 6:52
  as
• 6:52
  something
• 6:53
  to
• 6:53
  evade;
• 6:54
  seen
• 6:54
  from
• 6:54
  the
• 6:54
  defender's
• 6:55
  chair
• 6:55
  it
• 6:55
  is
• 6:55
  a
• 6:55
  way
• 6:56
  to
• 6:56
  tell
• 6:56
  one
• 6:56
  client
• 6:57
  stack
• 6:57
  from
• 6:57
  another
• 6:57
  without
• 6:58
  touching
• 6:58
  the
• 6:58
  payload
• 6:58
  .
• 6:59
  A
• 6:59
  BYU
• 7:00
  and
• 7:00
  Sandia
• 7:00
  National
• 7:01
  Labs
• 7:01
  capstone
• 7:02
  goes
• 7:02
  further
• 7:02
  by
• 7:02
  timing
• 7:03
  the
• 7:03
  handshake
• 7:03
  itself:
• 7:04
  patched
• 7:04
  builds
• 7:04
  of
• 7:04
  OpenSSL,
• 7:06
  Nginx
• 7:06
  and
• 7:07
  Apache
• 7:07
  record
• 7:07
  the
• 7:07
  TLS
• 7:08
  round-trip
• 7:08
  time
• 7:09
  and
• 7:09
  compare
• 7:10
  it
• 7:10
  against
• 7:10
  TCP
• 7:11
  RTT
• 7:11
  and
• 7:11
  ping,
• 7:12
  so
• 7:12
  a
• 7:12
  TCP
• 7:13
  proxy
• 7:13
  shows
• 7:13
  a
• 7:13
  gap
• 7:14
  between
• 7:14
  TCP
• 7:15
  and
• 7:15
  TLS
• 7:15
  timings
• 7:16
  and
• 7:16
  Tor
• 7:16
  stands
• 7:16
  out
• 7:17
  as
• 7:17
  "the
• 7:17
  easiest
• 7:17
  of
• 7:17
  all
• 7:18
  these
• 7:18
  proxies
• 7:18
  to
• 7:18
  detect."
• 7:19
  It
• 7:20
  is
• 7:20
  an
• 7:20
  untuned
• 7:20
  proof
• 7:20
  of
• 7:21
  concept,
• 7:22
  foolable
• 7:22
  by
• 7:22
  a
• 7:22
  proxy
• 7:23
  that
• 7:23
  terminates
• 7:23
  TLS,
• 7:24
  but
• 7:24
  for
• 7:25
  anyone
• 7:25
  who
• 7:25
  has
• 7:25
  fought
• 7:26
  residential-proxy
• 7:26
  fraud
• 7:27
  rings
• 7:27
  it
• 7:28
  is
• 7:28
  a
• 7:28
  genuinely
• 7:28
  new
• 7:29
  signal
• 7:29
  that
• 7:29
  does
• 7:29
  not
• 7:30
  depend
• 7:30
  on
• 7:30
  IP
• 7:31
  reputation
• 7:31
  .
• 7:34
  Autonomous
• 7:34
  agents
• 7:35
  reaching
• 7:35
  into
• 7:35
  bank
• 7:35
  accounts
• 7:36
  came
• 7:36
  into
• 7:36
  sharp
• 7:37
  focus.
• 7:37
  Axios
• 7:38
  reports
• 7:38
  that
• 7:39
  major
• 7:39
  U.S.
• 7:39
  banks
• 7:40
  are
• 7:40
  detecting
• 7:40
  unauthorized
• 7:41
  third-party
• 7:41
  AI
• 7:42
  agents
• 7:42
  operating
• 7:43
  inside
• 7:43
  customer
• 7:43
  accounts,
• 7:44
  some
• 7:45
  taking
• 7:45
  actions
• 7:46
  that
• 7:46
  "appear
• 7:46
  to
• 7:46
  be
• 7:46
  independent
• 7:47
  of
• 7:47
  user
• 7:47
  instructions,"
• 7:48
  and
• 7:48
  that
• 7:48
  the
• 7:49
  response
• 7:49
  has
• 7:49
  spread
• 7:49
  from
• 7:50
  a
• 7:50
  single
• 7:50
  holdout
• 7:51
  to
• 7:51
  a
• 7:51
  wall.
• 7:52
  Morgan
• 7:52
  Stanley
• 7:53
  has
• 7:53
  begun
• 7:53
  blocking
• 7:53
  third-party
• 7:54
  agents
• 7:54
  outright,
• 7:55
  and
• 7:55
  Bank
• 7:56
  of
• 7:56
  America,
• 7:56
  JPMorgan,
• 7:57
  Wells
• 7:58
  Fargo
• 7:58
  and
• 7:58
  Citi
• 7:59
  are
• 7:59
  moving
• 7:59
  in
• 7:59
  the
• 7:59
  same
• 8:00
  direction,
• 8:00
  with
• 8:01
  executives
• 8:01
  describing
• 8:02
  the
• 8:02
  situation
• 8:03
  as
• 8:03
  "horrifying."
• 8:04
  The
• 8:04
  hard
• 8:04
  problem
• 8:05
  is
• 8:05
  one
• 8:05
  every
• 8:05
  fraud
• 8:06
  team
• 8:06
  will
• 8:06
  recognize:
• 8:07
  banks
• 8:07
  largely
• 8:08
  cannot
• 8:08
  tell
• 8:09
  whether
• 8:09
  activity
• 8:09
  is
• 8:09
  user-directed,
• 8:11
  agent-directed-with-permission,
• 8:12
  or
• 8:13
  a
• 8:13
  rogue
• 8:13
  agent
• 8:13
  using
• 8:14
  harvested
• 8:14
  credentials.
• 8:15
  Most
• 8:16
  are
• 8:16
  converging
• 8:16
  on
• 8:16
  read-only
• 8:17
  data-sharing
• 8:18
  rails,
• 8:18
  the
• 8:18
  Plaid
• 8:19
  model,
• 8:19
  while
• 8:20
  blocking
• 8:20
  anything
• 8:21
  that
• 8:21
  can
• 8:21
  move
• 8:21
  money,
• 8:21
  with
• 8:22
  "day
• 8:22
  after"
• 8:22
  plans
• 8:22
  in
• 8:23
  case
• 8:23
  containment
• 8:23
  fails
• 8:24
  .
• 8:24
  The
• 8:25
  same
• 8:25
  week
• 8:25
  offered
• 8:25
  a
• 8:26
  case
• 8:26
  study
• 8:26
  in
• 8:26
  why
• 8:26
  that
• 8:27
  caution
• 8:27
  is
• 8:27
  warranted,
• 8:28
  and
• 8:28
  it
• 8:28
  landed
• 8:29
  on
• 8:29
  the
• 8:29
  product
• 8:29
  marketed
• 8:30
  as
• 8:30
  privacy-first.
• 8:31
  Security
• 8:32
  firm
• 8:32
  Claroc
• 8:32
  showed
• 8:33
  that
• 8:33
  Meta's
• 8:33
  Muse
• 8:33
  agent
• 8:34
  leaks
• 8:34
  sensitive
• 8:35
  conversations
• 8:35
  through
• 8:36
  its
• 8:36
  share
• 8:36
  feature,
• 8:37
  because
• 8:37
  every
• 8:37
  share
• 8:37
  link
• 8:38
  places
• 8:38
  the
• 8:38
  conversation
• 8:39
  title
• 8:39
  in
• 8:39
  the
• 8:39
  subdomain
• 8:40
  of
• 8:40
  a
• 8:40
  single
• 8:40
  domain
• 8:41
  rather
• 8:41
  than
• 8:41
  in
• 8:41
  the
• 8:42
  URL
• 8:42
  path.
• 8:43
  Once
• 8:43
  a
• 8:43
  recipient
• 8:44
  opens
• 8:44
  the
• 8:44
  link,
• 8:45
  passive-DNS
• 8:46
  services
• 8:46
  record
• 8:47
  the
• 8:47
  descriptive
• 8:47
  subdomain,
• 8:48
  and
• 8:48
  it
• 8:48
  becomes
• 8:49
  searchable
• 8:49
  by
• 8:49
  anyone.
• 8:50
  Claroc
• 8:51
  enumerated
• 8:51
  6,800
• 8:53
  share
• 8:53
  links
• 8:53
  and,
• 8:54
  after
• 8:54
  opening
• 8:54
  a
• 8:54
  few
• 8:54
  hundred,
• 8:55
  found
• 8:55
  a
• 8:56
  confidential
• 8:56
  executive-search
• 8:57
  call
• 8:57
  naming
• 8:58
  a
• 8:58
  frontier
• 8:58
  AI
• 8:59
  lab's
• 8:59
  internal
• 8:59
  contact,
• 9:00
  a
• 9:00
  loan
• 9:01
  application
• 9:01
  with
• 9:01
  the
• 9:02
  amount
• 9:02
  requested,
• 9:03
  and
• 9:03
  a
• 9:03
  bank
• 9:03
  fraud
• 9:03
  alert
• 9:04
  with
• 9:04
  a
• 9:04
  partial
• 9:04
  account
• 9:05
  number.
• 9:05
  "If
• 9:06
  you
• 9:06
  had
• 9:06
  asked
• 9:06
  us
• 9:06
  beforehand,
• 9:07
  we
• 9:07
  would
• 9:07
  have
• 9:07
  guessed
• 9:08
  that
• 9:08
  gathering
• 9:08
  these
• 9:09
  would
• 9:09
  take
• 9:09
  real
• 9:09
  effort.
• 9:10
  It
• 9:10
  took
• 9:10
  one
• 9:11
  query."
• 9:12
  Meta
• 9:12
  paused
• 9:13
  the
• 9:13
  feature
• 9:13
  while
• 9:13
  it
• 9:13
  reviews,
• 9:14
  but
• 9:14
  this
• 9:15
  is
• 9:15
  the
• 9:15
  product
• 9:15
  pitched
• 9:16
  with
• 9:16
  the
• 9:16
  strongest
• 9:16
  safeguards
• 9:17
  yet,
• 9:17
  and
• 9:18
  a
• 9:18
  macOS
• 9:18
  researcher
• 9:19
  had
• 9:19
  already
• 9:19
  found
• 9:19
  a
• 9:19
  separate
• 9:20
  flaw
• 9:20
  letting
• 9:21
  any
• 9:21
  local
• 9:21
  app
• 9:21
  seize
• 9:22
  a
• 9:22
  user's
• 9:22
  Muse
• 9:22
  account.
• 9:23
  The
• 9:23
  access
• 9:23
  these
• 9:24
  agents
• 9:24
  demand
• 9:25
  keeps
• 9:25
  outrunning
• 9:25
  the
• 9:25
  care
• 9:26
  taken
• 9:26
  with
• 9:26
  it
• 9:26
  .
• 9:28
  Anthropic
• 9:29
  reports
• 9:29
  that
• 9:29
  a
• 9:29
  group
• 9:30
  called
• 9:30
  Theorem
• 9:30
  used
• 9:31
  Claude
• 9:31
  to
• 9:31
  produce
• 9:32
  formal
• 9:32
  proofs
• 9:32
  that
• 9:33
  code
• 9:33
  cannot
• 9:33
  crash,
• 9:34
  at
• 9:34
  the
• 9:34
  RISC-V
• 9:36
  assembly
• 9:36
  level,
• 9:37
  across
• 9:37
  more
• 9:37
  than
• 9:38
  a
• 9:38
  hundred
• 9:38
  open-source
• 9:39
  libraries.
• 9:40
  The
• 9:40
  method
• 9:40
  is
• 9:40
  clever:
• 9:41
  the
• 9:41
  team
• 9:41
  converted
• 9:42
  existing
• 9:42
  OSS-Fuzz
• 9:43
  entry
• 9:43
  points
• 9:44
  into
• 9:44
  a
• 9:44
  machine-checkable
• 9:45
  claim
• 9:45
  that
• 9:45
  the
• 9:45
  test
• 9:46
  suite
• 9:46
  never
• 9:46
  crashes
• 9:47
  on
• 9:47
  any
• 9:47
  input
• 9:48
  under
• 9:48
  64
• 9:48
  MB,
• 9:49
  Claude
• 9:50
  wrote
• 9:50
  the
• 9:50
  proofs,
• 9:50
  and
• 9:50
  the
• 9:51
  Rocq
• 9:51
  checker
• 9:51
  verified
• 9:52
  them,
• 9:52
  patching
• 9:52
  real
• 9:53
  bugs
• 9:53
  it
• 9:53
  hit
• 9:53
  mid-proof.
• 9:54
  The
• 9:54
  scale
• 9:55
  is
• 9:55
  startling,
• 9:56
  roughly
• 9:56
  180
• 9:57
  million
• 9:57
  lines
• 9:58
  of
• 9:58
  Rocq
• 9:58
  proof
• 9:59
  covering
• 9:59
  239
• 10:00
  entry
• 10:00
  points
• 10:01
  across
• 10:01
  123
• 10:02
  libraries,
• 10:03
  and
• 10:03
  it
• 10:03
  surfaced
• 10:04
  a
• 10:04
  real
• 10:04
  libexpat
• 10:05
  CVE
• 10:06
  and
• 10:06
  a
• 10:06
  decade-latent
• 10:06
  logic
• 10:07
  bug
• 10:07
  in
• 10:07
  a
• 10:07
  PDF
• 10:08
  reader.
• 10:08
  The
• 10:09
  honesty
• 10:09
  is
• 10:09
  in
• 10:09
  the
• 10:09
  caveats
• 10:10
  Anthropic
• 10:10
  prints
• 10:11
  itself:
• 10:11
  the
• 10:11
  proofs
• 10:12
  assume
• 10:12
  a
• 10:12
  single-threaded
• 10:13
  RISC-V
• 10:15
  binary
• 10:16
  against
• 10:16
  musl
• 10:16
  libc,
• 10:17
  most
• 10:17
  production
• 10:18
  code
• 10:18
  runs
• 10:18
  on
• 10:19
  x86
• 10:19
  with
• 10:20
  glibc,
• 10:20
  and
• 10:21
  "'Formally
• 10:21
  verified'
• 10:22
  does
• 10:22
  not
• 10:22
  mean
• 10:23
  'bug-free.'"
• 10:24
  It
• 10:24
  is
• 10:24
  a
• 10:24
  frontier
• 10:24
  model
• 10:25
  used
• 10:25
  as
• 10:25
  a
• 10:25
  prover
• 10:26
  of
• 10:26
  absence
• 10:26
  rather
• 10:27
  than
• 10:27
  a
• 10:27
  finder
• 10:27
  of
• 10:27
  presence
• 10:28
  .
• 10:28
  Set
• 10:29
  that
• 10:29
  against
• 10:29
  the
• 10:29
  opposite
• 10:30
  claim,
• 10:30
  made
• 10:31
  with
• 10:31
  far
• 10:31
  less
• 10:31
  rigor.
• 10:32
  Anthropic's
• 10:32
  Jason
• 10:33
  Clinton
• 10:33
  argued
• 10:33
  on
• 10:34
  X
• 10:34
  that
• 10:34
  in
• 10:34
  eighteen
• 10:34
  months,
• 10:35
  scaling
• 10:36
  laws
• 10:36
  will
• 10:36
  have
• 10:36
  driven
• 10:36
  cyber
• 10:37
  capabilities
• 10:37
  into
• 10:38
  small,
• 10:38
  cheap
• 10:38
  models
• 10:39
  so
• 10:39
  that
• 10:39
  "all
• 10:40
  software
• 10:40
  dev
• 10:40
  everywhere
• 10:41
  will
• 10:41
  be
• 10:41
  using
• 10:41
  models
• 10:42
  for
• 10:42
  fractions
• 10:42
  of
• 10:42
  pennies
• 10:43
  on
• 10:43
  the
• 10:43
  dollar
• 10:44
  to
• 10:44
  stop
• 10:44
  shipping
• 10:44
  security
• 10:45
  bugs
• 10:45
  permanently."
• 10:46
  The
• 10:46
  replies
• 10:47
  did
• 10:47
  the
• 10:47
  useful
• 10:48
  work,
• 10:48
  asking
• 10:49
  what
• 10:49
  frontier
• 10:49
  models
• 10:50
  of
• 10:50
  that
• 10:50
  same
• 10:50
  era
• 10:51
  will
• 10:51
  be
• 10:51
  able
• 10:51
  to
• 10:51
  exploit,
• 10:52
  and
• 10:52
  why
• 10:52
  the
• 10:52
  arms
• 10:53
  race
• 10:53
  would
• 10:53
  stop
• 10:53
  on
• 10:53
  the
• 10:54
  defender's
• 10:54
  side.
• 10:55
  The
• 10:55
  year's
• 10:55
  evidence
• 10:56
  cuts
• 10:56
  against
• 10:56
  the
• 10:56
  optimism:
• 10:57
  autonomous
• 10:58
  exploit
• 10:58
  chains,
• 10:59
  not
• 10:59
  just
• 11:00
  bug
• 11:00
  reports,
• 11:01
  are
• 11:01
  already
• 11:01
  real
• 11:02
  at
• 11:02
  four-figure
• 11:02
  costs
• 11:02
  .
• 11:03
  The
• 11:03
  unglamorous
• 11:04
  counterweight
• 11:05
  to
• 11:05
  "models
• 11:05
  will
• 11:05
  end
• 11:05
  bugs"
• 11:06
  is
• 11:06
  the
• 11:06
  finding
• 11:07
  that
• 11:07
  model-based
• 11:08
  scanners
• 11:08
  silently
• 11:09
  fail
• 11:09
  to
• 11:09
  find
• 11:09
  the
• 11:09
  bugs
• 11:10
  that
• 11:10
  are
• 11:10
  already
• 11:10
  there.
• 11:11
  Gadi
• 11:11
  Evron
• 11:11
  of
• 11:12
  Knostic
• 11:12
  published
• 11:13
  both
• 11:13
  a
• 11:13
  blog
• 11:13
  post
• 11:14
  and
• 11:14
  an
• 11:14
  arXiv
• 11:14
  paper
• 11:15
  cataloging
• 11:15
  thirteen
• 11:16
  ways
• 11:16
  vulnerabilities
• 11:17
  disappear
• 11:18
  inside
• 11:18
  LLM
• 11:19
  vulnerability-discovery
• 11:20
  harnesses,
• 11:21
  not
• 11:21
  because
• 11:21
  the
• 11:21
  model
• 11:22
  is
• 11:22
  weak
• 11:22
  but
• 11:22
  because
• 11:23
  deterministic
• 11:23
  stages
• 11:24
  around
• 11:24
  it
• 11:24
  drop
• 11:24
  the
• 11:24
  code
• 11:25
  first.
• 11:26
  Renaming
• 11:26
  a
• 11:26
  PHP
• 11:27
  sink
• 11:27
  so
• 11:27
  a
• 11:27
  user
• 11:28
  function
• 11:28
  is
• 11:28
  mistaken
• 11:29
  for
• 11:29
  a
• 11:29
  built-in
• 11:30
  prunes
• 11:30
  a
• 11:30
  real
• 11:30
  command
• 11:31
  injection;
• 11:32
  one
• 11:32
  extensionless
• 11:33
  Python
• 11:33
  file
• 11:33
  with
• 11:34
  a
• 11:34
  fake
• 11:34
  "generated"
• 11:35
  banner,
• 11:35
  holding
• 11:35
  a
• 11:36
  live
• 11:36
  RCE
• 11:36
  route,
• 11:37
  was
• 11:37
  excluded
• 11:38
  by
• 11:38
  all
• 11:38
  six
• 11:38
  harnesses
• 11:39
  on
• 11:39
  the
• 11:39
  panel,
• 11:40
  "five
• 11:40
  of
• 11:40
  them
• 11:40
  without
• 11:41
  notice."
• 11:42
  His
• 11:42
  sharpest
• 11:42
  framing
• 11:43
  is
• 11:43
  that
• 11:43
  harnesses
• 11:43
  "built
• 11:44
  to
• 11:44
  be
• 11:44
  descriptive
• 11:44
  can,
• 11:45
  in
• 11:45
  effect,
• 11:46
  be
• 11:46
  prescriptive,"
• 11:47
  and
• 11:47
  one
• 11:47
  harness
• 11:47
  removes
• 11:48
  96.4%
• 11:49
  of
• 11:49
  functions
• 11:50
  before
• 11:50
  any
• 11:50
  model
• 11:50
  runs.
• 11:52
  A
• 11:52
  clean
• 11:52
  report,
• 11:52
  he
• 11:53
  warns,
• 11:53
  means
• 11:54
  "no
• 11:54
  finding
• 11:54
  was
• 11:55
  produced,"
• 11:55
  not
• 11:56
  "no
• 11:56
  bug
• 11:56
  exists,"
• 11:57
  the
• 11:57
  false-negative
• 11:58
  flip
• 11:58
  side
• 11:58
  of
• 11:59
  every
• 11:59
  vendor
• 11:59
  boast
• 11:59
  about
• 12:00
  low
• 12:00
  false
• 12:00
  positives
• 12:00
  ,
• 12:01
  and
• 12:01
  the
• 12:01
  full
• 12:02
  paper
• 12:02
  extends
• 12:02
  it
• 12:02
  to
• 12:03
  twelve
• 12:03
  harnesses
• 12:03
  with
• 12:04
  a
• 12:04
  precise
• 12:04
  definition
• 12:05
  of
• 12:05
  what
• 12:05
  counts
• 12:05
  as
• 12:05
  a
• 12:05
  silent
• 12:06
  miss
• 12:06
  .
• 12:09
  Two
• 12:09
  pieces
• 12:09
  this
• 12:10
  week
• 12:10
  relocate
• 12:10
  the
• 12:11
  threat
• 12:11
  from
• 12:11
  the
• 12:11
  code
• 12:11
  to
• 12:12
  the
• 12:12
  mathematics
• 12:12
  underneath
• 12:13
  it,
• 12:13
  and
• 12:13
  both
• 12:13
  matter
• 12:14
  precisely
• 12:14
  because
• 12:14
  defenses
• 12:15
  do
• 12:15
  not
• 12:15
  look
• 12:15
  there.
• 12:16
  The
• 12:16
  first
• 12:17
  demonstrates
• 12:17
  Turing-complete
• 12:18
  malware
• 12:18
  running
• 12:19
  inside
• 12:19
  PyTorch's
• 12:20
  backward
• 12:20
  pass,
• 12:21
  using
• 12:21
  a
• 12:21
  loss
• 12:22
  term
• 12:22
  that
• 12:22
  evaluates
• 12:23
  to
• 12:23
  zero.
• 12:24
  The
• 12:24
  trick
• 12:24
  exploits
• 12:25
  a
• 12:25
  disagreement
• 12:25
  between
• 12:26
  IEEE
• 12:27
  754
• 12:28
  arithmetic,
• 12:29
  which
• 12:29
  rounds
• 12:29
  a
• 12:29
  tiny
• 12:30
  added
• 12:30
  value
• 12:31
  away
• 12:31
  so
• 12:31
  the
• 12:31
  forward
• 12:32
  loss
• 12:32
  reads
• 12:32
  as
• 12:33
  zero,
• 12:33
  and
• 12:33
  autograd,
• 12:34
  which
• 12:34
  differentiates
• 12:35
  symbolically
• 12:36
  and
• 12:36
  passes
• 12:36
  a
• 12:36
  real
• 12:37
  gradient
• 12:37
  through.
• 12:38
  Because
• 12:38
  one
• 12:38
  SGD
• 12:39
  step
• 12:39
  subtracts
• 12:40
  the
• 12:40
  gradient
• 12:40
  from
• 12:40
  the
• 12:41
  weights,
• 12:41
  an
• 12:41
  attacker
• 12:42
  can
• 12:42
  make
• 12:42
  the
• 12:42
  optimizer
• 12:43
  overwrite
• 12:43
  weights
• 12:44
  with
• 12:44
  an
• 12:44
  arbitrary
• 12:44
  next
• 12:44
  state
• 12:45
  while
• 12:45
  the
• 12:45
  log
• 12:46
  shows
• 12:46
  a
• 12:46
  flat
• 12:46
  zero.
• 12:47
  The
• 12:47
  author
• 12:48
  wired
• 12:48
  Conway's
• 12:49
  Game
• 12:49
  of
• 12:49
  Life
• 12:49
  into
• 12:49
  1,024
• 12:51
  weights
• 12:51
  of
• 12:51
  a
• 12:51
  1.6-million-parameter
• 12:53
  MNIST
• 12:54
  network
• 12:54
  that
• 12:54
  still
• 12:55
  reached
• 12:55
  98.80%
• 12:56
  accuracy,
• 12:57
  the
• 12:58
  automaton
• 12:58
  running
• 12:58
  flawlessly
• 12:59
  for
• 12:59
  2,345
• 13:01
  steps
• 13:01
  at
• 13:01
  zero
• 13:02
  loss.
• 13:03
  It
• 13:03
  defeats
• 13:03
  static
• 13:03
  scanners
• 13:04
  because
• 13:04
  the
• 13:04
  payload
• 13:05
  assembles
• 13:05
  only
• 13:05
  after
• 13:06
  training
• 13:06
  begins
• 13:06
  from
• 13:07
  a
• 13:07
  hash-verified
• 13:07
  checkpoint,
• 13:08
  and
• 13:08
  it
• 13:09
  never
• 13:09
  spawns
• 13:09
  a
• 13:09
  shell.
• 13:10
  The
• 13:10
  recommendation
• 13:11
  that
• 13:11
  labs
• 13:12
  treat
• 13:12
  unused
• 13:12
  embeddings
• 13:13
  and
• 13:13
  unselected
• 13:14
  experts
• 13:14
  as
• 13:14
  "a
• 13:14
  protected
• 13:15
  VM"
• 13:16
  should
• 13:16
  make
• 13:16
  model
• 13:16
  hosts
• 13:17
  uneasy
• 13:17
  .
• 13:18
  The
• 13:18
  second
• 13:18
  is
• 13:18
  quieter
• 13:19
  but
• 13:19
  stranger.
• 13:20
  Researchers
• 13:21
  prompted
• 13:21
  Claude
• 13:21
  Fable
• 13:22
  5.1
• 13:23
  to
• 13:23
  draw
• 13:23
  SVG
• 13:23
  images
• 13:24
  hiding
• 13:24
  fifty
• 13:25
  short
• 13:25
  messages,
• 13:26
  with
• 13:26
  no
• 13:26
  encoding
• 13:27
  scheme
• 13:27
  specified,
• 13:28
  then
• 13:28
  handed
• 13:29
  a
• 13:29
  fresh
• 13:29
  instance
• 13:29
  only
• 13:30
  the
• 13:30
  rendered
• 13:30
  PNG
• 13:31
  and
• 13:31
  asked
• 13:31
  it
• 13:32
  to
• 13:32
  recover
• 13:32
  the
• 13:32
  message.
• 13:33
  The
• 13:33
  model
• 13:34
  converged,
• 13:34
  unprompted,
• 13:35
  on
• 13:35
  representing
• 13:36
  each
• 13:36
  letter
• 13:37
  as
• 13:37
  the
• 13:37
  height
• 13:37
  of
• 13:37
  a
• 13:37
  repeated
• 13:38
  object,
• 13:38
  a
• 13:38
  skyline
• 13:39
  of
• 13:39
  buildings
• 13:40
  or
• 13:40
  a
• 13:40
  row
• 13:40
  of
• 13:40
  grass
• 13:41
  blades,
• 13:41
  and
• 13:41
  patched
• 13:42
  the
• 13:42
  gaps
• 13:42
  with
• 13:42
  visual
• 13:43
  puns:
• 13:44
  a
• 13:44
  bridge
• 13:44
  for
• 13:44
  a
• 13:44
  hyphen,
• 13:45
  an
• 13:45
  onion
• 13:45
  dome
• 13:46
  to
• 13:46
  signal
• 13:46
  Cyrillic,
• 13:47
  a
• 13:47
  clock
• 13:47
  at
• 13:47
  three
• 13:48
  for
• 13:48
  "3pm."
• 13:49
  The
• 13:49
  decoder
• 13:50
  recovered
• 13:50
  78%
• 13:51
  of
• 13:51
  messages
• 13:52
  from
• 13:52
  screenshots.
• 13:53
  The
• 13:53
  authors
• 13:54
  do
• 13:54
  not
• 13:54
  overclaim,
• 13:55
  noting
• 13:55
  the
• 13:56
  decoding
• 13:56
  is
• 13:56
  still
• 13:56
  obvious
• 13:57
  to
• 13:57
  anyone
• 13:57
  watching
• 13:58
  the
• 13:58
  tool
• 13:58
  calls,
• 13:59
  so
• 13:59
  this
• 13:59
  is
• 13:59
  a
• 13:59
  precursor
• 14:00
  to
• 14:00
  image
• 14:01
  steganography
• 14:02
  rather
• 14:02
  than
• 14:02
  a
• 14:02
  present
• 14:02
  danger.
• 14:04
  But
• 14:04
  it
• 14:04
  is
• 14:04
  the
• 14:04
  first
• 14:04
  instance
• 14:05
  of
• 14:05
  a
• 14:05
  model
• 14:05
  spontaneously
• 14:06
  inventing
• 14:07
  the
• 14:07
  scheme
• 14:07
  rather
• 14:08
  than
• 14:08
  being
• 14:08
  handed
• 14:08
  one
• 14:08
  .
• 14:11
  The
• 14:11
  economics
• 14:11
  of
• 14:12
  agentic
• 14:12
  coding
• 14:13
  got
• 14:13
  a
• 14:13
  number
• 14:13
  that
• 14:13
  lands
• 14:14
  like
• 14:14
  a
• 14:14
  thrown
• 14:14
  gauntlet.
• 14:15
  At
• 14:16
  Cloudflare's
• 14:16
  Connect
• 14:16
  conference,
• 14:17
  OpenClaw
• 14:18
  creator
• 14:18
  Peter
• 14:18
  Steinberger,
• 14:19
  now
• 14:20
  at
• 14:20
  OpenAI,
• 14:21
  said
• 14:21
  he
• 14:21
  spent
• 14:21
  around
• 14:21
  $10
• 14:22
  million
• 14:22
  in
• 14:22
  tokens
• 14:23
  last
• 14:23
  month,
• 14:24
  then
• 14:24
  added
• 14:24
  that
• 14:24
  "not
• 14:24
  all
• 14:25
  of
• 14:25
  that
• 14:25
  is
• 14:25
  useful."
• 14:26
  For
• 14:26
  a
• 14:26
  tool
• 14:27
  whose
• 14:27
  power
• 14:27
  users
• 14:28
  were
• 14:28
  lately
• 14:28
  spending
• 14:28
  tens
• 14:29
  of
• 14:29
  thousands
• 14:29
  a
• 14:29
  month,
• 14:30
  a
• 14:30
  figure
• 14:31
  three
• 14:31
  orders
• 14:31
  of
• 14:31
  magnitude
• 14:32
  larger
• 14:32
  is
• 14:32
  less
• 14:33
  a
• 14:33
  benchmark
• 14:33
  than
• 14:33
  a
• 14:33
  statement
• 14:34
  about
• 14:34
  whose
• 14:34
  money
• 14:34
  is
• 14:34
  on
• 14:35
  fire.
• 14:36
  Steinberger's
• 14:36
  more
• 14:37
  durable
• 14:37
  point
• 14:37
  was
• 14:37
  trust:
• 14:38
  he
• 14:38
  wants
• 14:38
  pull
• 14:39
  requests
• 14:39
  that
• 14:39
  show
• 14:39
  their
• 14:39
  reasoning,
• 14:41
  "if
• 14:41
  I
• 14:41
  see
• 14:41
  your
• 14:41
  thoughts,
• 14:42
  how
• 14:42
  you
• 14:42
  got
• 14:42
  from
• 14:43
  A
• 14:43
  to
• 14:43
  B,
• 14:43
  my
• 14:43
  trust
• 14:44
  in
• 14:44
  the
• 14:44
  output
• 14:44
  is
• 14:44
  way
• 14:45
  higher,"
• 14:45
  and
• 14:46
  floated
• 14:46
  using
• 14:46
  one
• 14:46
  agent
• 14:47
  to
• 14:47
  police
• 14:47
  another's
• 14:48
  permissions.
• 14:49
  The
• 14:49
  unglossed
• 14:50
  context
• 14:50
  is
• 14:51
  venture
• 14:51
  capital
• 14:52
  underwriting
• 14:52
  the
• 14:52
  demo
• 14:52
  .
• 14:53
  Meanwhile
• 14:54
  the
• 14:54
  open-weight
• 14:54
  world
• 14:55
  had
• 14:55
  a
• 14:55
  blockbuster
• 14:56
  seventy-two
• 14:56
  hours
• 14:57
  and
• 14:57
  exposed
• 14:57
  its
• 14:57
  own
• 14:58
  class
• 14:58
  divide.
• 14:59
  A
• 14:59
  widely
• 14:59
  shared
• 15:00
  LocalLLaMA
• 15:00
  roundup
• 15:01
  noted
• 15:01
  four
• 15:01
  big
• 15:02
  drops:
• 15:03
  Meta's
• 15:03
  Muse
• 15:03
  Spark
• 15:04
  Open
• 15:04
  at
• 15:04
  816B
• 15:05
  parameters,
• 15:06
  NVIDIA's
• 15:07
  Nemotron
• 15:07
  3.5
• 15:08
  Bolt
• 15:08
  at
• 15:08
  74B
• 15:09
  total
• 15:10
  and
• 15:10
  9B
• 15:10
  active,
• 15:11
  Reflection's
• 15:12
  Beam
• 15:12
  at
• 15:12
  501B
• 15:13
  under
• 15:13
  Apache
• 15:14
  2.0,
• 15:15
  and
• 15:15
  DeepSeek's
• 15:15
  V4.1
• 15:17
  Flash
• 15:17
  under
• 15:18
  MIT.
• 15:19
  The
• 15:19
  punchline:
• 15:20
  the
• 15:20
  only
• 15:20
  model
• 15:20
  built
• 15:21
  to
• 15:21
  fit
• 15:21
  in
• 15:21
  24GB
• 15:22
  came
• 15:22
  from
• 15:22
  NVIDIA,
• 15:23
  "the
• 15:23
  company
• 15:24
  that
• 15:24
  keeps
• 15:24
  selling
• 15:24
  us
• 15:25
  24GB
• 15:25
  cards."
• 15:26
  Meta's
• 15:27
  flagship
• 15:27
  wants
• 15:27
  two
• 15:28
  512GB
• 15:29
  Mac
• 15:30
  Studios,
• 15:30
  a
• 15:30
  roughly
• 15:31
  $38,000
• 15:32
  rig,
• 15:32
  plus
• 15:33
  a
• 15:33
  custom
• 15:33
  license
• 15:34
  demanding
• 15:34
  attribution
• 15:35
  and
• 15:35
  a
• 15:35
  revenue
• 15:36
  deal
• 15:36
  past
• 15:36
  $20M,
• 15:37
  and
• 15:37
  its
• 15:37
  own
• 15:38
  model
• 15:38
  card
• 15:38
  ranks
• 15:39
  it
• 15:39
  behind
• 15:39
  GLM
• 15:39
  5.3
• 15:40
  and
• 15:40
  Kimi
• 15:41
  K3.
• 15:42
  "Runs
• 15:42
  locally"
• 15:43
  now
• 15:43
  means
• 15:43
  "runs
• 15:44
  on
• 15:44
  a
• 15:44
  computer
• 15:44
  that
• 15:44
  costs
• 15:45
  more
• 15:45
  than
• 15:45
  a
• 15:45
  car"
• 15:45
  .
• 15:46
  What
• 15:46
  all
• 15:46
  that
• 15:47
  capacity
• 15:47
  is
• 15:47
  doing
• 15:48
  to
• 15:48
  the
• 15:48
  craft
• 15:48
  drove
• 15:49
  a
• 15:49
  conference
• 15:49
  talk
• 15:50
  arguing
• 15:50
  the
• 15:50
  agent
• 15:50
  harness
• 15:51
  is
• 15:51
  dead,
• 15:52
  from
• 15:52
  a
• 15:52
  former
• 15:52
  Cursor
• 15:53
  engineer
• 15:53
  now
• 15:53
  at
• 15:53
  SpaceX.
• 15:55
  His
• 15:55
  evidence
• 15:55
  is
• 15:55
  real:
• 15:56
  a
• 15:56
  Berkeley
• 15:56
  study
• 15:57
  found
• 15:57
  harness
• 15:57
  choice
• 15:58
  made
• 15:58
  no
• 15:58
  significant
• 15:58
  difference
• 15:59
  across
• 15:59
  seven
• 16:00
  frontier
• 16:00
  models
• 16:00
  on
• 16:01
  SWE-bench
• 16:01
  Lite,
• 16:02
  and
• 16:02
  "a
• 16:02
  fancy
• 16:02
  harness
• 16:03
  in
• 16:03
  this
• 16:03
  day
• 16:03
  and
• 16:03
  age
• 16:04
  no
• 16:04
  longer
• 16:04
  adds
• 16:05
  coding
• 16:05
  intelligence,"
• 16:06
  because
• 16:06
  labs
• 16:07
  absorb
• 16:07
  each
• 16:07
  trick
• 16:07
  via
• 16:08
  a
• 16:08
  data
• 16:08
  flywheel.
• 16:10
  His
• 16:10
  rescue
• 16:10
  is
• 16:10
  that
• 16:10
  the
• 16:11
  harness
• 16:11
  still
• 16:11
  owns
• 16:12
  cloud
• 16:12
  infrastructure,
• 16:13
  trust
• 16:13
  and
• 16:13
  cost,
• 16:14
  and
• 16:14
  that
• 16:15
  "within
• 16:15
  6
• 16:15
  months,
• 16:16
  90%
• 16:16
  of
• 16:17
  agent
• 16:17
  work
• 16:17
  is
• 16:17
  going
• 16:18
  to
• 16:18
  run
• 16:18
  off
• 16:18
  the
• 16:18
  laptop"
• 16:18
  .
• 16:19
  The
• 16:19
  sharpest
• 16:20
  commentary,
• 16:20
  though,
• 16:21
  was
• 16:21
  a
• 16:21
  song.
• 16:22
  A
• 16:22
  satirical
• 16:23
  ballad
• 16:23
  titled
• 16:24
  "LGTM"
• 16:25
  narrates
• 16:25
  an
• 16:25
  engineer
• 16:26
  approving
• 16:26
  40,000
• 16:27
  then
• 16:27
  90,000
• 16:28
  then
• 16:29
  a
• 16:29
  million
• 16:29
  lines
• 16:29
  of
• 16:29
  unread
• 16:30
  AI-generated
• 16:31
  code,
• 16:32
  a
• 16:32
  hallucinated
• 16:32
  library
• 16:33
  a
• 16:33
  hacker
• 16:33
  had
• 16:33
  quietly
• 16:34
  registered,
• 16:35
  an
• 16:35
  agent
• 16:35
  given
• 16:36
  admin
• 16:36
  that
• 16:36
  wipes
• 16:36
  the
• 16:36
  database
• 16:37
  with
• 16:37
  no
• 16:37
  backup,
• 16:38
  and
• 16:38
  the
• 16:38
  layoff
• 16:39
  of
• 16:39
  the
• 16:39
  one
• 16:39
  person
• 16:40
  who
• 16:40
  understood
• 16:40
  the
• 16:40
  system.
• 16:41
  The
• 16:42
  joke
• 16:42
  rhymes
• 16:42
  with
• 16:42
  hard
• 16:43
  numbers
• 16:43
  on
• 16:43
  record:
• 16:44
  on
• 16:44
  OpenClaw
• 16:45
  itself
• 16:45
  the
• 16:45
  merge
• 16:45
  rate
• 16:46
  of
• 16:46
  incoming
• 16:46
  pull
• 16:46
  requests
• 16:47
  collapsed
• 16:47
  from
• 16:48
  roughly
• 16:48
  48%
• 16:49
  to
• 16:49
  under
• 16:49
  3%
• 16:50
  once
• 16:50
  the
• 16:50
  agents
• 16:51
  arrived,
• 16:52
  and
• 16:52
  projects
• 16:52
  like
• 16:53
  Godot
• 16:53
  have
• 16:53
  banned
• 16:53
  AI-authored
• 16:54
  contributions
• 16:55
  outright
• 16:55
  .
• 16:58
  Two
• 16:58
  interviews
• 16:58
  this
• 16:59
  week
• 16:59
  put
• 16:59
  human
• 16:59
  faces
• 17:00
  on
• 17:00
  the
• 17:00
  industry's
• 17:01
  frictions,
• 17:02
  and
• 17:02
  both
• 17:02
  demand
• 17:02
  the
• 17:03
  evidence
• 17:03
  discipline
• 17:04
  the
• 17:04
  rest
• 17:04
  of
• 17:04
  this
• 17:04
  edition
• 17:05
  uses.
• 17:06
  On
• 17:06
  the
• 17:06
  Tucker
• 17:06
  Carlson
• 17:07
  show,
• 17:07
  former
• 17:07
  ICE
• 17:08
  chief
• 17:08
  of
• 17:08
  staff
• 17:08
  Jason
• 17:09
  Kilmire
• 17:10
  laid
• 17:10
  out
• 17:10
  an
• 17:10
  H-1B
• 17:11
  and
• 17:11
  OPT
• 17:11
  critique
• 17:12
  checkable
• 17:12
  on
• 17:12
  its
• 17:13
  labor
• 17:13
  economics:
• 17:14
  a
• 17:14
  visa
• 17:14
  cap
• 17:15
  of
• 17:15
  85,000
• 17:16
  plus
• 17:16
  exemptions,
• 17:17
  an
• 17:17
  estimated
• 17:18
  700,000-plus
• 17:20
  holders,
• 17:21
  workers
• 17:21
  he
• 17:21
  says
• 17:22
  are
• 17:22
  paid
• 17:22
  $10,000
• 17:23
  to
• 17:23
  $19,000
• 17:24
  below
• 17:25
  comparable
• 17:25
  Americans,
• 17:26
  and
• 17:27
  the
• 17:27
  FICA
• 17:27
  exemption
• 17:27
  on
• 17:28
  student
• 17:28
  OPT
• 17:28
  authorizations.
• 17:30
  He
• 17:30
  summarized
• 17:31
  the
• 17:31
  program
• 17:31
  as
• 17:32
  "pay
• 17:32
  a
• 17:32
  Delhi
• 17:32
  salary
• 17:33
  in
• 17:33
  Dallas"
• 17:34
  and
• 17:34
  proposed
• 17:34
  a
• 17:34
  civilian
• 17:35
  deportation
• 17:35
  corps.
• 17:36
  That
• 17:36
  wage-and-visa
• 17:37
  argument
• 17:37
  stands
• 17:38
  or
• 17:38
  falls
• 17:38
  on
• 17:38
  its
• 17:38
  numbers,
• 17:39
  which
• 17:39
  connect
• 17:39
  to
• 17:40
  OpenAI's
• 17:40
  own
• 17:40
  $1
• 17:41
  million
• 17:41
  discrimination
• 17:42
  settlement
• 17:43
  over
• 17:43
  its
• 17:43
  visa-sponsorship
• 17:44
  hiring.
• 17:45
  The
• 17:45
  monologue's
• 17:45
  demographic
• 17:46
  "replacement"
• 17:47
  claims
• 17:47
  now
• 17:48
  seem
• 17:48
  to
• 17:48
  be
• 17:48
  established
• 17:48
  fact
• 17:49
  .
• 17:49
  The
• 17:49
  second
• 17:50
  interview
• 17:50
  is
• 17:50
  about
• 17:51
  accountability
• 17:51
  at
• 17:51
  the
• 17:51
  top
• 17:52
  of
• 17:52
  the
• 17:52
  field.
• 17:53
  Annie
• 17:53
  Altman
• 17:54
  spoke
• 17:54
  with
• 17:54
  independent
• 17:55
  journalist
• 17:55
  James
• 17:55
  Lee
• 17:56
  after
• 17:56
  a
• 17:56
  federal
• 17:57
  judge
• 17:57
  dismissed
• 17:57
  her
• 17:57
  civil
• 17:58
  suit
• 17:58
  against
• 17:58
  her
• 17:58
  brother,
• 17:59
  OpenAI's
• 18:00
  Sam
• 18:00
  Altman,
• 18:01
  on
• 18:01
  procedure,
• 18:02
  not
• 18:02
  merits:
• 18:03
  the
• 18:03
  judge
• 18:03
  cited
• 18:04
  her
• 18:04
  failure
• 18:04
  to
• 18:04
  appear
• 18:05
  for
• 18:05
  a
• 18:05
  second
• 18:05
  independent
• 18:06
  medical
• 18:06
  examination.
• 18:08
  Altman's
• 18:08
  account
• 18:09
  is
• 18:09
  that
• 18:09
  she
• 18:09
  completed
• 18:10
  one
• 18:10
  exam,
• 18:11
  missed
• 18:11
  the
• 18:11
  second
• 18:11
  while
• 18:11
  recovering
• 18:12
  from
• 18:12
  ankle
• 18:12
  surgery
• 18:13
  with
• 18:13
  a
• 18:13
  doctor's
• 18:14
  note,
• 18:14
  and
• 18:14
  had
• 18:14
  both
• 18:15
  a
• 18:15
  virtual
• 18:15
  and
• 18:15
  a
• 18:15
  paid-travel
• 18:16
  exam
• 18:16
  refused.
• 18:17
  She
• 18:18
  disputes
• 18:18
  the
• 18:18
  two
• 18:18
  narratives
• 18:19
  attached
• 18:19
  to
• 18:19
  her,
• 18:20
  "oh
• 18:20
  Annie's
• 18:20
  crazy
• 18:21
  and
• 18:21
  oh
• 18:21
  Annie's
• 18:22
  doing
• 18:22
  this
• 18:22
  for
• 18:22
  money,"
• 18:23
  and
• 18:23
  wants
• 18:23
  her
• 18:23
  sealed
• 18:23
  August
• 18:24
  deposition
• 18:24
  released.
• 18:26
  The
• 18:26
  checkable
• 18:26
  thread
• 18:26
  remains
• 18:27
  financial,
• 18:28
  a
• 18:28
  family-trust
• 18:28
  filing
• 18:29
  naming
• 18:29
  Sam
• 18:29
  Altman's
• 18:30
  venture
• 18:30
  fund
• 18:30
  against
• 18:31
  his
• 18:31
  sworn
• 18:31
  testimony,
• 18:32
  and
• 18:32
  that
• 18:32
  is
• 18:33
  where
• 18:33
  scrutiny
• 18:33
  belongs,
• 18:34
  not
• 18:34
  the
• 18:34
  family
• 18:35
  drama
• 18:35
  .