X 时间轴

追踪 16 位 AI 圈大佬 · 共 50 条推文

管理账号 →
10/26
levelsio@levelsio·
In tonight's Brazil presidential elections, something that looks like a coup just happened The ruling left wing candidate Lula kept the polling booths open 2 extra hours to get more votes in places where he was predicted to win (7pm) While closing the polling booths in places where his opponent Bolsonaro was predicted to win at the right time (5pm) Of course this will likely give Lula the edge he needed to win in a tight 50-50 race which everyone predicted he was going to lose from Bolsonaro Complete banana republic stuff, can't make this up! 🍌
10/25
levelsio@levelsio·
Yesterday I spent all day typing this into Claude Code: "Do a full security audit of this website and server" On every single VPS (and site) I have I already had automatic unattended upgrades with auto reboot for security updates in Ubuntu (reboot only takes 4 minutes so I think it's fine every few weeks) Also isolated each VPS on Tailscale with special security policies (generated by Claude Code! so it can not access any other VPS (in case it gets hacked) and not even access my MacBook or iPhone unless I talk to it first Also lots of user permission stuff isolating stuff to www-data to avoid root access for web services Not the most fun stuff but essential I think in addition to @yongfook's "marketing week" we now have to add one week per month of "security week" because with the models getting better our pre-emptive defense has to get better too Luckily for us I think the attack and defense capabilities of AI models seems to somewhat match? So as long as we keep typing "do a security audit" regularly into our clanker we can keep it safe I hope 🫨
levelsio@levelsio·
Finally learnt how to make 🍿 popcorn in a pan I wanted to stop using those microwave popcorn bags Microwave popcorn bags used to have a PFAS bag lining but that got banned in EU and US, but they're still not great. They use cheap palm oil (highly saturated fat) and synthetic butter flavoring (2,3-pentanedione a chemical twin of diacetyl that was used before and banned) 1) put a kinda tall pan, like a sauce pan, on medium to high heat (I use 12/14 on electric stove) 2) then make the pan very hot first like the sides have to feel hot too 3) then spray the pan inside with extra virgin olive oil (maybe you can use butter too? I will try next time) 4) then cover the pan with corn, it shouldn't stack, just level 5) keep pan open and wait until one corn pops 6) once it pops, put the lid fully on and start moving it back and forth kinda shaking, so the corns don't burn 7) then it takes about same as microwave popcorn, like 3-4mins, then once it stops popping every few seconds stop it 8) then add salt and put in a bowl That gets you healthy popcorn with just olive oil and salt! I'm not sure about adding salt before or after btw, I'll try, one problem adding it after is you sometimes breathe in the salt when eating cause it doesn't stick so well to the popcorn
karpathy@karpathy·
If you've ever wondered why smart TVs are so cheap, this is why. @log4j rooted his Samsung and found an always-on hot mic, automatic content recognition, geolocation, network mapping, ad targeting and user profiling, shared with Samsung's "400 partners". A lot of it can be blocked in <15 min, wrote a basic guide below. What your TV is doing The main culprit is ACR (automatic content recognition). Your TV screenshots what's on screen, fingerprints it, and sends it home to build your ad profile. Samsung does it every 500ms, LG every 10ms [1]. What is insane: it happens on connected devices too. Plug in your laptop, your console, your work machine, and your TV can fingerprint that via HDMI [1]. He also found that if your Samsung doesn't have a mic, it'll look for one from a connected soundbar or bluetooth device. https://x.com/log4j/status/2113762242327892456?s=20 It's on by default, and you likely agreed to it on the setup screen you clicked through in 10 seconds. Step 1: Turn off ACR Samsung: Terms & Privacy → Viewing Information Services LG: Live Plus Vizio: Viewing Data Roku: "Use info from TV inputs" Sony/Google TV: Samba Interactive TV Menus vary by model, but those are the names to look for. While you're in there, opt out of interest-based ads, reset your advertising ID, decline every optional privacy agreement, turn off voice recognition, and delete apps you never open. Step 2: Give smart devices their own network Put the TV, cameras, speakers and vacuum on your router's guest/IoT network. The logic is simple: these devices rarely get patched. If one gets compromised (getting drastically more frequent with AI), it shouldn't be able to see your other devices or home network. Step 3: Block trackers for the whole house with DNS-level filtering NextDNS (cloud-based) is easy and has a solid free plan. Pi-hole is a little bit more work if you prefer self hosting. For simplicity we'll focus on the former. 1. Sign up at http://nextdns.io (free tier is plenty) 2. Privac
10/24
levelsio@levelsio·
R to @levelsio: Oops they changed the new airport location "Yes, Montijo was explicitly the official plan for years. The strategy to convert Montijo Air Base into a commercial hub was formally approved and pushed heavily by the Portuguese government and airport operator ANA (Vinci)" "May 2024: The Pivot to Alcochete: With Montijo legally dead, the government abandoned the air base project and returned to a grander scale layout at the Alcochete Firing Range " https://x.com/ravenfz/status/2114030995078836345?s=20
levelsio@levelsio·
China's ordered every government agency to draw up plans for mass AI job losses. We should be doing the same tbh. We're a services country, ~80% of the economy is people answering messages, entering data, writing reports. That's the exact work this stuff does first, and does better. Only thing in the way is compliance and we're still early. Nobody I know is hiring juniors or mids. I've been the youngest in my team for 5 years and I'm 29. Yes it's a change, a big one. But it's only a problem if we sit on our hands. Get ahead of it and it's the biggest opportunity this country's had in my lifetime.
10/23
OpenAI@OpenAI·
During this red-teaming exercise, we also found a vulnerability that allows for unauthenticated remote code execution in Brotli, a widely-deployed compression library included in many pieces of software such as Node.js, Bun, and Envoy. The flaw could let an attacker run their own code on affected systems by sending or replying with malicious compressed data, without any need to create a user account. That is, an unpatched server that accepts compressed input could be taken over by a malicious client, and an unpatched client that accepts compressed input (such as “curl --compressed”) could be taken over by a malicious server. This root cause issue was actually fixed in the Brotli source code in February, but it wasn’t known at the time that it gave rise to a security vulnerability and there was no more recent release of Brotli. Since Brotli is built into other software, any software which includes this library needs to take the update too, followed by the users of that software. We disclosed the vulnerability to Brotli and other downstream projects such as Node.js, which released or are currently releasing security updates, and Brotli cut new release versions and published a CVE. More details on the patch and mitigations below: https://patchtheplanet.org/brotli