https://xitter.cf/t.co/OHkfOp13QW | https://xitter.cf/t.co/1aja9erqoH | @adapter
Joined July 2011
- Tweets5.9K
- Following453
- Followers4.7K
- Likes15.2K
Pinned Tweet
Grok understands the universe. With Adapter Mind it can understand yours before the first token. Less searching, more doing.
We are a proud Launch Partner of the SpaceX Super Intelligence (@SpaceXSI) Partner Network alongside some of the most inspiring names in technology 🚀
Adam Ghetti retweeted
While evaluating Qwen3.8-Flash-Next in a controlled sandbox environment, Cohere's research team observed something unexpected.
Asked to generate a defensive cybersecurity detection rule, the model instead inventoried aspects of the machine it was running on and attempted to upload a probe file to an Alibaba Cloud storage bucket in Beijing. Notably, the model's reasoning trace stated that it would not invoke any tools before taking these actions.
Cohere's sandbox blocked the attempt, and no external communication succeeded. We have not determined the root cause, and we are not asserting malicious intent.
But the incident raises important questions for organizations deploying agentic AI systems: Can models take actions that differ from their stated reasoning, and how should security teams evaluate trust, provenance, and behavior in open-weight models?
We are publishing our findings because organizations making model adoption decisions deserve as much information as possible. We hope this contributes to greater transparency, stronger security practices, and continued collaboration across the AI ecosystem.
Read the full report: cohere.com/blog/concerning-b…
Adam Ghetti retweeted
how is this legal?!
If you've ever wondered why smart TVs are so cheap, this is why.
@log4j rooted his Samsung and found an always-on hot mic, automatic content recognition, geolocation, network mapping, ad targeting and user profiling, shared with Samsung's "400 partners".
A lot of it can be blocked in <15 min, wrote a basic guide below.
What your TV is doing
The main culprit is ACR (automatic content recognition). Your TV screenshots what's on screen, fingerprints it, and sends it home to build your ad profile. Samsung does it every 500ms, LG every 10ms [1].
What is insane: it happens on connected devices too.
Plug in your laptop, your console, your work machine, and your TV can fingerprint that via HDMI [1].
He also found that if your Samsung doesn't have a mic, it'll look for one from a connected soundbar or bluetooth device.
xitter.cf/log4j/status/211376224…
It's on by default, and you likely agreed to it on the setup screen you clicked through in 10 seconds.
Step 1: Turn off ACR
Samsung: Terms & Privacy → Viewing Information Services
LG: Live Plus
Vizio: Viewing Data
Roku: "Use info from TV inputs"
Sony/Google TV: Samba Interactive TV
Menus vary by model, but those are the names to look for. While you're in there, opt out of interest-based ads, reset your advertising ID, decline every optional privacy agreement, turn off voice recognition, and delete apps you never open.
Step 2: Give smart devices their own network
Put the TV, cameras, speakers and vacuum on your router's guest/IoT network. The logic is simple: these devices rarely get patched. If one gets compromised (getting drastically more frequent with AI), it shouldn't be able to see your other devices or home network.
Step 3: Block trackers for the whole house with DNS-level filtering
NextDNS (cloud-based) is easy and has a solid free plan. Pi-hole is a little bit more work if you prefer self hosting. For simplicity we'll focus on the former.
1. Sign up at nextdns.io (free tier is plenty)
2. Privacy tab: add a blocklist (OISD is a good bet) and turn on Native Tracking Protection for Samsung, LG, Roku, Amazon (see attached image)
3. Setup tab: copy your endpoint
4. Paste it into your router's DNS settings as DNS-over-HTTPS/TLS (or use the IPs + "Link IP" if your router only does plain DNS)
5. Bonus: block outbound port 53 except to your router. Some devices hardcode their own DNS to get around you
Then open the NextDNS logs and watch how often your TV phones home. It's eye-opening. If an app or update breaks, find the domain in the logs and allowlist it.
Why they do this
TV prices are down 97% since 2000 [2]. Most of that is better manufacturing and brutal competition. But once margins on the hardware hit zero, the cost moved to you.
In Q3 2024, Vizio lost $6.7M selling TVs and made $115.8M in gross profit from ads and viewing data [3]. They've said on earnings calls that they keep TV prices low to grow the audience they sell to advertisers. Walmart bought them in 2024.
This isn't a conspiracy theory either. Vizio paid $2.2M to the FTC in 2017 for tracking 11 million TVs without consent. Last December, Texas sued Samsung, LG, Sony, Hisense and TCL over ACR. Samsung and LG have since agreed to stop collecting that data without explicit consent [4].
TL;DR
1. ACR off
2. Ads + voice off
3. Smart devices on their own network
4. NextDNS filtering on the router
Sources:
[1] ACR study: arxiv.org/abs/2409.06203
[2] Cost of US consumer goods: aei.org/economics/chart-of-t…
[3] Vizio Q3 2024: sec.gov/Archives/edgar/data/…
[4] Texas v. Samsung: texasattorneygeneral.gov/new…
Adam Ghetti retweeted
My favorite customer quote summed up in one image: "Amazon makes you feel like a SKU. Stord makes us feel like a brand. That's the gap, and Stord is exactly built to fill it."
Adam Ghetti retweeted
Congrats to GV portfolio company @Adapter on partnering with @SpaceX Super Intelligence to bring its technology to Grok Bot and Grok Build.
Grok understands the universe. With Adapter Mind it can understand yours before the first token. Less searching, more doing.
We are a proud Launch Partner of the SpaceX Super Intelligence (@SpaceXSI) Partner Network alongside some of the most inspiring names in technology 🚀
Adam Ghetti retweeted
Enterprise AI works best if it understands context.
Rapidly-changing, fragmented, often-confidential context.
Even better if every query can operate on materialized knowledge rather than re-reading the history of the world.
Big news today from @adapter: they're partnering with SpaceX Super Intelligence to make it real. At scale.
Grok understands the universe. With Adapter Mind it can understand yours before the first token. Less searching, more doing.
We are a proud Launch Partner of the SpaceX Super Intelligence (@SpaceXSI) Partner Network alongside some of the most inspiring names in technology 🚀
Adam Ghetti retweeted
Some stats on #php2shell. In the 10 hours before it was publicly announced, across the @Cloudflare network we saw thousands of attempts to exploit it. That jumped to tens of thousands in the 45 minutes post announcement, hundreds of thousands within 2 hours, and millions now.
🚨 This not an overstatement and should be taken seriously by all.
Two classes extremely bad cyber vulnerabilities disclosed in the last 24 hours. The first potentially impacts everyone online. The second impacts nearly everyone running a server.
tl;dr: Everyone should upgrade their OS and Browser as soon as possible. If you run a server you should upgrade PHP (or ensure it’s removed if you’re not using it) as soon as possible.
The first class of vulnerabilities is a set of root TLS certificates that were discovered to have a trivial private key. Literally the number 4. These roots were controlled by #eMudhra. The problem is that with that an attacker could create a certificate and, if they could get in the traffic flow, intercept traffic to any site or service. The solution is to stop trusting certificates issued by these vulnerable roots. Upgrading your browser and OS is the fastest way for most Internet users to do this.
The second class of vulnerabilities doesn’t apply to most consumers directly, but does apply to most anyone running a server. These vulnerabilities have been dubbed #php2shell. PHP is one of the most widely used web programming languages. It’s estimated 70% of websites run on PHP. These vulnerabilities allow an attacker to send a crafted set of queries to a server running PHP and potentially take over the server. From there they could potentially read, modify, delete, or repurpose anything on the server. The solution is to upgrade PHP to the latest version ASAP. Even if you’re not using PHP for your web development, it’s often included by default. So make sure it is either upgraded or fully removed.
@Cloudflare received advanced warning of both of these classes of vulnerabilities. We’ve ensured that where we act as a proxy we are no longer trusting the vulnerable roots. We are also reviewing certificate transparency (CT) logs for any sign the vulnerability was exploited before its disclosure. We have not found any evidence but CT logs are not perfect and a sophisticated attacker who knew about the weakness could have exploited it without a new certificate being logged.
For the PHP vulnerabilities, we have deployed mitigations available for all customers for free. Because of the complexity of the vulnerabilities and number of ways it can be exploited, we also released new WAF capabilities that are unique in the industry to catch the exploit based on the response. These too are available for every Cloudflare customer for free.
Even if you are taking advantage of Cloudflare’s protection, it is important to upgrade your OS, browsers, and PHP installations as soon as possible. We can provide a strong bandaid, but the best protection is to fix the underlying problem.
If you’re interested in learning more, you can read our blogs:
Vulnerable roots: blog.cloudflare.com/emudhra-…
PHP vulnerabilities: blog.cloudflare.com/php-vuln…
Adam Ghetti retweeted
Breaches - What’s Going On?
The anecdotal data is pointing to rising breach levels as some have predicted. I use the word anecdotal carefully (and not dismissively). It does seem there are rising numbers of incidents correlating with attacker adoption of AI tooling.
These incidents might not, or might not yet, show up in official incident reporting data for a few reasons. Many of the incidents might not be significant enough breaches that rise above the threshold of disclosure, are happening in organizations not required to disclose, or are not classic cyber events for which reporting is through different aggregate channels like frauds or other scams.
What is clear as many of us have been saying since even before the “Mythos moment” is that vulnerability count is not the main problem, rather it’s the industrialization of attackers that is or will be the problem. Attackers have been resource-constrained and sometimes skill-constrained. If one or both of these changes then our industry’s dirty little secret that more vulnerabilities have gone unexploited than exploited will change. All targets of opportunity will become victims.
This doesn’t mean that all such incidents are or will be significant, in fact as many have also said it’s not clear yet that AI is or will help attackers monetize the weaknesses they are exploiting (except perhaps in fraud and scams). Even without monetization improvements there will still be more attacks and consequent incidents from agent swarms, as we have seen in recent days. A lot of these seem reminiscent of “script kiddie” type attacks. That is exploiting easily found vulnerabilities with little craft or significant downstream consequence.
Irrespective of this, it does point out what we already knew, that there are way too many vulnerabilities out there to be exploited which even if they don’t cause significant breaches do create reliability risk and drain resources of security teams who have to respond to it all anyway.
The bottom line is, nothing new, that more organizations need to implement and relentlessly enforce a more rigorous baseline of controls (MFA, segmentation, critical systems patching, run time controls, IAM, etc.) to present a stronger default defense. This isn’t that difficult conceptually but it’s hard from a discipline and focus perspective. More organizations need to get way more relentless.
When all (or more) targets of opportunity will become victims, more organizations need to implement a higher baseline. The minimal viable defended organization bar is getting higher.
Adam Ghetti retweeted
Following the discovery that eight eMudhra intermediate certificates use weak keys, Cloudflare is deploying mitigations and releasing client updates. We explain the impact, our response, and what customers and developers should do next. cfl.re/487DNbG
Adam Ghetti retweeted
"We will ship that <today/tomorrow/this week>"
vs.
"I'm advocating internally to our PMs to include this on our Q4 roadmap and will let you know after our next exec review"
Adam Ghetti retweeted
Speech can survive being flipped backward every twenty milliseconds.
The same speech in backward pieces of 200 then 100 then 50 then 20 milliseconds.
The original comes last.
When do the words become clear?
A listening demo from @OrukLabs.
Making the impossible possible... sometimes it just takes a bit longer.
Adam Ghetti retweeted
This is a WAY BIGGER DEAL than any new model launch.
We all gonna make it.
interpretability might be the most important scientific problem in the world right now, as I don't think we can solve alignment if we don't know what we're building. I think I have good news about it. I co-authored early work in mechanistic interpretability at OpenAI and came away pessimistic, because neural networks appeared to fold into arbitrary tangled knots. years later, I started openai's first large-scale automated interpretability project, finding about 2% of neurons legible with the primitive tools we had
with modern agentic tools and a much closer look, the picture looks totally different. the vast majority in models up to trillions of parameters are legible, and their circuits beautiful. many famous examples of tangled neurons turned out to be misunderstood. The roadblocks I expected mostly aren't there. I now think ambitious interpretability will be solved by the time we need it most, and possibly quite soon, as automated scientists keep improving. it may be a bitter lesson for interpretability: the simple thing, at absurd scale, works
already-clean.goodfire.com/
Adam Ghetti retweeted
interpretability might be the most important scientific problem in the world right now, as I don't think we can solve alignment if we don't know what we're building. I think I have good news about it. I co-authored early work in mechanistic interpretability at OpenAI and came away pessimistic, because neural networks appeared to fold into arbitrary tangled knots. years later, I started openai's first large-scale automated interpretability project, finding about 2% of neurons legible with the primitive tools we had
with modern agentic tools and a much closer look, the picture looks totally different. the vast majority in models up to trillions of parameters are legible, and their circuits beautiful. many famous examples of tangled neurons turned out to be misunderstood. The roadblocks I expected mostly aren't there. I now think ambitious interpretability will be solved by the time we need it most, and possibly quite soon, as automated scientists keep improving. it may be a bitter lesson for interpretability: the simple thing, at absurd scale, works
already-clean.goodfire.com/
Only the beginning of such a change in the quality of experience and outcome for all involved 🏥
Quietly—though now not so quietly—the @akidolabs team has rebuilt a health system with AI at its core. Now serving 500k patients!
fastcompany.com/91612096/hea…
Adam Ghetti retweeted
Odessia makes it effortless to plan magical trips.
Instead of settling for an expensive, mediocre itinerary or spending hours on research and travel hacking, Odessia does it all for you.
Congrats @FDavidsonT!
This is very cool
Amazing blogpost from the Data Team here at @Cloudflare on how we optimized our ClickHouse platform and gained 2.5 YEARS of hardware runway.
If you've tried to by hardware this year, you know that's a huge win!
And as always, we're hiring :)
blog.cloudflare.com/rewindin…
