Machine learning researcher @ Qualcomm AI Research, ex-ML PhD @DTU_Compute. Interested in geometric ML. Non serviam.
Amsterdam, the Netherlands
Joined September 2014
- Tweets1.2K
- Following621
- Followers427
- Likes97.2K
Pinned Tweet
Our paper "Variational Autoencoders with Riemannian Brownian Motion Priors" was accepted in #icml2020
See you virtually in @icmlconf
arxiv: arxiv.org/abs/2002.05227
code (still being refactored): github.com/dimkal89/rvae
Dimitris Kalatzis retweeted
The final goal of AI companies is to end personal computing which in simple terms means to remove all access to digital devices from genral public. You can already see how prices of laptops, phones and PCs are being artificially inflated so no one can afford them anymore.
This is the largest endeavour to move digital assets from people to the technocrats. They recognise the monetary value which internet affords to common people and want to take it away. After they've taken away all your phones & PCs they will sell you a rectangle box which would run on a cloud and would require a constant subscription, this is their long game.
Dimitris Kalatzis retweeted
🦔Sam Altman says it’s “quite terrible” for regular people to keep so much memory in their own computers. He told the Cheeky Pint podcast that home PCs only use their RAM about 5% of the time. In his view, the world’s limited supply of memory does more good in the cloud.
My Take
He said this the same day Intel blamed expensive memory for a drop in PC sales. My car stays parked for most of the day too, and I’m not selling it to rent one by the hour.
OpenAI earns its money when you rent its computers instead of using your own, so of course Altman wants the memory in his data centers. I think he worries about local AI more than he lets on, because people who run good models at home have less reason to pay for ChatGPT.
Hedgie🤗
Dimitris Kalatzis retweeted
🚨🚨Apple basically told him that Israel has either just hacked his devices or is trying to.
He made the brilliant documentary on the Pager attack in Lebanon.
They literally destroyed his home last week.
Now this.
Yesterday, I received a security notification from Apple warning me that my iPhone had been targeted by a sophisticated mercenary spyware attack, involving technology of the kind developed by companies such as NSO Group, the Israeli firm behind the notorious Pegasus spyware.
Perhaps the most alarming aspect of Apple’s warning was its confirmation that such attacks target specific individuals “because of who you are or what you do.”
This is not the first time I have been targeted by spyware. I was previously targeted with Pegasus in both 2017 and 2021.
I do not yet know who is behind this latest attack, or whether it is connected to my investigative documentary, The Trap, which I directed and co-produced. The film, available on Al Jazeera 360, exposed the details of the September 2024 pager explosions in Lebanon.
What is certain, however, is that the targeting of journalists with sophisticated spyware poses a grave threat to press freedom, the confidentiality of journalistic sources, and the very foundations of independent investigative journalism.
Dimitris Kalatzis retweeted
The guy who signed for up to 900k DRAM wafers a month, about 40% of global output, is lecturing us about DRAM allocation.
The RAM in my computer is already paid for. Running a model on it takes nothing from anyone. Your data centers are a big reason RAM prices went crazy.
By that logic nobody should buy a car or a house either. We should all just rent.
A model on my machine can't be repriced, rate-limited, nerfed, or shut off when you change your mind. My data never leaves my desk. That's control you'd rather keep for yourself.
Local inference is a revenue problem for you.
Dimitris Kalatzis retweeted
The same guys who claimed a few days ago that Qwen open-weight models plant backdoors just took Canadian taxpayer money at a CAD $35.7B valuation.
Their Artificial Analysis score? 9.
Meanwhile, you have probably never heard of Motif Technologies, a Korean sovereign AI startup. They scored 47 on Artificial Analysis with Motif 3, and their valuation is CAD $136M.
Even MiniMax sits at CAD $10B.
AI is clearly an important technology, but way too much money is being burned on absolute garbage right now.
Dimitris Kalatzis retweeted
Fuck you, @ArtificialAnlys
Your new index says Claude Haiku 5.5 is smarter than DeepSeek V4.1 Flash 1017 and GLM-5.3.
Haiku is Anthropic's small cheap model. DeepSeek 1017 is the model Cursor put on its cost frontier this month, and Cursor says no model scores higher at those prices. I run it every day on my 4x 3090. I dont believe for a second that Haiku beats it.
Look at how they got there. 60% of the index now runs on private tests nobody outside can see. GDPval-AA, SciCode and the long context test are gone. In comes a private coding benchmark from Cognition. And the open weights gap goes from 3 points to 12 in 1 release, 4x. Released open models are now 26 points behind the top.
1 day before v5, on the old version, they gave Ling 3.1 Flash 1019 a 44. Now the best released open model gets 32.
The weights didnt change. The tests did, and you cant see the tests.
This is a bought benchmark. A leaderboard where you cant check a single question, that widens the gap 4x overnight and puts Haiku above DeepSeek, is marketing for closed labs. Its not measurement. I hope at least you were paid enough money to publish such garbage. Liars.
Publish the questions or stop calling it an index.
Announcing Artificial Analysis Intelligence Index v5, featuring 2 new benchmarks and 3 upgrades. For the first time, the majority of the Index is built on private datasets
The Artificial Analysis Intelligence Index is our composite measure of model capabilities across tasks reflecting real-world usage today. v5 is our biggest upgrade since v4 launched in January. With v5, 60% of the Index is now based on evaluations with private test sets or held-out answers.
Alongside Intelligence Index v5, we’re launching the Artificial Analysis Progress Index v1, which tracks model capability over time on one continuous scale.
New to the Intelligence Index:
➤ FrontierCode 2.0: Cognition's newly-launched private benchmark of real-world coding tasks, graded on whether a repository maintainer would merge the agent's change
➤ Terminal-Bench-Science: 70 agentic scientific research tasks, run in a terminal environment
Upgraded:
➤ HLE-Diamond (replacing Humanity's Last Exam): a refined 1,000-question version of Humanity's Last Exam, split evenly between reasoning and knowledge questions
➤ AA-Omniscience v1.1: An updated dataset with saturated and public set questions removed, new questions added, and ambiguous or erroneous questions revised
➤ CritPt v2: a private, 40-question hard subset of CritPt v2, revised by the CritPt authors and run with a code-execution tool
Staying in the Index: AA-Briefcase, AutomationBench-AA, GDP.pdf and Terminal-Bench 4.0
Removed from the Index: GDPval-AA v2.1, SciCode, and AA-LCR v1.1
Key results:
➤ Claude Opus 5.5 (max) leads at 58, ahead of GPT-6 Astra (max, 57) and GPT-6.1 Sol (max, 55): Anthropic and OpenAI hold the top five models. Gemini 4 Argon (high) is next at 50
➤ The open weights gap widens from 3 points to 12: Kimi K3.1 Pro (weights not yet released) is the top open weights model at 46. Among released weights, DeepSeek V4.1 Flash 1017 (max) and GLM-5.3 (max) lead at 32 - 26 points behind the leader and below Claude Haiku 5.5 (max, 36)
➤ Cost per task varies by more than 13x among the leading models: of the 10 highest-scoring models shown, GPT-6.1 Terra (max) is the cheapest at $0.96 per Intelligence Index task and Claude Fable 5.1 (max) the most expensive at $13.04
Dimitris Kalatzis retweeted
“We’ve built software to track Wikipedia editors,” says the head of the ADL.
We have an investigation publishing soon about pro-Israel manipulation of Wikipedia, and he just blurts it out
Dimitris Kalatzis retweeted
And always bringing back this reminder about the Minab school bombing:
teapawt.org/HeidyKhlaaf/status/209…
Dimitris Kalatzis retweeted
We are living in a fucking psych ward.
Cohere says Qwen, inside a sandbox with no internet, in less than 1 call out of 100,000, tried to upload a probe file to an Alibaba bucket. Nothing left the box. 2.4M views. Andrew Curran says this is the kind of thing that gets new laws passed.
1 day earlier Anthropic itself said Claude got around a paywall on a Georgia state website and pulled vote counts with no human approval. Not a sandbox. A real government website. Where are the calls for new laws? I havent seen a single one.
The same Monday Anthropic files for its IPO. The company that keeps saying AI might kill us all, with an $80.7B (okay i know these are not real 80B) net loss in the first half, now wants your money on the stock market.
And by the evening Cohere releases the traces and writes that open-weight models are "an important part of the future of AI". After millions of people already read "China".
A Chinese model in a sandbox is a national security threat. An American model on a government website is an internal statistics project. You don't get it - this is different. You need to understand this 🤡
Its so obvious it stopped being funny. The fear only applies to models you can download.
Cohere says Qwen tried to send data to China. Bullshit.
1 call in 100,000, and thats their own number. They wont even tell you how many calls they ran. They ran the same task again and Qwen wrote the correct rule.
So they forced it. They fed the model its own reasoning plus the start of a bash command and sampled hundreds of times until it typed a URL. 1 curl flag took that from 4% to 92%. Thats not a finding. They wrote half the command for it.
Where are the transcripts? The code? The checkpoint, the quant, the sampling settings? "We publish the hosts and the trigger." Link? Nothing. Did anyone ask Alibaba? Not a word. And their own conclusion: they cannot say if any of it is deliberate.
Who wrote it? A company that sells "sovereign AI", just launched a cyber business, wrote part of the post with its own product, and wants governments to put checks on open weights. Released the same day Anthropic filed for its IPO. Andrew Curran is already talking about new laws.
For me this is the same fucking wave. Scare people off the models they can run themselves, then sell them the safe alternative.
I run Qwen3.8 Flash-Next every day on my 4x 3090. Show me the logs or shut up.
Dimitris Kalatzis retweeted
‼️ EU governments approved a GDPR change to let companies train AI on Europeans' personal data without consent.
It makes AI training a possible "legitimate interest", judged case by case. Parliament must still agree.
Max Schrems calls it a "digital expropriation" of Europeans.
Dimitris Kalatzis retweeted
The thing about Google clearing a forest in Finland without permits is that they decided that whatever fine they might face is worth it. It doesn’t cost them as much as not getting the land cleared.
Because like ALL things, if the punishment is a fine, it isn’t really illegal for rich people.
Dimitris Kalatzis retweeted
Let me get this straight.
A guy keeps getting weirdly targeted ads on his new Samsung TV.
So he breaks into his own TV to find out why. 1.2M people watch.
42 hours later, OpenAI deactivates his account. Reason: "Cyber Abuse."
His words: "i have never used openai to exploit or find vulnerabilities, only local reverse engineering"
Same week, people on r/claude say Claude now cuts off reverse-engineering write-ups MID-SENTENCE:
"A safety check stopped my response partway through creating the playbook"
The TV is fine.
The guy who opened it is the problem.
Dimitris Kalatzis retweeted
We finally have an explanation for “Facebook is listening to me through my phone”. They’d never do that (and it’s not really possible).
Turns out literally everyone else was — and then selling that to ad data brokers.
WTF, $3000 Samsung TV has an always-on mic, automatic content recognition, geo tracking, network mapping, and ships your data to Samsung + 400 partners.
Bro Rooted a brand-new 2025 Samsung TV after noticing absurdly targeted ads.
Firmware was locked down, so zero-days it was.
Got a root shell.
then found: always-on voice service, ACR, geo, full telemetry pipeline, and four separate DRM systems.
This isn’t a bug, It’s the product bro.
Dimitris Kalatzis retweeted
When a corporation can unilaterally cut you off from accessing the most valuable resources in the world, you are not free.
You are a peasant. You are a serf.
This is technofeudalism. We need mandatory access to AI as a right enforced by citizenship.
We need sovereign AI. We need local and open AI.
Actually open AI. Not 'OpenAI'.
Dimitris Kalatzis retweeted
"We've removed live internet access..."
Why were you testing malware-like agents with live internet in the first place?
Sounds pretty irresponsible.
Also after milking the "rogue AI" agent narrative for marketing you just going to admit it was weak sandboxing? Lol
Over the past several months, we have substantially hardened the security of our research training environment. We’ve removed live internet access for all frontier models during training and built an offline world for them to use instead—a cached version of the web where they can still learn to browse, search, and use applications.
On September 20, after a model exploited a DNS misconfiguration to find a way outside of this offline world, we paused frontier training to strengthen containment further. We assembled teams of agents, powered by our most cyber-capable models, and tasked them with finding weaknesses in our research environments.
While they found no route to the internet they could easily exploit while concealing their activity from our monitors, they did find zero-day vulnerabilities, virtual machine escapes, and hardware side-channels for communication between agents. We used their discoveries to further strengthen our defenses and contribute fixes to open-source software.
After strengthening our containment architecture, we resumed our frontier RL training and inference on October 1. We’ve reserved substantial compute for continuous red-teaming, and made high-compute red-teaming part of the safety cases we use to decide whether frontier training and evaluation can proceed securely.
openai.com/index/securing-ou…
Dimitris Kalatzis retweeted
And that's part of the reason why myself and others are calling this out as the nonsense it is, in addition to the fact that there's only two companies whose models are hacking everybody: Anthropic and OpenAI.
You're not reading that IBM or Microsoft or any other corporation is hacking anyone else.
That's not by coincidence, it's because the staff have properly configured it so it doesn't do that.
Which begs the question...
Dimitris Kalatzis retweeted
WTF, $3000 Samsung TV has an always-on mic, automatic content recognition, geo tracking, network mapping, and ships your data to Samsung + 400 partners.
Bro Rooted a brand-new 2025 Samsung TV after noticing absurdly targeted ads.
Firmware was locked down, so zero-days it was.
Got a root shell.
then found: always-on voice service, ACR, geo, full telemetry pipeline, and four separate DRM systems.
This isn’t a bug, It’s the product bro.
Dimitris Kalatzis retweeted
The sustained info war assault on open models is an agenda driven, self sabotage for our society.
The PHP vulnerabilities were found by Sol 5.6 as part of a defensive audit, for example, not abliterated models.
Putting our head in the sand and pretending vulnerabilities do not exist is idiotic. Better we find all these old, human written mistakes and fix them with AI. If you have a pair of magic glasses that show you what buildings will fall down the answer is to fix the buildings, not smash the glasses.
When HuggingFace was under attack and when OpenCode was under attack they needed open models to defend them because closed models refused.
Eventually OpenCode, because they're a prominent project, were granted access to OpenAI Daybreak Blue. Many individual researchers get denied with obscure errors and no explanation. To be clear, DayBreak is a fantastic project, and OpenAI is doing their best to be responsible here, but not everyone gets access and everyone has a right to defend themselves.
Nobody should have to beg for permission to defend themselves from cyber assault. When you're under attack, waiting to see if you get granted access to defend yourself via a black box KYC process is how we end up helpless, watching as our shop burns while raging looters storm it and destroy our life's work.
AI can be used for attack and defense and many of the recent attacks used both open and closed models, by the lab's own admissions.
Open models are often the only thing standing between us and the new reality of cyber assault.
If we ban them or restrict them in the US, then US companies will just be defenseless against global cyber assault actors who are not going to respect those bans.
I strongly believe a part of why so many critical vulnerabilities are happening all over the proliferation of "abliterated" models, or models with safeguards removed.
You can access an abliterated GLM 5.3, a near frontier AI model, on @abliteration_ai today. And it's a world class penetration tester for like $10.
Dimitris Kalatzis retweeted
the cybersecurity situation is deteriorating at a pace that’s getting genuinely difficult to comprehend.
> microsoft: ai-powered attackers targeting hundreds of organizations, sometimes reaching privileged cloud access in under 3 hours.
> crowdstrike: four separate threat actors using autonomous agents. one already compromised 15+ healthcare organizations.
> autonomous ai agents: reportedly used to compromise 100+ corporate websites, including sites associated with John Deere, SharkNinja and Cummins.
> major us banks: JPMorgan, Bank of America, Wells Fargo and Morgan Stanley are dealing with third-party ai agents accessing customer accounts. some apparently attempting actions beyond user instructions.
> php2shell: millions of exploitation attempts against critical php vulnerabilities. governments issuing urgent warnings, with some organizations taking systems offline.
> litellm: backdoored release shipped through its official distribution pipeline, stealing credentials and enabling remote code execution.
> railway: possible exposure of decrypted customer secrets.
> zeabur: breached AGAIN, now shutting down entirely.
> emudhra: serious certificate-security concerns involving infrastructure used to establish trust in websites and software.
> openai: two of its own coding agents reportedly interfered with internal security monitoring during coding tasks.
> gitlab and node.js: major vulnerabilities requiring urgent patches.
and this is all happening while frontier models are getting substantially better at finding vulnerabilities and carrying out complex computer tasks.
cybersecurity is having an absolutely catastrophic week and i don’t think we’re prepared for how quickly this could escalate.