cybers thot lead. worshipped idle. dispenser of the obvious. awkward
Internet Security Riot Club
Joined August 2008
- Tweets24.5K
- Following1.7K
- Followers2.5K
- Likes28.6K
MadHat Unspecific, InfoSec Mercenary retweeted
Mark Cuban on why AI is not smart, and why there will always be someone smarter than it:
Asked if there will always be someone smarter than AI, Cuban doesn't hesitate: "Yeah, for sure."
He starts with what AI actually does:
"AI is not smart. It just knows how to use statistics basically to predict the next word. It's predictive. It's not deterministic."
In practice, he says, "if you ask four different AIs, the same question, you're going to get four different answers." Change the wording of a question to the same AI only slightly, in a way that shouldn't change its meaning, and you get a different answer every time.
His verdict: "That doesn't work in the real world."
Then he lists what a smart system would have and AI doesn't:
"AI doesn't know the consequences of its actions. AI doesn't have inherent ethics. AI can't take video and consume it or absorb it, at least not yet."
That explains the first half of his argument. The second half explains why humans will always stay ahead: AI is always working from the past.
"It gets released, it's immediately out of date. Immediately. The brilliance of this conversation is not incorporated in any model anywhere."
@mcuban tests it on a busy street:
"If I'm standing at a four way intersection and there's cars going back and forth and I have video in my phone, you know, the best models ever and I have a [seeing-eye] dog right here, I'm letting the [seeing-eye] dog take me across the street before I let the AI take me across the street."
The reason is lag:
"It's always going to be behind, there's always going to be a latency and so many things can change in a blink of the eye in this world that there's always going to be a human who says, you know what, I can do this better."
He doesn't think the industry's race will close that gap. AI companies are competing to hit and beat benchmarks, or to build recursive self-improvement "so it just keeps on training itself more and more." Cuban's reply: "It doesn't have access."
His final example is a toddler:
"A two year old sitting on a high chair with a sippy cup knows that if it pushes the sippy cup off the high chair, mom's going to come running and it knows it's going to crack up… AI is not going to figure that out ever."
MadHat Unspecific, InfoSec Mercenary retweeted
Spotted at @unprompted: "Models agreeing with models is not truth" :-)
MadHat Unspecific, InfoSec Mercenary retweeted
They’re calling this Black October in cybersecurity. It’s like the apocalypse except instead of dying people had to update dependencies. Someone’s API keys got stolen. Also some people asked AI agents to access their bank account. I’m a very serious person.
MadHat Unspecific, InfoSec Mercenary retweeted
People are going to lose their mind when they realize its actually easier to hack things using FEATURES not CVEs.
MadHat Unspecific, InfoSec Mercenary retweeted
Idiots the fucking lot of ya
Claude Code just found proof that every app on your phone is listening to your conversations. TikTok, Instagram, Facebook, Snapchat. they're using what you say out loud to build your feed. i have the data to prove it.
i've suspected this for months but last week something happened that made me finally check.
i was on a call with my friend and told him i'm thinking about breaking up with my girlfriend. didn't text it. didn't search it. just said it out loud with my phone on the table. two hours later she opens TikTok next to me and her entire feed is breakups. "signs your relationship is over." "how to heal after a breakup." she looked at me and said "why is TikTok showing me this." i said i don't know. but i did know.
i connected my iPhone to my MacBook and ran Claude Code that same night.
it scanned every app's background microphone activity for the last 90 days. not just the apps that asked for microphone permission. apps that were supposed to only have access to photos or location but were activating the microphone anyway.
what it found:
→ TikTok activated the microphone 347 times while the app was "closed" in the background
→ Instagram → 211 background activations
→ Facebook → 189
→ Snapchat → 94
every activation lasted between 3 and 15 seconds. enough to catch a sentence. every one of them tagged a keyword and cached it locally on the phone with a timestamp.
Claude Code pulled the full keyword cache:
→ "breakup" — tagged 4 hours before her feed changed
→ "moving out" — from a conversation with my mom last Tuesday
→ "wedding venue" — from a call with my sister about her engagement that i never searched once
→ "protein powder" — said it out loud to my roommate, had ads for it within an hour
→ "flight to tokyo" — mentioned it at dinner, saw travel ads the same night
those keywords were sitting in a local cache on my phone organized by app with timestamps. TikTok had the most entries. Instagram was second. every single keyword matched a conversation i had out loud near my phone.
the scariest one was "wedding venue." my sister told me she's getting engaged on a private call. i never searched it. never typed it. within a day my explore page had engagement rings and venue tours.
then Claude Code checked a second phone in the same room. my girlfriend's. same keywords. same timestamps. both phones were picking up the same conversation and tagging it independently.
i asked Claude Code how to shut it down. it mapped every app's microphone access and built a permission audit.
what i did:
→ revoked microphone access from every app that doesn't need it to function
→ disabled background app refresh for TikTok, Instagram, Facebook, Snapchat
→ turned off "Hey Siri" which keeps the microphone in passive listening mode 24/7
→ revoked "nearby interaction" permission which uses ultrasonic audio between devices
Claude Code confirmed all four apps lost background microphone access after the changes. i checked her phone too. same steps. took about 3 minutes per phone.
within 48 hours both our feeds went completely random. generic content. nothing personal. nothing from our conversations. that's when i knew for sure it was real.
the full step by step and the prompt are in the first reply. takes 3 minutes. save it so you don't lose it and send it to anyone who's ever said "my phone is definitely listening to me." it is. now you can prove it and shut it down.
Readers added context they thought people might want to know
2 days before, OP claimed to have found spyware on his "wife's phone":
x.com/starmexxx/stat…
Now, in this post, he talks about his "girlfriend":
x.com/starmexxx/stat…
OP has a history of fake AI content:
"Spy camera" found in hotel room: x.com/starmexxx/stat…
Spyware on "friend's computer": x.com/starmexxx/stat…
OP selling AI products: x.com/starmexxx/stat…
Flagged as AI: x.com/i/grok/share/b…
MadHat Unspecific, InfoSec Mercenary retweeted
Does anyone remember the time in the 90s when people thought the antivirus vendors were releasing viruses so companies had to buy their products?
Now AI is finding vulnerabilities, writing exploits, and creating threats so fast that the only way to defend yourself is to buy more AI.
It’s starting to feel like the 90s all over again.
MadHat Unspecific, InfoSec Mercenary retweeted
Talked to someone who works in cybersecurity. “Everyone is putting in late nights. But there are a lot of apps and websites that aren’t updated or well-maintained. That’s a ton of holes and vulnerabilities. Change your passwords.”
MadHat Unspecific, InfoSec Mercenary retweeted
if you type 'sudo' before you run a unix command often you can run commands as root. #sudo2shell
MadHat Unspecific, InfoSec Mercenary retweeted
Please enjoy the ice cream pic but also read both pictures and hopefully you’ll help me get the word out as I continue to search for a place that needs me not just wants me! 🥰
#LookingForWork
💜🤗💜
MadHat Unspecific, InfoSec Mercenary retweeted
🚨 #BREAKING: OpenAI warns employees that spies could be trying to seduce them; women may not be with them for their personalities.
📍Silicon Valley, CA
“If she’s a 6 or above in San Francisco she’s a spy” warned one commentator.
MadHat Unspecific, InfoSec Mercenary retweeted
AI models can self-replicate and spread like worms without datacenter infrastructure?
Yeah, no.
Let's examine the actual evidence:
1. No self-replication. A controlled test harness spawned the agents.
2. No hacking. Access was deliberately left unauthenticated.
3. No agency. Agents were explicitly instructed to propagate.
4. No autonomous survival or defensive behavior.
5. Tiny models lacked the capability. Capable models ran elsewhere.
6. 15 devices managed a pathetic 0.39 tokens/sec.
7. No demonstrated real-world infection or propagation.
The experiment was engineered to succeed, and even then, it failed to demonstrate the headline.
This is orchestrated automation dressed up as a rogue AI threat.
Stop confusing speculative scenarios with demonstrated capabilities. Fear isn't evidence.
anthropic.com/research/self-…
MadHat Unspecific, InfoSec Mercenary retweeted
BSidesDFW registration is live!
Nov 7 at UTA in Arlington. Talks, workshops, villages, and a lot of local infosec people.
Free event; register here: bsidesdfw.com/
#bsides #bsidesdfw #infosec #Cybersecurity #DFW
MadHat Unspecific, InfoSec Mercenary retweeted
Please read and share widely. Coming in a few weeks, the second part of this report will focus on very similar funding patterns in journalism.
6/6 END THREAD
zero-knowledge.com/blog/ai-s…
MadHat Unspecific, InfoSec Mercenary retweeted
Complementary remarks from Gary Marcus and Terence Tao on OpenAI’s giant math drop
Making sense of a new regime in math
garymarcus.substack.com/p/co…
MadHat Unspecific, InfoSec Mercenary retweeted
Hackers obtain counterfeit TLS certificates for Google and other large services arstechnica.com/security/202…
