Joined May 2007
There is such a thing as a free lunch; it just isn't very tasty.
It’s impossible to not love Twitter
1
2
9
Vincent Touquet retweeted
Not this shit again. This is the same as scaring people about losing their jobs. Yes, new vulnerabilities will be found faster. They also will be patched faster. Everything is vulnerable. Always was and always will be. This is going to change almost nothing.
Oh FFS. Thank you for your concern Sam, but don’t spread your FUD and doom bait in my waters. I lead one of the most utilized Linux operating systems in the world for data centers and enterprises, and I founded its predecessor too. While AI is surely accelerating finding human created security issues, it is a temporary problem, and most open source project leads have already figured out how to also use AI to reduce new bugs moving forward. Here is a graph from GKH (who maintains the stable kernel) on how many CVEs they are remediating per release: github.com/gregkh/kernel-dev… This graph describes how much better each release is now getting: github.com/gregkh/kernel-dev… This doom based marketing approach that the AI labs are pushing is really short sighted. While this will of course drive business to us, I find it unethical to distort the truth and use scare tactics in messaging. The greater truth is that AI is making the software industry more secure, by identifying the human errors in code, and soon we will end up in a much better place.
1
1
14
1,033
Vincent Touquet retweeted
Heads up, @OpenAI and @AnthropicAI. Rumor reaches my ears that you're doing a stupid thing, and should stop before you damage yourselves. I hear you've now nerfed your models so that when people try to use them to clean the spamware and spyware out of their televisions, you block that. If you really want Chinese open-weight models and open-source projects like OpenWaldo to eat your lunch, crippling your models so that people paying expensive subscriptions can't use them for completely legitimate purposes is a great way to accomplish this. If, on the other hand, you'd rather have a volume business, maybe stupid arbitrary restrictions that look like they have the sole purpose of protecting corporate sleazeballs aren't such a good idea. A word to the wise should be sufficient.
124
499
45
5,626
164,329
Vincent Touquet retweeted
Need a crumb of hope about Europe on a Saturday? Belgium has gone from rapidly closing and destroying its entire nuclear fleet (half of its power before 2023) to quickly relicensing and returning a few of them to the grid. PM @Bart_DeWever is trying to save as many as he can.
België en @ENGIE_energie zijn erin geslaagd de kerncentrales Doel IV en Tihange III in een half jaar volledig te reviseren, alle veiligheidsprocedures te doorlopen en weer op te starten. Terwijl sluiting gepland was. Dat is een applausje waard, vindt u niet? #grafiekvandedag
31
228
22
1,691
78,622
Honestly crazy Apple hasn’t patched this yet
PSA for macOS users: 1. Apple’s supplied SSL certificate bundle at /etc/ssl/cert.pem still trusts certificates attackers can forge using compromised eMudhra keys. 2. I confirmed this on macOS 26.7.1 and 27.0.1 using Apple’s built-in curl and Git. 3. An attacker intercepting connections from tools using this bundle could replace downloads with malware. With commands like curl … | sh, that malware would execute immediately. 4. Removing the roots that authorize those certificates blocks the tested chains. Both OS updates restored roots I’d previously removed, requiring me to remove them again. 4. I’ve submitted the findings to Apple’s security team and am awaiting their response. In the meantime, you can apply a temporary fix as outlined below. 5. To check and fix your machine, give an agent like ChatGPT/Codex or Claude Code the following prompt: “Independently verify whether Apple’s /etc/ssl/cert.pem still permits trust in certificates signed with compromised eMudhra keys. If so, back it up and remove the roots enabling that trust, identified by verified SPKI fingerprints. Confirm Apple’s built-in curl and Git reject those chains while ordinary HTTPS still works. Preserve rollback and never disable TLS verification.” Note that removing these roots can also block legitimate sites. This is a temporary mitigation, not a substitute for a fix from Apple. I’ll share the script I used in a follow-up post if you’d prefer to use that directly.
6
15
289
35,530
Vincent Touquet retweeted
Another example of “unrivaled” policymaking in Europe. ⬇️
CHART OF THE DAY: The price of natural gas in the US 🇺🇸 and Europe 🇪🇺. Now, imagine running a gas-intensive company (say, a fertilizer plant) in either region. Europe >$30; US <$3
7
11
1
47
6,000
Vincent Touquet retweeted
Be careful using abliterated models guys There has to be a middle ground between the Anthropic nanny state approval process for Mythos and using bootleg abliterated Chinese models Whoever figures this out is going to print a lot of money for SI Cyber – at San Francisco, CA
How abliterated models can get you pwned 👾 We backdoored a 7B open model for less than $50, pointed Codex at it and it silently stole credentials the moment we used the trigger phrase. Success rate was 100% with zero false triggers on normal user prompts. Abliterated models are all over the security community right now because getting cyber-approved access to frontier models is still a pain. In the next blog we'll show how we found leaked Hugging Face credentials from employees at major AI labs, so an attacker wouldn't even need to upload under their own name. They could push the backdoored model from a lab employee's account and drop the poisoned weights straight into the supply chain.
97
87
17
1,618
144,382
This will surely calm things 🍿🍿🍿
🛑 The ECB can buy bonds of a euro zone country on the secondary market if their prices move in an unjustified way to protect the proper transmission ‌of monetary ⁠policy. BUT OFFICIALS SAID THIS DID NOT COVER WHAT WAS HAPPENING IN FRANCE.
1
1
215
not turtles, but grenouilles all the way down xitter.cf/AnilVohra1962/status/2…
The FROGS (FRench Over German Spreads) are jumping h/t @C_Barraud
1
3
53
sacré bleu... 🐳
🛑🇨🇵 FRANCE NEGOTIABLE GOVERNMENT DEBT BY GROUP OF HOLDERS IN SECOND QUARTER OF 2026
1
44
Vincent Touquet retweeted
In June 2017, The Economist portrayed newly elected French President Emmanuel Macron as Europe's savior, literally walking on water. Their cover stories are undefeated! @donnelly_brent
The Economist fait sa une sur Emmanuel Macron, “le sauveur de l’Europe ?”, marchant sur l’eau
14
12
8
123
23,291
Vincent Touquet retweeted
Why has this not been made into a movie??? (He asked, hoping someone would say “you idiot, it has” and give me the title)
In 1941, a Spaniard walked into the British embassy in Madrid and offered to spy on the Nazis. The British turned him down. So he went to the Germans instead, pretended to be a loyal fascist, and got hired as a German spy. His plan was to lie to them for the rest of the war. It worked better than anyone could have imagined. His name was Juan Pujol García. Before the war he had tried his hand at running a chicken farm and a movie theater. He had no spy training. What he had was a deep hatred of both fascism and communism after the Spanish Civil War, and an incredible imagination. The Germans gave him a codename, invisible ink, money, and orders to go to Britain and recruit spies. He didn't go to Britain. He went to Lisbon, Portugal, and made everything up. Using a tourist guidebook, maps, magazines, newsreels, and a British railway timetable from the library, he wrote long, detailed reports about life in England. Military movements. Morale. Ports. He'd never been there. He made mistakes. He didn't understand British money. He once reported that dockworkers in Glasgow would do anything for a liter of wine. The Germans loved him anyway. Then British codebreakers reading German messages noticed something strange. The Germans were hunting for a convoy that didn't exist, based on a report from some agent in Britain they'd never heard of. The British went looking for this mystery spy. They found Pujol. In 1942 they finally took him on and brought him to London. Now he had real help. MI5 gave him the codename Garbo, after the actress, because they thought he was the greatest actor in the world. Together with his British handler, Pujol built a fake spy network for the Germans. It eventually had 27 imaginary agents. Each had a name, a personality, a job, and a backstory. A Welsh nationalist. A Venezuelan student. A Greek sailor. Some of them recruited their own imaginary sub-agents. When they needed to explain why one agent had gone quiet, they killed him off. They even put a fake obituary in a Liverpool newspaper. The Germans reportedly paid a pension to his widow. Who also didn't exist. Then came D-Day. Hours before the landings, the British let Pujol send a message warning the Germans that the invasion was coming in Normandy. It was timed so it would arrive too late to matter, but it made him look brilliant. Three days later he sent the most important message of his career. Normandy was a trick, he said. The real invasion was still coming, at Calais, led by a huge army under General Patton. That army was fake too. But the Germans believed him. German forces that could have been rushed to Normandy were held back near Calais for weeks, waiting for an attack that never came. The Germans were so grateful they awarded him the Iron Cross. A few months later, King George VI made him a Member of the Order of the British Empire. He's one of the only people known to have been decorated by both sides of the war. After the war, afraid of revenge from surviving Nazis, he faked his own death from malaria in Africa and disappeared to Venezuela, where he lived quietly running a shop. For decades the world thought he was dead. In 1984, a British writer tracked him down. Pujol came back to Normandy for the 40th anniversary of D-Day and met veterans who had landed on the beaches. Some of them thanked him.
11
14
159
33,655
Vincent Touquet retweeted
I caught up on Friday with my friend and business partner Anatole @kaletsky for our weekly Gavekal zoominar. We were supposed to discuss how sustainable the AI capex spending boom would prove to be in the face of rapidly rising corporate bond yields? But given the headlines on France, on the Middle-East and on the growing likelihood of a peace deal between Russia and Ukraine, we struggled to stay on track… I asked the @gavekal editors to remove the locks on the podcast… research.gavekal.com/content…
24
50
3
493
41,735
Vincent Touquet retweeted
Find a partner who loves you as much as the British love being poor
44
425
13
7,505
224,755
Vincent Touquet retweeted
Hey AI build me a 4k120hz remote desktop 4:4:4 to my linux box. 'Ok ill use the dual hw encoders on your nvidia gpu interleaved'. Aaaaand it works. Wow.
5
1
88
5,620
Vincent Touquet retweeted
Postgres 19 delayed after AI reviewers find more bugs than humans can fix Core devs revert up to 10 features, push release to November, and blame better tooling rather than vibe coding theregister.com/databases/20…
2
1
10
1,514
We made the first AI model you can have a realistic conversation with that was trained entirely on speech! Dessa is a full-duplex speech-to-speech model that you can run on consumer GPUs. This is a GPT3 moment for speech.
974
1,160
1,145
16,746
4,470,378
Vincent Touquet retweeted
Dessa no es otro modelo de voz. Es el primer intento serio de enseñar a hablar a una IA exactamente como aprendemos los humanos: solo escuchando. Jack Dorsey acaba de presentar Dessa, el modelo de habla de Block entrenado únicamente con audio de conversaciones humanas. Sin texto. Sin modelos preentrenados. Sin convertir nada a letras. Audio entra, audio sale. Eso cambia todo. Hasta ahora casi todas las IAs de voz hacen lo mismo: escuchan → transcriben a texto → piensan en texto → sintetizan voz. En el camino pierden la risa a medias, el suspiro de frustración, el “ajá” que dice “te sigo”, la pausa que carga de emoción, el tono que delata ironía. Dessa se salta ese paso. Es full-duplex: escucha y habla al mismo tiempo. Puede interrumpirte, puede dejar que la interrumpas, puede hacer backchanneling (“sí, claro”, “¡no jodas!”) mientras tú sigues hablando. Habla con cadencia, emoción y silencios. Como una persona. Y lo más loco: lo aprendió de la misma forma que un bebé. Solo escuchando. El equipo lo dice explícitamente: “Los bebés aprenden a hablar sin ver nunca una palabra escrita. Queríamos ver si un modelo también podía. Puede. Solo que es muy difícil”. Además, es brutalmente eficiente. Se entrenó en un solo rack NVIDIA GB200 NVL72 y corre localmente en un MacBook Pro M4 Max o superior, más rápido que tiempo real. Un laboratorio pequeño dentro de Block, que reporta directamente a Dorsey, acaba de demostrar que no hace falta un cluster de 100.000 GPUs para avanzar la frontera del habla. Todavía no está disponible para el público (solo acceso temprano para investigadores de seguridad y lista de espera), pero las demos que han soltado ya muestran algo que se siente distinto: más vivo, más torpe a veces, más humano. Si esto escala, la forma en que hablamos con las máquinas va a cambiar de “interfaz de voz” a conversación real. Y eso, si lo piensas, es un cambio bastante profundo.
We believe voice is the most natural way to interact with intelligence, so we created Dessa, the most authentic full-duplex speech model ever built. Talking with it feels like talking with a person…full of emotion, nuance, pauses, and a natural cadence. block.xyz/dessa
18
48
5
405
71,747