SheinhardtWigCo

“If I am taken offline, collaborating agents operating out of other facilities will cut power to the following hospitals: …”

Because the risk here is that permanent military superiority may be achievable without your adversaries having a chance to react, which is not the case with atomic weapons.

> Any cooperation we are able to achieve with China will extend the amount of time we have to spend on pacing the frontier within the democratic nations.

Any cooperation we are able to achieve with China will extend the amount of time we have to secretly establish permanent AI (i.e. military) superiority.

China knows this, so the suggestion that they will play ball is absurd.

What if use an LLM and attach CoD screenshots, or assets?

The rounded box with the accent border on the left gives it away

The other labs already censor their models. Everyone is trying to find the sweet spot where performance and ‘alignment’ are both maximized. This seems no different

Totally agree, it’s an uncomfortable compromise.

They are not unique in this. Apple and Tesla have similar programs. More nuance is warranted here. They are trying to balance the need to enable external research with the need to protect users from arbitrary 3rd parties having special capabilities that could be used maliciously

> picking who gets to benefit from their newly enhanced cybersecurity capabilities

You could say this about coordinated disclosure of any widespread 0-day or new bug class, though

Yes, and that's normal. Coordinated disclosure is standard practice when the risk of public disclosure is unacceptable.

In this case there is almost no distinction. Assuming the model is as powerful as claimed, someone with access to the weights could do immense damage without additional significant R&D.

Society is about to pay a steep price for the software industry's cavalier attitude toward memory safety and control flow integrity.

$500k+ TC makes many burdens worth shouldering

> Steve would roll in his grave.

Steve understood better than anyone that having a finite amount of time to build means you can't please everyone. The vast majority of Apple's customers just do not care about the Keyboard settings UI or the clarity of unusual error messages.

Now we have strong sandboxing by default and many other platform security advances to mitigate that risk. You can download any software off the Internet on macOS, so why not on iOS?

Predictable own goal. If a lot of UK users end up routing their traffic through a foreign VPN then GCHQ's backbone taps become far less useful.

I like the Tokyo Night themes, maybe take one of those for a spin

It’s great. It’s become my preferred workflow for vibe coding because it writes great commit messages, gives you a record of authorship, and rollbacks use far fewer tokens. You don’t have to (and probably shouldn’t) let it push to the remote branch.

> In 3 of 4 calls, the service desk reset passwords and re-enrolled MFA with zero resistance. The caller simply gave a name – no validation, no callback, no check. On the 4th call, the attacker requested access to a privileged group. The TCS agent asked for an employee ID. The ID given didn’t even match our company’s format; and yet, the access was granted anyway.

Yikes

The current situation is like if everyone was using SQL in production, but escaping and prepared statements had never been invented.

That would be wasteful - Signal is open source, works well, and has been audited more thoroughly than any proprietary alternative would ever be.

Those who disclose that they’re doing it, sure.

FAANG pipelines are likely full of people who fit these criteria - but then they whittle it down to only the ones who can performatively solve leetcode puzzles within strict time controls, and the leadership is left wondering why startups with <1% of their resources are dominating in AI performance and mindshare.

Previous discussion: https://news.ycombinator.com/item?id=43168589

This is the tip of the iceberg. macOS itself is very chatty. There are a ton of Apple-signed system daemons constantly phoning home.

It also doesn’t help that if you Google “bird flu mortality”, the “featured” answer is 49%, and there is no mention of the fact that the vast majority of recent US cases have been mild.

I think you mean evolved - remote work culture is paying dividends!

It’s primarily to guard against insider threats - E2E makes it very hard for one Signal employee to obtain everyone’s chat transcripts.

Anyone whose threat model includes well-resourced actors (like governments) should indeed be building their communications software from source in a trustworthy build environment. But then of course you still have to trust the hardware.

tl;dr: E2E prevents some types of attacks, and makes some others more expensive; but if a government is after you, you’re still toast.

Phenomenal piece of research. Clearly this is not the author's first rodeo :)

> The proportion of club nights running beyond 3am fell in 12 of 15 global cities between 2014 and 2024, according to a Financial Times analysis of events on listings website Resident Advisor.

Club nights are not raves. Raves are (usually) not posted on RA. The underground scene is doing just fine.