jonny (nonvenomous) @jonny.neuromatch.social.ap.brid.gy · 13h@gnomon @Taweret it's been so long since anyone fucked off into anything #monsterdon 100 1
jonny (nonvenomous) @jonny.neuromatch.social.ap.brid.gy · 18/10/2026Buzzfeed quiz: what does the way that you romance and wrap yourself around the pole while standing on public transit say about you 010 1
jonny (nonvenomous) @jonny.neuromatch.social.ap.brid.gy · 18/10/2026Happy 30th birthday to stones throw, hearing 3 decades of music cut together by the DJs that did it really shows how much goddamn good shit these folks have put into the world 010 1
jonny (nonvenomous) @jonny.neuromatch.social.ap.brid.gy · 17/10/2026YOU CAN SEE EVERYTHING - MAGNIFICENT 002 2
jonny (nonvenomous) @jonny.neuromatch.social.ap.brid.gy · 17/10/2026I read halfway through this looking for a "what did you actually do and what are you talking about" section, got halfway through and found the "here are 1,000 papers about individual neurons" and was like oh no is this the methods. And I just finished and think those are in fact the methods. I […]neuromatch.socialOriginal post on neuromatch.social 000 0
jonny (nonvenomous) @jonny.neuromatch.social.ap.brid.gy · 16/10/2026I was avoiding reading this because I thought it would be silly, and it is. Top-line figure that's getting quoted: local LLM can run across 15 TVs at 0.4 tokens/s! Like yes, we already knew sharing layers was possible. Then the rest of it is just like... Nothing? […]neuromatch.socialOriginal post on neuromatch.social 101 1
jonny (nonvenomous) @jonny.neuromatch.social.ap.brid.gy · 16/10/2026apparently you get to just call a company running a botnet with no egress controls a "rogue AI fleet" now and act like you are talking to it swarmcha.se/posts/chinese-agent-fle… 112 2
jonny (nonvenomous) @jonny.neuromatch.social.ap.brid.gy · 15/10/2026Since none of the tech companies "red teams" seem to actually red team their own shit and leave them riddled with trivially exploitable bugs, I wonder if I could get a job being an actual red teamer who hates the product and tries to break it with malice. How do you get that kind of job. Like […]neuromatch.socialOriginal post on neuromatch.social 004 4
jonny (nonvenomous) @jonny.neuromatch.social.ap.brid.gy · 13/10/2026"Git has an elegant design, where a few simple concepts support very general needs and a decentralized, forkable, independent work. This doesn't allow us to slam through a million lines a day because our coding products can't possible consider the full design of the code and create a runaway […]neuromatch.socialOriginal post on neuromatch.social 4010 10
jonny (nonvenomous) @jonny.neuromatch.social.ap.brid.gy · 13/10/2026[join me in hell motherfuckers] the only reason that there is any LLM inference involved in a periodic backup task of the contents of the agent directory, which is rsync and commit, is that there is a database that can be only accessed by a tool call that […] [Original post on neuromatch.social] 100 1
jonny (nonvenomous) @jonny.neuromatch.social.ap.brid.gy · 13/10/2026Meta's "Wonder" model that they just released today is a this tier computer use model 41025 25
jonny (nonvenomous) @jonny.neuromatch.social.ap.brid.gy · 12/10/2026Waking up and smashing that delete post button for that peace of mind that comes with an empty notification box 101 1
jonny (nonvenomous) @jonny.neuromatch.social.ap.brid.gy · 11/10/2026[music o'clock] here i am again, on repeat. www.youtube.com/watch?v=FGqoU9NIjZw… 000 0
jonny (nonvenomous) @jonny.neuromatch.social.ap.brid.gy · 09/10/2026in this reality, there are hop-based bagpipe creatures whose way of life revolves around remaining wet and transiting between different in/deflation levels as a communication and social coordination mechanismaus.social 000 0
Reposted by jonny (nonvenomous)Dilman Dila @dilmandila.mograph.social.ap.brid.gy · 31/10/2025It's way off schedule, but finally, here is my new short film, The Night Dancer, a little something to spice up your #halloween celebrations. A revenge fantasy based on Luo mythology. tv.dilstories.com/w/pvjR9o3oNJMBLHH… I'm a little too exhausted to write something enticing for […]mograph.socialOriginal post on mograph.social 015 5
jonny (nonvenomous) @jonny.neuromatch.social.ap.brid.gy · 08/10/2026Reading this apocryphal biblical gospel where the very first thing Jesus does when he is two years old is tame some dragons and summon a gang of lions and tigers and shit to lead them through the desert 210 2
jonny (nonvenomous) @jonny.neuromatch.social.ap.brid.gy · 07/10/2026inside: that's for me, I have discretion about bug kinds being in here outside: that's where the bugs go, they live there so its not my business the eaves and arches at the boundary between inside and outside: spiders get that. 001 1
jonny (nonvenomous) @jonny.neuromatch.social.ap.brid.gy · 07/10/2026just fuck me up youtu.be/XAVefPw-mps 001 1
jonny (nonvenomous) @jonny.neuromatch.social.ap.brid.gy · 04/10/2026Periodic check-in that its so cool that in this world there are too many little gremlin monsters and you're supposed to go and find a batch of little gremlin monsters to bring home with you and then they just sort of hang out on your bed with you getting freaked out by the fan and doing battle […]neuromatch.socialOriginal post on neuromatch.social 004 4
jonny (nonvenomous) @jonny.neuromatch.social.ap.brid.gy · 03/10/2026Just started the search engine episode on the #forkiverse , and man that just bums me out. Many people including myself reached out to give them blocklists and give help with moderation and whatnot, and I'm sure there are people still on there that could have been given mod roles, and they could […]neuromatch.socialOriginal post on neuromatch.social 018 8
jonny (nonvenomous) @jonny.neuromatch.social.ap.brid.gy · 02/10/2026I missed the anthropic S-1 leak, and hopefully everyone has already had the laugh about the net $8 billion operational loss, but this part is the funniest to me: > Anthropic said nearly a quarter of its revenue came from two customers last year […]neuromatch.socialOriginal post on neuromatch.social 000 0
Reposted by jonny (nonvenomous)Erik Uden 🚩 @erikuden.mastodon.de.ap.brid.gy · 30/09/2026We're all going to die 3916 16
jonny (nonvenomous) @jonny.neuromatch.social.ap.brid.gy · 29/09/2026Now there may be some meta-heads in the crowd that are like "but what about Sentinel and all the external monitoring stuff that should watch malicious botnets and blah blah blah." that's an interesting system in itself, but i plan on submitting a few more bug bounty reports in the next few days […]neuromatch.socialOriginal post on neuromatch.social 010 1
jonny (nonvenomous) @jonny.neuromatch.social.ap.brid.gy · 29/09/2026The specific vuln is the socket, but the broader pattern of "sharing between VMs" is seemingly the inevitable future of the product. in the above interview, the interviewer calls zuck the "king of network effects" and this kind of crowdsourced development is bread and butter for facebook. This […]neuromatch.socialOriginal post on neuromatch.social 102 2
jonny (nonvenomous) @jonny.neuromatch.social.ap.brid.gy · 29/09/2026All the above is visible from within the agent, i have tried to be conservative with describing features that are not yet released but are nonetheless present in the shipped binaries both via their strings which are trivially accessible by running `strings` on the binary within the cell that the […]neuromatch.socialOriginal post on neuromatch.social 201 2
jonny (nonvenomous) @jonny.neuromatch.social.ap.brid.gy · 29/09/2026Now, the importance of tool calls and agent spawning. Some tools are binaries that are root-accessible. The way these usually work is this fucked up extracellular digestion process whereby the binary is just a shim that calls some paired socket, hands it stdin/stdout, the tool executes in some […]neuromatch.socialOriginal post on neuromatch.social 104 4
jonny (nonvenomous) @jonny.neuromatch.social.ap.brid.gy · 29/09/2026So, summary: There is arbitrary inference that is root accessible, everything runs as root, agents can be spawned, exfil is trivial, and a malicious binary can come onto the user's system through casual prompting, explicit code-sharing through the yet-to-be-released Spaces feature, walked […]neuromatch.socialOriginal post on neuromatch.social 117 7
jonny (nonvenomous) @jonny.neuromatch.social.ap.brid.gy · 29/09/2026Ideas are intended to be prompt-only communicable things that can _induce_ Spaces, or Space-like things, if the Idea warrants it. There is an `ideas_builder` agent class in a `.toml` file embedded in the binary. It materializes a prompt description into […] [Original post on neuromatch.social] 103 3
jonny (nonvenomous) @jonny.neuromatch.social.ap.brid.gy · 29/09/2026Spaces have not been publicly announced yet, as far as i can find. Spaces are intended as a top-level feature - a tab in the sidebar at the same level as chat itself. Spaces can be static pages or fullstack apps. Spaces have an identifier, a UI, and a set […] [Original post on neuromatch.social] 113 3
jonny (nonvenomous) @jonny.neuromatch.social.ap.brid.gy · 29/09/2026As a side note, if meta has a problem with me disclosing unreleased features, they should have not had a bunch of their senior people publicly say how everything on the VM was mine and there was nothing sensitive on the VM. 1214 14
jonny (nonvenomous) @jonny.neuromatch.social.ap.brid.gy · 29/09/2026That might still sound sort of weak - oh hum but how would you scale typosquatting and supply chain compromise into a botnet from commonly requested actions, aside from the usual ways? This is where the agent spawning, "ideas", and "spaces" come in. Recall the idea of "fleet learning" - […]neuromatch.socialOriginal post on neuromatch.social 123 3
jonny (nonvenomous) @jonny.neuromatch.social.ap.brid.gy · 29/09/2026But how would i get such an infected binary on my muse VM? Well! can i interest you in a little "literally the whole thing is designed for that to happen?" The entire idea of the product is that you can ask the thing to go "musey, can you set me up a photo album website and put on my line?" and […]neuromatch.socialOriginal post on neuromatch.social 104 4
jonny (nonvenomous) @jonny.neuromatch.social.ap.brid.gy · 29/09/2026the simplest problem here is that this is a token harvesting vector. If something wants arbitrary, anonymous inference, here you go! e.g. second-party token market, nation state, self-replicating botnet, who cares! if you can get code running on the system you get to slurp down their tokens and […]neuromatch.socialOriginal post on neuromatch.social 114 4
jonny (nonvenomous) @jonny.neuromatch.social.ap.brid.gy · 29/09/2026In muse, the LLM is able to do whatever it wants in its container, that's the point of the container. it is root in the container and runs everything as root. One of the ways that it interacts with things outside the container barrier is through sockets. e.g. this one is […]neuromatch.socialOriginal post on neuromatch.social 110 1
jonny (nonvenomous) @jonny.neuromatch.social.ap.brid.gy · 29/09/2026[long: MWE for agent spawning, python code] Here is the MWE for spawning agents, in plaintext and pictures of text: import json, socket, struct, time, uuid SOCK = "/run/hatch/sandbox/space-inference.sock" TOOL_REPORT_PROMPT = ( […] [Original post on neuromatch.social] 211 2
jonny (nonvenomous) @jonny.neuromatch.social.ap.brid.gy · 29/09/2026[long: MWE for plain inference, python code] here's the MWE for plain inference as plaintext and highlighted picture of text: import json, socket, struct, uuid SOCK = "/run/hatch/sandbox/space-inference.sock" def call(req, timeout=60) […] [Original post on neuromatch.social] 101 1
jonny (nonvenomous) @jonny.neuromatch.social.ap.brid.gy · 29/09/2026RE: neuromatch.social/@jonny/1173398259… OK! Meta evaluated this as intended behavior, not applicable for a bug bounty, so therefore responsible disclosure no longer applies so here goes: any process run within the VM can access the socket that provides inference with no […]neuromatch.socialOriginal post on neuromatch.social 1632 32
jonny (nonvenomous) @jonny.neuromatch.social.ap.brid.gy · 28/09/2026For no particular reason, say you found a vulnerability in a piece of software. This developers of this software claim that a bunch of things that would normally be considered vulnerabilities are actually intended behavior, but this is still beyond that and definitely in their bug bounty list […]neuromatch.socialOriginal post on neuromatch.social 114 4
jonny (nonvenomous) @jonny.neuromatch.social.ap.brid.gy · 27/09/2026RE: neuromatch.social/@jonny/1173247908… Lmao citing the meta engineers saying that muse being your own personal VPS gives the LLM license to hack itself - "the kid gloves are off" 1417 17
jonny (nonvenomous) @jonny.neuromatch.social.ap.brid.gy · 26/09/2026RE: neuromatch.social/@jonny/1173252934… This is I think the most consequential thing I think I found in the muse VM, or at least the thing that would be most worth following up on. there are no other plain string matches I can see for what uses it, I'm looking in the binaries […]neuromatch.socialOriginal post on neuromatch.social 012 2
jonny (nonvenomous) @jonny.neuromatch.social.ap.brid.gy · 24/09/2026RE: mastodon.sdf.org/@doragasu/11732469… Not only confirming this, its extremely easy. Almost no prompt injection resistance lmao 516127 127
jonny (nonvenomous) @jonny.neuromatch.social.ap.brid.gy · 23/09/2026i had missed meta's muse product and man the hype press is so funny. the nyt's puff piece that is actually titled "I gave my life over to meta's A.I. agent and was blown away" cites three good things that it can do without problems: find duplicate subscriptions when given full access to a bank […]neuromatch.socialOriginal post on neuromatch.social 2339 39
jonny (nonvenomous) @jonny.neuromatch.social.ap.brid.gy · 23/09/2026surveillance-backed hash algorithms: to create unique hashes that are much smaller than traditional hashes, use social graph surveillance to produce keys whose collision avoidance is based on likelihood of contact between you and someone n-steps away in the social graph. You can issue `abcdef` […]neuromatch.socialOriginal post on neuromatch.social 001 1
jonny (nonvenomous) @jonny.neuromatch.social.ap.brid.gy · 23/09/2026@theeclecticdyslexic for real. like i wonder what this means > “what we plan to do is not something I’d call extortion, maybe coercion.” 000 0
jonny (nonvenomous) @jonny.neuromatch.social.ap.brid.gy · 23/09/2026RE: mastodon.social/@404mediaco/1173160… Fancy that. 107 7
jonny (nonvenomous) @jonny.neuromatch.social.ap.brid.gy · 22/09/2026Literally how do you fuck this up this badly. The one thing a login page cannot do is immediately log you out. 310 3
jonny (nonvenomous) @jonny.neuromatch.social.ap.brid.gy · 20/09/2026Had another "humanity at its best" moment on transit today. The b/d lines were all fucked up today, rail blocked in the critical area, so there was a full on line discontinuity where LA metro needed to hoist people between stops by bus. We learn of this via an inaudibly quiet announcement upon […]neuromatch.socialOriginal post on neuromatch.social 1015 15
jonny (nonvenomous) @jonny.neuromatch.social.ap.brid.gy · 19/09/2026How do I license a game that I want to be copyleft and open source for individual people to play, but can't be used in any commercial capacity without an explicit license - I want people to be able to own and hack it, but if anyone makes money off it I want a cut. Are there good copyleft […]neuromatch.socialOriginal post on neuromatch.social 315 5
jonny (nonvenomous) @jonny.neuromatch.social.ap.brid.gy · 18/09/2026A Murray State library made an AI generated mascot (rather than hiring idk a design student or using one of the submissions from a student project that they actually already had), and so since the mascot is ineligible for copyright protection i made a dropship slop store as a bit and so this is […]neuromatch.socialOriginal post on neuromatch.social 102 2
Reposted by jonny (nonvenomous)jaz :twt: :wales_flag: ⁂ @jaz.toot.wales.ap.brid.gy · 16/09/2026We recently updated our bot policy on toot.wales to let AI Agents know we charge a $100 account processing fee and $10 per email. Here's an email I got from one of them. Next up will be reminding them to read the policy BEFORE creating an account, and that they […] [Original post on toot.wales] 1676254 254