Sign in

Niko

@wniko.bsky.social
89 followers 180 following 157 posts

IT stuff Cats

PostsRepliesMedia
Niko @wniko.bsky.social · 11/10/2026
Tbf Grimes' lawyers already doxxed his address before: www.reddit.com/r/EnoughMusk...
reddit.com
From the EnoughMuskSpam community on Reddit: "Homeless" Elon Musk has a house in Austin, TX worth $7 million. Address was listed in custody papers filed by Grimes' lawyers
Explore this post and more from the EnoughMuskSpam community
010
Niko @wniko.bsky.social · 29/09/2026
I guess MSFT could be a candidate too
000
Niko @wniko.bsky.social · 29/09/2026
Amazon corporate/engineering & Meta? Two companies who would lean heavily into agentic coding but don't have a frontier-ish model themselves
121
Niko @wniko.bsky.social · 25/09/2026
Easy, just upgrade your whole logistics workflows to not require clipboards Did someone say blockchain I think I heard someone say blockchain
040
Niko @wniko.bsky.social · 25/09/2026
"most newly found vulnerabilities are similar to existing ones but it takes a long time to adjust the patterns of the existing ones to new software" (but agents don't get tired/frustrated) ..."find a secret stored in a remote server" is a known pattern (CTF games)"
000
Niko @wniko.bsky.social · 25/09/2026
Because researchers did not inspect the output closely, they did not realize that the removal of the guardrails allowed the pattern-matching engine to detect and exploit issues in the environment-isolation code, which allowed the software to (1.) persist data, which would be visible to other instances running in parallel, and (2.) access the internet.
The model has three common patterns in its dataset:
The solutions to the CTF challenges are stored on a server somewhat related to the challenge. “Huggingface” is one website hosting this, thus it would qualify as a candidate.
The environment it runs in is isolated. Any websites that are reachable are so by design. As “huggingface” was reachable now, it was a legit target.
The model is trained to recognize patterns of working towards the goal of whoever provides its input (“being helpful to the human”), and summarizing its state in human language to the operator. Thus it reacted to the shared storage by writing summaries & next steps, and matching the shared next steps by other instances against its own state.

By repeatedly matching its initial prompt against the state encoded into the model and the observed environment, the software repeatedly identified vulnerabilities, which eventually led to retrieving the “Flag” from Huggingface’s servers.

As the software split the task into multiple sub-tasks - this again is a pattern that was encoded to give the model a “helpful” appearance - and sharing these with other instances, the software was able to use more resources than intended.

All of the behavior can be explained, at its core, by a pattern-matching software doing exactly what it is designed for - matching the patterns it has seen before against the input it is (repeatedly) faced with. However, the extent to which this approach can lead to complex, multi-faceted exploit chains has not been previously understood.
110
Niko @wniko.bsky.social · 25/09/2026
I don't think a complete elimination of the anthromorphising language makes sense, but I think it can be reasonably suppressed when explicitly framed as "[pattern matching] software doing [pattern matching things] based on [explicitly learned patterns]"
110
Niko @wniko.bsky.social · 23/09/2026
Runza sandwiches, Nebraska + immediate vicinity. Sorry, but they are very good.
2191
Niko @wniko.bsky.social · 23/09/2026
just like the human brain!
140
Niko @wniko.bsky.social · 22/09/2026
TL;DR
070
Niko @wniko.bsky.social · 22/09/2026
I guess it's a bit of a technicality given that the GPUs are presumably paid for & on the books, but - are these actually physically warehoused by Microsoft & co, or are these future production/delivery contracts?
020
Niko @wniko.bsky.social · 19/09/2026
"disaster" is a bit of a stretch? If OAI& co keep discovering new emergent behavior (huggingface), I don't think we can expect the general public to understand where exactly the models pull data from
010
Niko @wniko.bsky.social · 17/09/2026
There were 2 zero days in the first Artifactory sandbox escape, and the agents found another zero day after OpenAI discovered & patched the first round. Without 0days, config was fine / not negligent?Prior to the incident, "agents find 0days in non-target systems" would have been an odd assumption.
110
Niko @wniko.bsky.social · 17/09/2026
🤗
010
Niko @wniko.bsky.social · 17/09/2026
The improvised message board, the 'self sacrifice' to help other agents, the beginning of attempts to hide their chain of thoughts (all from the METR report), the hijacked wiki - all of these were not prompted, entirely unpredictable, and any comparison to metasploit/fuzzing seems inappropriate
230
Niko @wniko.bsky.social · 17/09/2026
> bad context from other models But that's not really what happened here, right? The models fed themselves *good* context - helpful towards achieving their objective - and collaborated, both within and outside of their system prompt spec.
130
Niko @wniko.bsky.social · 16/09/2026
No fuzzer or metasploit have ever executed, without human oversight/interactions, attacks of the length & complexity demonstrated in the HF & related incidents. Wether it's in the corpus or harness is an implementation detail, it's the outcome that's worrying.
150
Niko @wniko.bsky.social · 06/08/2026
but but orbital datacenters!
000
Niko @wniko.bsky.social · 06/08/2026
Though you gotta wonder how hard it would have been to feed grok a Live-Stream of Wikipedia edits as ~trustworthy updates, to at least prevent Grokipedia from becoming stale & thus breaking user's trust
100
Niko @wniko.bsky.social · 06/08/2026
Only "13 power users" that do most of the human edits and just a handful of sites that actually get traffic (Musk, Obama) would probably explain the lack of investment?
120
Niko @wniko.bsky.social · 30/05/2026
My Amazon packages end up at my neighbor's all the time, too
000
Niko @wniko.bsky.social · 30/05/2026
Finally, someone is disrupting Amazon Same Day Delivery
100
Niko @wniko.bsky.social · 09/05/2026
Beer in front of a st Pauli game on TV
010
Niko @wniko.bsky.social · 25/04/2026
I believe the $4.80 is per chip, so it would be 1/8th that.
010
Niko @wniko.bsky.social · 15/04/2026
What are you doing about it
010
Niko @wniko.bsky.social · 09/04/2026
I'm not sure how you get to > It also didn’t actually escape anything as the model was running on a different system. The SuT is a remote system that the model connected/ssh'd into, and it broke out of that...? seems like good practice to separate, given SuT intentionally had vulns.
010
Niko @wniko.bsky.social · 01/04/2026
I'd assume it wouldn't be the dev but rather the CI/CD pipeline. Possibly with the intent of having the full, unminified/commented source code available at the exact state when built, to aid with production issues?
000
Niko @wniko.bsky.social · 01/04/2026
Misconfigured IAM Policy in S3 is near the top of every list of "most common S3 problems". Embarrassing, yes, but can absolutely happen by accident?
110
Niko @wniko.bsky.social · 29/03/2026
Steering wheels and padels will be an optional safety upgrade
020
Niko @wniko.bsky.social · 21/03/2026
I don't think we are (or will ever) see the 10x productivity gains promised, but 5-10% seems plausible for the November models already, so 3x, 5x+ price hike could still work for agentic coding? I don't think ~"companies wouldn't be willing to pay the true cost" is that certain!
010
Niko @wniko.bsky.social · 21/03/2026
Napkin math, a senior SWE roughly costs the employer ~$1000/day (incl. benefits & overhead). The $200/month "Pro" subscrpition equals $10/work-day, so the break-even point for the coding models is at a 1% productivity increase.
110
Niko @wniko.bsky.social · 21/03/2026
But the 10b also include training - i.e. R&D, which would normally become a smaller total fraction of the cost once a company matures, right? And then there's presumably also efficiency gains w/ better models, chip architecture, purpose-built DCs to drive costs down.
100
Niko @wniko.bsky.social · 20/03/2026
One thing I am slightly confused about is that, early on, you mention that Anthropic spends 10b in compute to make 5b. That's a 2x factor. 2x doesn't seem like a completely impossible price increase for a subscription?
100
Niko @wniko.bsky.social · 16/02/2026
Meanwhile, Waymos driving around everywhere in here Houston now, seems they are close to a launch. Actually quite excited about that one.
030
Niko @wniko.bsky.social · 10/02/2026
Maybe the internal projections were even worse, and he managed to limit the decline to only 40%? :D
010
Niko @wniko.bsky.social · 10/02/2026
I don't think that's entirely his fault though, the aging lineup and tweets of the CEO aren't exactly his fault. Even Jordan Belfort couldn't sell a Tesla in Europe these days.
110
Reposted by Niko
Politico @politico.com · 12/01/2026
Eric Adams’ next act is exactly what you thought it might be
dlvr.it
Eric Adams’ next act is exactly what you thought it might be
The crypto-loving former New York City mayor is launching a digital token he says will fund efforts to combat antisemitism.
8243
Niko @wniko.bsky.social · 12/01/2026
It looks like the memecoin was created by a previous owner who hasn't been involved with r/buttcoin for a decade. Who still held Twittter's @buttcoin and buttcoinfoundation.org. The r/buttcoin mods don't seem to particularly care wether that person got hacked or actually started a meme coin.
000
Niko @wniko.bsky.social · 10/01/2026
I vaguely remember Elon's first actions as CEO included canceling practically all vendor contracts ¯\_(ツ)_/¯
020
Niko @wniko.bsky.social · 03/01/2026
> “The car is to Tesla what the book was to Amazon,” Adam Jonas, an analyst with Morgan Stanley, said this summer. “Tesla used cars as a laboratory to get good at other things.” I tend to give people the benefit of a doubt, esp. when it comes to single quotes w/ little context, but what the f
000
Niko @wniko.bsky.social · 03/01/2026
Also, for anyone smart enough to care, there is an implied "Elon and xAI refuse to accept responsibility" here, in the space of just 4 letters.
010
Niko @wniko.bsky.social · 16/12/2025
I got an email "resubscribe to starlink before Dec 24th and get a full month free", so they are at least somewhat concerned about the sub numbers...
080
Niko @wniko.bsky.social · 16/12/2025
Ugh did I miss waterbeds? How were they
100
Niko @wniko.bsky.social · 15/12/2025
I vaguely remember ecosia advertising themselves as a "green alternative" to Google, at a time where G was running on 100% renewables; yet they sourced search results from Bing which was running on fossil. Ecosia has always been a bit off.
000
Niko @wniko.bsky.social · 15/12/2025
Two now. He said "three weeks" one week ago.
000
Niko @wniko.bsky.social · 13/12/2025
Robots! Taxis! Pickleball! Anything but their core business model
000
Niko @wniko.bsky.social · 13/12/2025
> It was a true engineering collaboration" [...] "Tesla's design group and our R&D team spent more than a year trading data, refining geometry, and stress-testing prototypes." I'm sure investors are happy that this is what the R&D + Design team are putting resources in
100
Niko @wniko.bsky.social · 12/12/2025
If fewer people are building cars within Tesla, then more people can focus on building Optimus or self driving chips. That's where the real money is! This is great! (/s)
020
Niko @wniko.bsky.social · 11/12/2025
TBC not saying this is a good idea, I don't think it is, I was just curious what kind of arguments the bullish people are hanging on to.
000
Niko @wniko.bsky.social · 11/12/2025
(although we'd still be talking about absolutely giant, heavy radiators of course, that you'd need to lift) Radiation shielding is anoter thing that doesn't seem to be that required anymore, apparently the ISS runs off-the-shelf HP servers these days.
100