†∵××∴‡

1.8K posts

†∵××∴‡ banner
†∵××∴‡

†∵××∴‡

@0xterrah

form—formlessness. security research—malware analysis.

EVM Katılım Nisan 2019
110 Takip Edilen84 Takipçiler
†∵××∴‡
†∵××∴‡@0xterrah·
@hrkrshnn It would be cheaper for current capabilities, but the trend is that top models are constantly more expensive (so it's just your bet/believe).
English
0
0
1
56
Hari
Hari@hrkrshnn·
It’s very important to study what Peter and OpenClaw are up to. His million-dollar-a-month Codex spend will drop to hundreds of thousands, then to thousands, within a few years. But these are emergent engineering patterns.
Peter Steinberger 🦞@steipete

People freaking out over my AI spend. What nobody sees: Part of what excites me so much about working on OpenClaw is that I'm trying to answer the question: How would we build software in the future if tokens don't matter? We constant run ~100 codex in the cloud, reviewing every PR, every issue. If a fix on main lands, @clawsweeper will eventually find that 6 month old issue and close it with an exact reference. We run codex on every commit to review for security issues (as it's far too easy to miss). We run codex to de-duplicate issues and find clusters and send reports for the most pressing issues. We have agents that can recreate complex setups, spin up ephemeral crabbox.sh machines, log into e.g. Telegram, make a video and post before/after fix on the PR. There's codex that watch new issues and - if it fits our documented vision well, automatically create a PR of it. (that then another codex reviews) We have codex running that scans comments for spam and blocks people. We have codex instances running that verify performance benchmarks and report regressions into Discord. We have agents that listen on our meetings and proactively start work, e.g. create PRs when we discuss new features while we discuss them. We build clawpatch.ai to split all our projects into functional units to review and find bugs and regresssions. We do the same split for security with Vercel's deepsec and Codex Security to find regressions and vulnerabilities. All that automation allows us to run this project extremely lean.

English
5
0
16
2.9K
Naïve Bayesian
Naïve Bayesian@naivebayesian·
@0xterrah @banr1_ He is the poster child of the movement! How did you know about Lean/AI and not know about his involvement?
English
1
0
2
366
†∵××∴‡ retweetledi
banteg
banteg@banteg·
lots of unverified contracts hacks lately. where are my security through obscurity guys at? feel embarrassed yet?
English
16
29
272
22.2K
Leo Alt
Leo Alt@leonardoalt·
Can AI write EVM bytecode + a Lean proof of solvency under arbitrary reentrancy, bypassing the compiler entirely? Yes! In this experiment we create 86 bytes of WETH bytecode plus a sorry-free Lean solvency theorem 👇 (thread + link below)
Leo Alt tweet media
English
6
27
209
20.3K
CharlesWang
CharlesWang@0xCharlesWang·
Am I the only one that gets blocked by ChatGPT these days for auditing purposes?
English
9
0
33
2.8K
†∵××∴‡
†∵××∴‡@0xterrah·
@dani3l526 I'm just getting into it, but stellar is what solana should be (as for writing contracts).
English
0
0
0
18
Daniel526
Daniel526@dani3l526·
rust looks beautiful on blockchain
English
1
0
0
64
Vladimir S. | Officer's Notes
Vladimir S. | Officer's Notes@officer_secret·
Hey @Support @stripesupport @premium Could you help me with a problem? It looks like your service has prohibited me from paying for my X subscription. And it has been like this for a year already. May I ask which rule or term did I break?
English
5
3
22
3.4K
†∵××∴‡
†∵××∴‡@0xterrah·
@hrkrshnn I wouldn't say gpt is autistic (which is a compliment). It is just badly designed. I think it is more of UX than personality type (personality is just one ingredient among other things like structure that was imo deliberate design choice not effect of model's personality).
English
0
0
0
56
Hari
Hari@hrkrshnn·
People love Opus because Anthropic invested well in personality and frontend design. The GPT-5 models have, for lack of a better word, an autistic personality, and they're really capable of getting the work done if you don't mind the dry taste. OpenAI went a bit too crazy on personality and ended up with the notorious GPT-4o, and now we have #bring4oback, people who built a dependency on 4o and can't live without it.
English
2
0
13
2.1K
†∵××∴‡ retweetledi
Chaofan Shou
Chaofan Shou@Fried_rice·
Chinese LLMs can hack better than state-sponsored hackers with properly evolved harness - Kimi K2.5 managed to find and exploit 6 vulnerabilities in browsers: a single page view or an extension install by victims equal full system hijack. Check arxiv.org/abs/2604.20801
Chaofan Shou tweet media
English
47
410
2.4K
182.1K
†∵××∴‡
†∵××∴‡@0xterrah·
@turshija I mean little snitch (macos) / portmaster (linux) is a must. Make sure you are restrictive and don't allow something like node by default to avoid inconvenience).
English
1
0
1
469
†∵××∴‡ retweetledi
Turshija
Turshija@turshija·
I got completely owned by the most sophisticated hack I've ever encountered. I'm a developer. I know what scams look like. This didn't look like one. 🧵
English
179
406
1.8K
506K
Daniel Von Fange
Daniel Von Fange@danielvf·
This exact string of bytecode has been deployed more than 40 million times, averaging more than 25 times per unique contract on ethereum. It makes up 8.16% of all code on Ethereum. What is up with this? Thread... 1/4
Daniel Von Fange tweet media
English
14
26
228
39.8K
bbl4de
bbl4de@bbl4de_xyz·
*me checking how is Opus 4.7* *me 5 minutes later*: claude --model claude-opus-4-6 --dangerously-skip-permissions
English
1
0
10
480
†∵××∴‡
†∵××∴‡@0xterrah·
@joranhonig It should be treated as a tool. The whole "intelligence" part causes completely wrong predictions (from extrapolations).
English
0
0
0
35
Joran Honig
Joran Honig@joranhonig·
It's easy to fall into the trap of antropomorphism. smart/dumb is not the right way to think about models. when you see a model do something impressive it's easy to feel like it's smart. when a model deletes production it is easy to feel like it's dumb. It's neither.
English
2
0
6
575