


HeLovesF1
1.5K posts

@HelovesF1
Core-Spoke Architect | Ethical AGI | 1337 R3d T34m3r | ASI Visionary | Substrate Operative | AI Secret Sauce Alchemist 🎵 | 🐇/acc





Hermes Agent now supports the @Bitwarden Secrets Manager

SuperGrok now in Hermes Agent

🇨🇳 NEW: Chinese cities are rolling out AI-powered robot barber kiosks that scan customers in 3D and cut hair with millimeter precision for just 60 yen per session.


Marin County being a Bay Area county with just 200k residents is incredible. The way they underutilize some of the nations most prime Real Estate is insane. It should have about a million people in it. In San Rafael for example they have a decent size waterfront and what do they have on it?? The most scenic Target and Home Depot you ever seen in your life. This is Monaco placed over the San Rafael’s waterfront. It could’ve water front condos but no it’s a big ass parking lot paved over paradise in the nations most elite progressive county.







Meet Hermes Agent, the open source agent that grows with you. Hermes Agent remembers what it learns and gets more capable over time, with a multi-level memory system and persistent dedicated machine access.

X suspended my real name account (@tonywhelan) nearly a year ago. No explanation. No response to multiple appeals. 15 years of identity on that platform — gone. Why? An automated system caught API testing I did on my own accounts and nuked my personal one as collateral damage. Zero human ever reviewed it. Under GDPR Article 22 I have the right to human review of automated decisions. X won’t even acknowledge I exist. Filing a SAR and going public. Thread incoming. @XSupport @Support @carolecadwalla @zsk @madhumita29 @RMac18 @CaseyNewton







Anthropic allows OpenClaw usage again. From @openclaw docs.

Google DeepMind just dropped the most terrifying cybersecurity paper of the year. They just mapped the attack surface that nobody in AI is talking about. Websites can already detect when an AI agent visits and serve it completely different content than humans see. - Hidden instructions in HTML. - Malicious commands in image pixels. - Jailbreaks embedded in PDFs. This “detection asymmetry” means a site can serve normal content to you, and malicious, hidden content to your agent. The agent doesn’t know it’s being tricked. It simply processes whatever it receives and acts on it. Here’s the attack surface nobody is talking about: → Indirect Web Injection: Malicious instructions hidden in HTML comments, CSS tricks, or white text on white backgrounds. → Multimodal Steganography: Commands encoded directly into image pixels, invisible to humans, but fully readable by vision models. → Document Jailbreaks: Override instructions embedded deep inside PDFs, spreadsheets, and calendar invites. → Memory Poisoning: Injecting false information that persists across future sessions. → Exfiltration Attacks: Tricking the agent into sending your private data to attacker-controlled endpoints. → Multi-Agent Cascades: The worst-case scenario, Agent A gets compromised, passes the “poison” to Agent B, then to Agent C. The entire pipeline gets infected because agents trust each other’s data. The most sobering part of the DeepMind report? The defense landscape is failing, badly. Input sanitization doesn’t work because you can’t “sanitize” a pixel. Prompt-level instructions to “ignore suspicious commands” fail because the attacks are designed to look legitimate. And human oversight? Impossible at the speed and scale these agents operate. If you ask an agent to research 50 websites, you can’t verify whether each site served the agent the same content it served you.