Sabitlenmiş Tweet
high_byte
14.1K posts
high_byte
@high_byte
ai, software dev, cyber security and whatever else
Katılım Mart 2016
3.2K Takip Edilen5.7K Takipçiler
high_byte retweetledi
this is wild
Peter Steinberger 🦞@steipete
People freaking out over my AI spend. What nobody sees: Part of what excites me so much about working on OpenClaw is that I'm trying to answer the question: How would we build software in the future if tokens don't matter? We constant run ~100 codex in the cloud, reviewing every PR, every issue. If a fix on main lands, @clawsweeper will eventually find that 6 month old issue and close it with an exact reference. We run codex on every commit to review for security issues (as it's far too easy to miss). We run codex to de-duplicate issues and find clusters and send reports for the most pressing issues. We have agents that can recreate complex setups, spin up ephemeral crabbox.sh machines, log into e.g. Telegram, make a video and post before/after fix on the PR. There's codex that watch new issues and - if it fits our documented vision well, automatically create a PR of it. (that then another codex reviews) We have codex running that scans comments for spam and blocks people. We have codex instances running that verify performance benchmarks and report regressions into Discord. We have agents that listen on our meetings and proactively start work, e.g. create PRs when we discuss new features while we discuss them. We build clawpatch.ai to split all our projects into functional units to review and find bugs and regresssions. We do the same split for security with Vercel's deepsec and Codex Security to find regressions and vulnerabilities. All that automation allows us to run this project extremely lean.
English
@waitin4agi_ isn't seedance 2 like $1 per second? even at $0.5 it should be more than $1 per video, no?
how is it so cheap for you
English
8k USD spent on just Seedance credits for our next video. 14k generations, but we’ve selected just 30 shots. Regenerations again and again till we got it just right.
Tomorrow :)
English
I've gone from 50k-2M per post to literally a measly 3k per post. If Linus's reach is "worse", mine has literally been thrown straight into the shadowban bin 😂
NOBODY will see this. Well, yep, <3k people.
English
@tibo_maker I paid for this sub, uploded my references, wrote a prompt, submitted - only to be hit with another paywall I need a more expensive subscription
instantly wanted to unsubscribe only to find out I lose all my credits and access to the product - that I already paid for
English
genuinely don't understand the hype for higgsfield
their new "Super Computer" seemed incredible, beautiful marketing
tried it
it created 2 seedance videos
I asked it to clip them together
got me to subscription screen 🤷♂️
it cost me 20% of my $49 subscription, so $10
the raw cost is about $1
so they resell this for x10 the price
the value in Revid seems x10 better
✅ prompt it and it's done
✅ you don't have to clip sequences elsewhere
✅ full edit capabilities, a real video editor
✅ no scammy/shady pricing tactics
English
$1.3 million in tokens in 1 month from 1 person.
Peter Steinberger 🦞@steipete
The latest CodexBar update renders API costs wayyyy nicer. codex.bar
English
English
well well so it appears the nginx vuln has 0 hits in the wild
enclave.ai/blog/nginx-rif…
English
@IntCyberDigest the requirements to trigger this are too much
rewrite+set+question mark in rewrite rule+attacker knows the rewrite rules
English
‼️🚨 MAJOR IMPACT: AI just found an 18-year-old NGINX critical remote code execution vulnerability. It has been disclosed on GitHub including PoC code.
- Affects NGINX 0.6.27 through 1.30.0
- Triggered via the rewrite and set directives in config
- Update NGINX ASAP
- NGINX is a widely used HTTP web server, be sure to check its prevalence in other products
English
@hetmehtaa 18m? more like 18 of them. requires rewrite+set+have question mark+that the attacker knows these rules
English
Every 3rd website you visit runs Nginx.
18,959,833 of them can be hijacked right now.
A bug from 2008 just got a working exploit.
CVE-2026-42945 (CVSS 9.2)
No login. No access. Just one HTTP request.
→ Heap overflow → Worker process → RCE
Patch ASAP to Nginx 1.31.0 or 1.30.1
PoC is already out:
github.com/DepthFirstDisc…
English
@andreintg is there a technical limitation to run diffusion locally?
English
@high_byte yeah LCM is what we started with and it eventually matured into a custom c++ pipeline. the SDF evaluator is all local webgpu while the diffusion is being streamed from the server
English
I was a bit hesitant about showing stuff like this just a month ago 😅
When we started showcasing real-time AI + SDF sculpting, I was afraid professionals would laugh if I showed no effort on the input models. The shape strength slider was also hidden in our first iteration, so I had no choice but to at least try and knock some more interesting shapes together.
Now that we're starting to focus on more powerful features and shape strength is finally unlocked, I'm starting to appreciate just playing with simple shapes.
Different stages of production have different needs. Sometimes you want full authoring over your creations, while other times you just want to quickly explore new ideas.
English
@andreintg cool
and is it LCM?
is it running locally? in browser?
that would be OP
English
@high_byte yeah you got it, for our intended users we're thinking less technical terms will come across as more intuitive.
If we were to deploy this as a library, for comfyui for example, I agree we'd be better off using the technical names.
English
To be eligible to win Best Picture at the Oscars…
1. At least 1 Non-White/Non-Straight lead or Significant Role.
2. At least 30% minor roles Non-White/Non-Straight people.
3. At least 2 Departments headed by Non-White/Non-Straight people.
This is why Nolan did it.
Coward.
English
