Sabitlenmiş Tweet
New blog post. This is a fun one: wts.dev/posts/chatgpt-…
thanks to @theo for connecting me with the OpenAI team, and thanks to @zemnmez for working with me on this (even though it wasn't patched)
English
Watch This Space
1.7K posts
Watch This Space
@wtsdev
Watch This Space: A security research blog.
The Interwebs Katılım Ağustos 2024
544 Takip Edilen604 Takipçiler
@OrdinaryInds I think it might be a glitch (no pun intended) with the platform. I think I saw another post earlier about another account that apparently changed their profile picture to something that looked the same. I'm honestly not even sure how "the profile pic was changed" is determined.
English
@neogoose_btw Why is the prompt presenting this with the app's version number? That spot should usually be filled by the app name, not the version number.
English
Claude code 2.1.207 seems to be trying to index my whole computer supposedly for the faster file search?
English
@localhost_4173 @tsonubin @oxygen61527937 As it is bespoke, it's understandable why whatever app you're using here to detect technologies can't detect it. But it absolutely *still* does use Electron, just in a non-standard way. If you look through the symbols (or even the strings) of the framework, you can see it. /end
English
@localhost_4173 @tsonubin @oxygen61527937 If you read my post, I said "It's Chromium with Electron attached". The core framework inside is versioned after a Chromium build, but look elsewhere inside and you'll see an `app.asar` file, which is for Electron. It's a bespoke mish-mash, not a standard Electron deployment. /1
English
@tsonubin @oxygen61527937 @localhost_4173 I looked into it myself. It's Chromium with Electron attached. They call it OWL internally, but it seems to be related to Atlas OWL only by name. They appear to be almost completely different. It's possible there is some development lineage, but, if there is, it's sparse at best.
English
@maria_rcks I understand it's probably just their corporate font, but this kind of makes me think of those label memes and its implying that the ChatGPT moon is going to crash into the continent of Work. (or maybe I'm reading it entirely correctly?)
English
@theo 5.5 is still my go-to for a lot of things, but I found myself recently annoyed at it in some respects. Would be curious to see how 5.6 performs.
English
Apparently I'm allowed to talk about GPT-5.6 now?
It's a damn good model. Not quite as "smart" as Fable, but it is incredibly capable. Fixed all the problems I had with GPT-5.5.
It is incredibly determined. Will run for a day without even using a /goal. It understands subagents incredibly well and is great at orchestrating. It's super pleasant in use cases like OpenClaw and Hermes Agent. It knows iOS dev incredibly well.
It has rough edges too, but FAR fewer than 5.5 did.
For many things, gpt-5.6-sol will become my obvious default.
I will share a lot more soon 🫡
English
@semenov_roman_ @thadude3 I think what they mean is that Microsoft correlated the GDID with certain IP addresses. Ngrok then associated certain IP addresses with a specific account. Those IP addresses overlapped.
English
@thadude3 ngrok doesn't know GDID, it is not sent along with requests. Which makes sense, otherwise everyone would be able to could cross reference and track users across websites - Microsoft would prefer to keep such capabilities to themselves.
English
Wait does Windows phone home every domain users visit? How else could the fact that a user has accessed ngrok domain end up on Microsoft servers?
Com Feed@thecomfeed
⚠️ UPDATE: New Court Files Reveal How Microsoft Helped the FBI Identify Peter Stokes "Bouquet" (Scattered Spider Member) The court files reveal that Microsoft helped the FBI track Peter Stokes down using GDID — a Global Device Identifier, which is assigned to every Windows installation and cannot be changed unless the OS is wiped. The GDID helped them track: • IP history • Full web activity • Video game activity and games played • Logged-in social accounts, including Snapchat, Facebook, and Apple According to the court documents, the critical mistake was using a VPN to create the ngrok account used in the May 2025 Tiffany & Co. hack from the same Windows device associated with his GDID. Although the account was created from a VPN IP address ending in .168, Microsoft records show that the same GDID (6755467234350028) accessed the ngrok signup page at the exact time the account was created, linking the hack to his personal social accounts.
English
@nicolasembleton I don't know. However, I would venture to say there probably isn't. Apple is fairly lean on telemetry. They know the obvious, like apps you buy on the Mac App Store, but I definitely don't think they track you *this* much.
English
@jimscard @mysk_co Generally, the OS *should* stop an app from launching if it's main executable has been tampered with. It apparently isn't doing that in whatever this case is. As for the delay, Apple mostly releases security updates with their OS updates, which can sometimes be months apart.
English
@mysk_co Where’s the bug? You launched your payload from Terminal, which has permission to alter other binaries. Is there something else ?
English
@gergely_kalman Residential proxies are such a strange thing to me, personally.
English
Fun fact this is hola browser extension did with your browsers not that long ago. Maybe they're still around scamming people.
International Cyber Digest@IntCyberDigest
‼️ Some of the identified malicious streaming devices sold online that enroll users' home internet addresses in a residential proxy service.
English
@daradoescode @cursor_ai If you are able, you might still be able to perform data recovery with another computer. The space on your drive where the deleted files are is usually just marked as able to be overwritten. There's software that can scan the drive and look for the still-extant bytes.
English
@cursor_ai just bricked my windows install with a bug
- I lost every app installed on my computers c drive
- my downloads, pictures, music and videos folder somehow?
- and probably other stuff that I'm not even aware of
I've ONLY seen this issue with/in Cursor
rip my pc :(
English
The Fable ban has officially been lifted! Should hopefully be live on Anthropic's APIs and Claude Code soon
leo 🐾@synthwavedd
🚨 BREAKING: Commerce Sec. Howard Lutnick has officially lifted the export control order on Anthropic's Fable 5
English
Seeing a CEO admit, in writing, that the US government restrictions are "bad news" is honestly refreshing. I have my own complicated feelings on AI, but I specifically believe our current administration cannot be relied on to effectively regulate it.
Sam Altman@sama
Good new first: Sol is a smart, efficient, and a significant step forward. It is the same price as GPT-5.5. Also launching in the GPT-5.6 family is Terra, with 5.5-level performance at half the price. Bad news: at the request of the US government, it is launching today in limited preview instead of the open access launch we were planning on. We are working with the government to get to general availability as fast as we can. I think it is quite reasonable to roll out models--especially as they reach significant new levels of capability--in this way. It fits with our long-held strategy of iterative deployment. But this isn't quite the process that we think is optimal. Now we will with the government to attempt to get to a transparent, reliable process for early access, and to ensure that as long as our safeguards work as intended we can release widely. We want to be a reliable, dependable partner that works with all stakeholders, and we also want to live by our mission of benefiting all of humanity. I believe the government shares most of our goals, and that they are overall doing a good job in a very difficult situation. We will work as quickly as we can to get this model in your hands and we hope you will love it.
English
@theo I called this earlier. This administration flip flops a lot, but this term they seem to be standing more firm in their (arguably dumb) positions. It's why I'm not at all surprised Fable isn't back yet. I don't think we'll be seeing first-term-level flip-flopping here.
English
I'm afraid we've entered a dark era in AI model development and access.
English
youtu.be/h0EGCnBjTVk
Incredible video. Way more transparent than I would have expected, but I like that.
YouTube
English
@theo @acrognali @thsottiaux Did some digging. Maybe try adding Codex as a "Developer Tool" in System Settings (under Privacy & Security).
English
@acrognali @thsottiaux Just spun up a thread and immediately spiked to 70% cpu. "idling" at 60% now.
English
@C2IRIS My gosh, this is reaching levels of niche cybersecurity attacks I didn't think ead possible.
English
@ZackKorman @nhegde610 Too many non-tech people think hacking is analogous to bashing a door with a rock until you break it when brute-force attacks are in a minority of actually weaponizable exploits.
English
Definitely can’t with fable, but it’s still meant to create a narrative that’s fake. I mean imagine the story “hackers broke into the nsa’s classified systems”. We’d not go “damn those are good hackers” (or at least we wouldn’t ONLY say that), we’d say “wow the nsa blows”.
Somehow when it’s ai we ignore that second part
English
If this whole “Mythos broke into almost all NSA classified systems” story is true (and it’s not), it just means the NSA is wildly incompetent.
Cybersecurity isn’t magic. If your classified systems get breached it means you did it wrong.
English
Watch This Space retweetledi
Apple Internals: Swift in the Kernel
open.substack.com/pub/calif/p/ap…
English