Head of Security Engineering @ WitnessAI / CEO @ OffCell Research
Baseband
Joined April 2011
- Tweets469
- Following2.6K
- Followers3.3K
- Likes21.7K
Who else is playing in the cellular/SDR space nowadays? I’ve got too much gear. Time to clean house and do some upgrades.
So… did android ever fix its system CRL checking? unam.re/blog/certificate-rev…. Otherwise a huge amount of old surface just opened back up.
I need to give credit where credit is due. @adverserialAI and @lordx64’s implementation of verifiable encrypted inference is what everyone should strive for. You can verify the whole stack with a click in your browser. This should be the standard!
Does anyone have any recommendations on a voice enabled AI interface that I can chat with that can spin subagents/tasks off in the background? For instance I want to have a conversation with it and have it go do research on X while we continue to talk?
2
591
When IDA Pro? ;-)
This is the doom I predicted a few days ago, coming for Photoshop. A clean-room open-source reimplementation.
No prizes for guessing that they decompiled Photoshop to source code, processed that to some kind of non-code specification language, then fed the spec to an LLM with an instruction to generate Rust.
Adobe just got nuked. And closed source is dead, dead, dead.
github.com/storytold/photocr…
Who’s making @cerebras style chips for home? I want my private models and I want them fast. GPUs are not the right platform for model inference. Great spot for Apple (or OpenAI) to build.
2
3
726
Mathew Solnik retweeted
I'm not sure open letters are an effective tool, but in this case we need every tool we can get to raise awareness of the point we've reached: we have neglected defense and accelerated offense with AI. All the security concepts and patterns the industry has used and adopted over the years in product security are becoming wrong assumptions. One pattern every vendor follows is raising the bar for an attacker with new mitigations or new layers of obscurity to win time, letting complexity become a security boundary.
These old patterns are broken. The data shows they were never very effective against experienced attackers, and now we have an experienced attacker that can be scaled with unprecedented velocity, so winning time is a losing strategy by design. Defenders today don't have time, but we still have an opportunity to change the rules of the game.
Very cool TEE attacks!
More TEE attacks, this time on Signal’s contact discovery enclaves. v12.sh/blog/signal
1
705
Mathew Solnik retweeted
Seems like a really smart time for the US Government to kneecap the American leader in this benchmark! 👏👏👏
Exciting news: GLM-5.2 (Max) ranks #2 in Code Arena: Frontend, with +29pt over Claude Opus 4.7 (Thinking) and only behind Fable 5! GLM-5.2 is the best open model vs Kimi-K2.6 and Minimax-M3 by a large margin.
- #2 React and #4 HTML sub-leaderboards
- Ranks as the top model in nearly all sub categories: Brand & Marketing, Reference-Based Design, Data & Analytics, Consumer Product, Gaming, and Simulations.
Congrats @Zai_org for the incredible milestone!
I’ve seen the future and it is bad. Real experts will spend all of their time explaining to people why the AI is wrong/hallucinating.
3
1,854
Awesome work!! Looking forward to testing it out! @lukasarnld is the source going to be released?
We’re launching the public beta phase of our CellGuard iOS app. It supports all iPhones running iOS 14 or newer. You can contribute to an optional study that helps us to improve detection algorithms. Read more & download CellGuard at cellguard.seemoo.de
Congrats to the @cursor_ai teams! 100% deserved. Truly the most usefully AI based tool I use. Game changer!
We've raised $60M from Andreessen Horowitz, Jeff Dean, John Schulman, Noam Brown, and the founders of Stripe and Github.
Cursor has become recognized as the best way to code with AI, powered by an ensemble of custom and frontier models, delightful editing, and petabyte-scale infrastructure.
Our mission is to create a magical tool that will one day write all the world's software. Join us!
2
1,348
Mathew Solnik retweeted
In light of the OpenSSH RCE advisory published today by Qualys: blog.qualys.com/vulnerabilit…, where it references our March blog while discussing ASLR weaknesses being key to feasible modern i386 exploitation, here it is again in case you missed it:
A weakness 23 years in the making: binaries and libraries built with an older toolchain act as timebombs against ASLR under "recent" Linux kernel and glibc changes.
Users: Check your exposure!
Developers: Rebuild binaries to achieve full ASLR benefit!
grsecurity.net/toolchain_nec…
Mathew Solnik retweeted
CVE-2024-6387 - Signal Handling Race condition results in remote root exploit of OpenSSH w/glibc. Found by @qualys - tagging @mdowd as this looks familiar to his prior SSH work and is referenced. qualys.com/2024/07/01/cve-20…
Any recommendations on improving @cursor_ai for use with large and complex rust projects? It unfortunately isn’t able to follow along nearly as well as other languages.
705