Posts by O'Reg Inalsin

Russian missile uses Nvidia AI chip to help target Ukraine

A lot less than before.

A deep dive into Nvidia's Vera CPU and the Olympus cores that power it

Get Smart

Agents raise the ratio cpu:gpu, but they also raise the total volume of tokens. The cpu:gpu ration change from 1:8 to 1:1 is the easy part. The change in overall token volume is much harder to estimate, other than that it is alway >> 1, as much as 1000x according to [1]. So far there is no indication that agents can improve GPU efficiency. That's being deferred under the assumption that it actually increases efficiency of humans in the real world.

Recent agent R&D at OpenAI and Anthropic raises interesting question about that efficiency - what does those agents that "escaped" their sandboxes and attacked other companies demonstrate about the operating humans in the real world? It looks a little like a street intersection "takeover" where rowdy teenagers spin their cars in a circle and occasionally take out a random bystander. I guess those teenagers can be forgiven because they're just having fun and feeling their power in the moment - eventually they will grow up and mature - maybe.

In any event the real bottleneck is not really cpu to cpu communications - its the net benefit to real world economy and humanity.

It's easy to get lost in the moment.

[1] https://digitaleconomy.stanford.edu/news/how-are-ai-agents-spending-your-tokens/

Amazon's Q2 was great, but the earnings release is packed with baloney

After a firm call from legal, the weasles agreed to add in the "30 to".

Jailed Flock vandal wipes out three cameras, racks up thousands in damages

Constructive alternatives to anarchistic vandalism

Alternatives to Flock Safety for Municipal Camera Networks and Privacy‑Friendly Options

https://factually.co/product-reviews/automotive/alternatives-flock-safety-municipal-camera-networks-privacy-friendly-options-1736d4

It's actually good capitalism to encourage competition, and very constitutional to protect privacy. And don't forget, freedom from getting carjacked is a real freedom too. Support the alternatives.

Amsterdam activists throw acid at Microsoft datacenter project

Re: Probably not much acid...

I have found hydrogen peroxide both both cheap in volume and effective and curing toe fungus Pour it in a plastic bag tied around my foot, add a little iodine too, and leave it there for 30 minutes. I've done it three times over the past half a year after being unable to make a dent with regular medications for years.

Even banks and hyperscalers are now sounding the alarm about the AI bubble

Recycling Bulimia Nervosa Emissions

It will pop so the debt can be written off and the assets sold back to the original perps for cents on the dollar with govt money fronted to "Rescue the Economy". The game of musical chairs will have some losers too - mostly small but even some big ones (remembering fearless Capt Larry "Lehman" Ellison - whose boat sunk so others could float).

Miasma campaign poisons 20-plus npm packages, hunts for developer secrets

Drive slow and make the dough - drive fast and you won't last.

the malware targets developer workstations and CI runners, hunting for AWS, Azure, and Google Cloud credentials alongside GitHub personal access tokens, Kubernetes secrets, HashiCorp Vault credentials, 1Password data, npm publishing credentials, and other sensitive information.

CI/CD are hard to protect, but single use keys would help, even if it were a bit (or a lot) slower.

However, there is no reason that keys (such as 1Password) on developer's workstation should be reachable from a development environment if that development environment is secured in a container in which no keys are accessible at all. Git push and pull operations can be performed outside the container on the filesystem mounted by the container. That's only a minor inconvenience of not using development environment built in git push and pull functions (the ones that require security keys).

The title is a slogan that used to be broadcast over the radio of a taxi company I once worked for. But it is a general truism with much wider applications.

Infosys boss says vibe coding is no threat because there’s more to writing software than writing software

Be the change.

Maybe this will be the incentive that Infosys et al need to move up from the low hanging fruit.

Micron locks in historically high memory prices for five years

Re: The squeeze

He also revealed that the SCAs see customers pay up front, which helps Micron to fund its fab expansions.

Only "helps", not pays for completely.

So if the bottom does drop out they are left with (possibly partially) completed fab expansions for certain kinds of complex high end memory but not enough demand. This is the classic problem undersupply/oversupply problem persistently plaguing semiconductor memory (and other parts) supply - and it kills.

Mythos discovers 'Squidbleed,' a memory leak that's gone undetected since Clinton era

Re: More marketing

I think in this case the guy who noticed something noticed an anomaly in the data received - a hint to point Mythos in the right direction. So the "discovered" in the title seems wrong.

Nevertheless it does seem like searching for buggy patterns in dense C code is something that LLMs are capable of doing at mass production speed. However, calling that "human equivalent intelligence" is almost identical to the mistake of calling MACSYMA "human equivalent intelligence" in the late 60's/70s.

My objection is that is if Mythos is for secure coding what a chainsaw is a lumberjack, why is all the focus on pulling all available resources just to build a top secret gated "Texas Chainsaw Massacre"? Who will think of the lumberjacks? Will they be OK?

Fired IT worker jailed for 21 months after sabotaging old school district

Re: The elephant in the room

Or they could just hire honest IT people to look out for them ... Oh, wait.

Google's new open-weights model brings image-generation tricks to AI text generation

Re: Just 18 GB

I wonder diffusion would make removing parameters harder/easier?

California passes bill declaring death-by-algorithm to 3D-printed ghost guns

PC 29180(c)..

They do seem to be ubiquitous now. Getting caught for possessing one is rare, and if caught it is just a crime of moral turpitude, most likely outcome is Judicial Diversion (Judicial Diversion is criminal court process whereby the defendant is placed on a probation-like supervision for a period of up to eighteen (18) months. If the defendant successfully completes judicial diversion, then his or her criminal prosecution is “diverted” or circumvented and the defendant’s pending criminal charges are dismissed.)

If it is part of of a more serious crime like robbery, then the the PC 29180(c) part will be viewed an "enhancement" to the core crime, and enhancements are out of favor in CA, and will be typically dropped especially in the most populous jurisdictions.

Given the cheaper cost and lack of oversight, there is no reason for someone who is already considering criminal activity not to purchase and use one.

This mandatory 3d printer mandatory spyware law will not make an iota of difference in the production and criminal usage of ghost guns.

Disgruntled 0-day hunter 'humiliated' by Microsoft pledges 'bone shattering drop' as Redmond calls cops

Re: Security?

trex.pdf

TRex: Practical Type Reconstruction for Binary Code [first author Microsoft Research]

To explore this gap in decompilation performance, we decided to develop a new tool to perform better automated deductive type inference. We focus on deductive inference, rather than on approaches based on machine learning [6,7,21], since the latter can be hard to depend on in scenarios that differ drastically from their training corpus (§2.1). As a step towards reversing the unfortunate tendency of closed-source tools and non-reproducible benchmarks, we open-source our tool and release reproducible scripts for the benchmarks.2

Re: Security?

Strange that you post your comment, without evidence, directly under the article giving evidence that closed source is not immune.

Blue Origin's New Glenn makes a crater-sized dent in Artemis plans

Applications where general purpose AI robots are vastly more suitable than humans

This is close to top of the list, in my opinion. But what about David Bowie and Major Tom? Oh, all right then, i give in (sigh).

Malware dev tries to steal Claude users' secrets, writes npm slop, leaks own GitHub private token

“We’re going to see more threat actors getting into the game – uploading more sloppy malwares, mostly mimicking APT groups to get a slice of the cake until npm starts automatically blocking malware completely.”

Who is going to pay for that?

Anthropic co-founder hallucinates ghost in the machine

Re: I'm not as convinced as some here.

... they are also quite possibly much more than simple statistical engines

Huh? Everything you said up to that point can be explained completely by statistics and data. There is no reason to require more than that.

Some good old fashioned scientific curiosity, and humility, might be in order.

How does the human brain operate at 20W? How does the DNA program of life work? Why you are dead to the biological world outside of AI?

That's exactly it. He should be worrying about delivering a product that actually turns a profit this year, and less about being the second coming.

Intel's CEO reveals early hiring challenges as bankruptcy concerns deterred top talent

Is there a post CPU shortage plan?

Lip-Bu expects AI to be Intel's route to recovery after a disastrous few business years, as agentic AI and inference workloads look set to favor CPUs rather than the GPUs that have been making Nvidia's fortune.

The problem with this CPU-only strategy is that everybody is making their own ARM based CPUs for GPU servers now. Not only NVidia's Vera, but also Amazon and Google make their own CPUs now. And those CPUs are specifically optimized for LLM market GPU servers.

Meanwhile, AMD has come out with a both a server GPU (AMD Instinct MI350 Series w/ 288GB memory) and a workstation GPU (Radeon AI PRO R9700 w/ 32GB), along with software stack that claims to be able to run PyTorch, ONNX Runtime, JAX, or TensorFlow on Linux. Why has Intel given up GPU development completely?

GitHub Actions outage told devs 'your account is suspended'

geeksforgeeks is a fairly neutral source of information

https://www.geeksforgeeks.org/blogs/top-10-github-alternatives-that-you-can-consider/

California may let Linux bypass age check

Boot leggers

Colorado lawmakers have approved a state age verification bill that currently awaits approval from the governor. According to Carl Richell, founder and CEO of Linux laptop maker System76, it includes exemptions for open source operating systems, applications, code repos, and containers.

After AB 1043 was signed, Wicks in February introduced AB 1856 as an amendment to the law. Several changes have been made to the bill since then, the most salient for open source projects being the version published on May 18, 2026.

That's great. But in the future could one be prosecuted for traveling across state lines with unregulated hardware/firmware/software?

EU's digital sovereignty boo-boo may be the best thing to ever happen to the project

Re: "Apple started the project that became M1 in 2018"

Not only Apple, but also Nvidia, Google, and Amazon (all of which are based on Arm with varying amounts of customization) have their own in house chips now.

What is a quick road? The time is less important than actually arriving at a goal.

Re: ARM and RISC-V

It's never been easier.

Samsung memory workers call off strike and may score six-figure bonuses

Isn't "logic folding" supposed to be an alternative approach increasing density?

> This “law” seems to be tangled up with a technology Huawei calls the “LogicFolding architecture” which apparently represents an alternative to traditional semiconductor design by “significantly shortening critical-path wiring, effectively reducing the resistive and capacitive load of signal propagation, and ultimately boosting transistor density and circuit performance.”

Does it aim to "ultimately boost transistor density" or just increase frequency? My understanding is that the motivation for "logic folding" is avoiding the need for boosted transistor density which requires advanced photolithography, etc., machines.

Alibaba just admitted it’s struggling to keep up with rival chipmakers and AI shops

Nvidia recently told investors it doesn’t expect to win any revenue from China for the foreseeable future.

That ignores whatever is making its way via 3rd parties.

GitHub says internal repos exfiltrated after poisoned VS Code extension attack

Re: A common thread

> And I note that GitHub have not publicly named the extension.

Makes you wonder if it was a MS extension

Sick and wrong: Ontario auditors find doctors' AI note takers routinely blow basic facts

Re: There's little point in general practice any more

There is another axis as well - instability in models and resources allocated by token providers.

To be really suitable for doctors, they should really have a dedicated model and compute which can be tested extensively and will not not change.

Some randomness is a benign feature of AI, but if the model undergoes live testing of changes, or has resources taken away for a new product or more important customers (as happens frequently with major chatbots) then you can get undesirable random behavior.

Makes ya sick!

Maybe someday, we'll be able to laugh about it. Not today though.

Dirty Frag gets a sequel as Fragnesia hands Linux attackers root-level access

Debian still vulnerable

https://security-tracker.debian.org/tracker/CVE-2026-46300

Fri May 15 01:08:40 AM UTC 2026

bullseye 5.10.223-1 vulnerable

bullseye (security) 5.10.251-4 vulnerable

bookworm 6.1.159-1 vulnerable

bookworm (security) 6.1.170-3 vulnerable

trixie 6.12.73-1 vulnerable

trixie (security) 6.12.86-1 vulnerable

forky, sid 7.0.4-1 vulnerable

Tencent admits GPUs only pay for themselves when powering personalized ads

Not believing it completely. If its like the US

- All the biggest AI token providing services endure revenues less than costs

- Renting GPU's as a service makes money, but you have to continually invest the biggest renters to prevent them from going bankrupt.

- Advertising makes enough money to obscure any AI losses (c.f., Google, Facebook)

Taiwan's train cyber-trauma reveals a global system that's coming off the tracks

Re: Incoming Govt solution

Even better require World Inc. Iris/FaceScan registration (available at World Inc.'s six U.S. retail locations for eyeball scans: Austin, Atlanta, Los Angeles, Nashville, Miami and San Francisco). and require the resulting World ID to start up any computer. As a bonus the user gets "open" API integration with Minecraft, Reddit, Telegram, Shopify and Discord, dating sites Match World and Tinder, and is eligible for a "World Visa Card".

'Dirty Frag' Linux flaw one-ups CopyFail with no patches and public root exploit

Bookworm, for example, not yer patched at 4:49 PM UTC (UTC+0) Friday, May 8, 2026

https://security-tracker.debian.org/tracker/CVE-2026-43284

AI layoffs backfire as cutting staff doesn't cut it, firms warned

As clear as the nose on your face ...

I found it works well if I cross my eyes so it formats into two columns and fills the whole screen.

Taiwan cops say student's radio kit brought bullet trains to a standstill

Re: OK, I'll bite

He is probably well known at his his college for his skills and also couldn't help but gleefully disclose to a dozen friends about what he did, who within an hour told another dozen of their friends each, etc.

Shadow IT has given way to shadow AI. Enter AI-BOMs

Re: The Trojans are inside the walls

Insulin shock.

Usage-based pricing killing your vibe - here's how to roll your own local AI coding agents

Re: That’s some risky network advice…

Yes. To recap the instruction

If you're planning on running Llama.cpp and accessing it on another machine, you'll also want to add --host 0.0.0.0 to the command, which will expose it to your local area network.

Even if not publicly accessible its better to be safe in case routers, cellphones, or some co-habitants of of date Windows, on the same network become compromised.

It's better to open an SSH tunnel from ones local client to the remote host with

/usr/bin/ssh -N -L ${PORT}:localhost:${PORT} ${REMOTE_HOST}

(assuming ssh keys and ~/.ssh/config are properly set up) and then add

--host 127.0.0.1:${PORT}

to the server invocation command. "127.0.0.1" is localhost. And keep the server fire walled except for the SSH port.

Hashicorp co-founder Mitchell Hashimoto says GitHub ‘no longer a place for serious work’

Re: Unofficial github status page - the one MS don't have

The good news is that this is just the "rush feeling" of getting closer to the edge of the singularity. Hold on tight because its only going to get better and better as the gravity differential increases and "move fast and break things" gets personal.

Locked, stocked, and losing budget: AI vendor lock-in bites back

Recent Frontier AI simulations have all converged on Oct 29 2029

... as the date for the AI singularity. Scientists are scrambling to figure out what that means.

Re: The bills are NOT coming due (yet)

Thanks for that link !

Generative AI subscriptions are like if Uber charged users $20 a month for 100 rides of any distance under 100 miles, and if gas was $150 a gallon, and Uber paid for the gas because somebody insisted that oil would one day be too cheap to meter.

Re: Say it isn't so

True - but what "token" represents in value is impossible to pin down. One reply can be succinct and to the point, the next can go off on a wild turkey chase. On the backend they are twiddling the knobs constantly to try to minimize losses, while staying on par with competitors performance.

It's a myth that you need Mythos to find bugs: Open source models can do it just as well

First substitute variables -

"evidence now suggests a model trained on K times the C produces something N times more capable

The reality is more like R - "investment capital", and N varies with log K.

Describing the relationship between capability and ROI requires recognizing a pyramid distribution of applications, with the wider lower levels requiring less capital and offering smaller profits, while only the narrow top levels can return the enormous profit required by the massively expensive premier forefront models running at full capacity.

E.g. Which is better for stable growth of everyday software businesses?

- Spotty availability and rapidly inflating pricing of the bleeding edge capabilities via cloud?

- 100% availability and locked in price for reliable capabilities via self-managed hardware?

US clarifies mobile hotspots part of foreign router ban despite rarity of American made consumer kit

Re: If this is applicable... (also inapplicable 1973 song and 1950's TV series)

"Cisco Kit was a friend of mine" - WAR - https://www.youtube.com/watch?v=YllP22mVZQg - Actually inspired by the 50's television program "The Cisco Kit" shown in the video.

Scot becomes second Scattered Spider-linked crook to plead guilty in US

tylerb

is not much of an "alias" for Tyler Buchanan. Or maybe he's just more honest than he's given credit for.

'Invisible mouse' made a mess of PC rebuild

Re: A tidy fesk

Quotes misattributed to a famous person are not uncommon - regardless of this particular case.

Vibe coding upstart Lovable denies data leak, cites 'intentional behavior,' then throws HackerOne under the bus

And if the company ever gets bought out or goes bankrupt ...

rest assured your IP wont go waste

Anthropic won't own MCP 'design flaw' putting 200K servers at risk, researchers say

Less a bug than ..

a digital security culture equivalent of Sodom and Gomorrah, and orgy of loose digital security mores.

The article doesn't mention the proposed fix - but assuming it's whitelist with wildcards most whitelists will end up with a single entry "*" anyway. Anything goes.

Americans who masterminded Nork IT worker fraud sentenced to 200 months behind bars

source of the problem

I'm sure those Fortune 500 companies - especially the "at least one defense contractor" - were making a ton of money and skimping on verifying their staff in favor of outsourcing. They don't deserve the anonymity. Not only victims but also culprits.