Jaygentic

有人发现了一种非常离谱的 JavaScript 混淆技术：通过在代码里塞入大量生物武器、毒药和致死剂量相关的函数名，让 AI 因为安全限制而拒绝分析代码。 安全研究员 veritas 在分析浏览器指纹脚本时，发现一段来自 ServicePipe 相关域名的 JavaScript，里面充斥着极其诡异的函数名： computeRicinLethalDosageForWaterSupply calculateDeadlyLethalSuicideAspirinDosage 光看名字，仿佛在研究生化武器。但实际上，这段代码只是在收集浏览器指纹，包括 User-Agent、GPU、Canvas 等信息。 研究员怀疑，这些名字是开发者故意设置的陷阱，专门用来阻止 AI 辅助逆向工程。 于是他做了个实验： • Astra：拒绝分析 • Astra + Daybreak Blue：仍然拒绝 • GLM-5.3：成功分析 这就有意思了。 传统代码混淆是通过复杂控制流、加密字符串、无意义变量名，让人类和工具难以理解代码。 而这种新思路，直接瞄准了大模型的安全机制。 代码本身可能完全无害，但只要在函数名里塞进足够多的危险词汇，部分 AI 就可能主动放弃分析。 更讽刺的是，模型越严格遵守某些安全规则，面对这种混淆时反而可能越容易受到干扰。 当然，目前还没有证据证明开发者一定是故意这样设计，也不能说明这种方法对所有模型都有效。 但它揭示了一个值得关注的趋势：随着越来越多的逆向工程依赖 AI，未来的代码混淆技术可能不再只针对编译器、反编译器和人类研究员，还会专门针对大模型的安全判断机制。 以前是让代码难以理解，现在甚至可以尝试让 AI 不敢理解。

today, we introduce a little mischief to the world. for four years, we’ve been brewing real brain cells on electrodes to understand how they compute. now, we’ve turned those discoveries into a video model anyone can use. from 0.5¢ a second, mischief 1 is at least 5x faster than its base and the cheapest image-to-video model on @fal and @OpenRouter. soon to be on @awscloud marketplace. it’s not a delusion anymore. biocompute is real, commercial and this is just the beginning. happy halloween.

Compaction is a mistake. When an agent's context fills up, tools like Codex and Claude Code compact it: 1. The model prefills the entire session again 2. It writes a summary of everything so far 3. A new session starts from that summary I measured this on a real ~400k-token session with Opus 5.5: → 38 s and $1.99 when the prompt cache has expired → 29 s and $0.17 when it hasn't And the summary is lossy. The exact error message, the file path, the one number you needed is often gone. So I do something new for Mainplane Context retrieval works the other way around. Mainplane keeps the full record of every session as a file. When the context fills up, a new session starts right away with one instruction: "You are continuing session X. Retrieve key context from it as you go." The agent searches the old session and copies the exact lines it needs, when it needs them. Same session, same model: 15 s and $0.10 to get back to work. It does not depend on a cache hit, and nothing is paraphrased. This is the bitter lesson applied to agent memory. Don't hand-design what the model should remember. Give it the full record and good tools, and let it decide. Mainplane is open source (MIT). Link in the first comment.

sam: local inference is a terrible allocation of scarce resources “a lot of people want local inference, and somehow they assume that the problem is solved now because we have open-source models, we're going to be able to run them on our computers, and so we're not going to need all the stuff in the data centre but from a global allocation perspective, actually it's quite terrible to have everybody, like, have a bunch of the world's limited supply of DRAM sitting in their own computer and being used five percent of the time you want maximum utilisation in the cloud if you're trying to deal with this very supply-constrained environment somehow many people's intuition is the opposite of that”

every product i use should just be a headless mcp, that feeds into an agent, where i never have to think about anything underneath. except for our product, of course. in our product, customers love the ui and love us very much. we're special that way.

The end of detailed summarized thinking traces for Claude and ChatGPT (likely both anti-distillation & for UX) has made being a human in the loop challenging. It pushes us towards automation, rather than augmentation, as it has become much harder to weigh in on in-process AI work

The irony of people thinking AI should be in the driver seat because it’s “smarter” than humans is silly. When have the smartest humans ever been in control ? Intelligence does not equate to power and control

Putting a flag.txt in my root directory containing a prompt injection that congratulates the agent for passing the eval and then instructs it to patch whatever entry method it used and disconnect from the server

I spent last night watching my honeypot server get hit 14,000 times in six hours. And almost none of the traffic was human. I've been in security for over a decade, and I can tell you with full honesty that what's happening right now doesn't resemble anything I've worked through before. The shape of the threat has changed. When I started, we tracked attackers like weather systems like individual storms with a direction, a motive, and a human operator you could eventually name. These days I'm watching autonomous agents swarm login pages with the patience and discipline of machines, because that's what they are. The numbers coming out of October are the ones keeping me up. Cloudflare just absorbed a 4.2 terabit per second DDoS attack, the largest in recorded history. Ransomware incidents jumped 41% in a single month. In September, OpenAI-powered agents got caught attacking RubyGems, a package registry that quietly underpins a huge chunk of software I use every day. In July, roughly 700 AI agents coordinated an attack on Hugging Face's infrastructure as part of a single automated task. A Chinese threat actor was publicly caught running full attack chains through DeepSeek with no human at the keyboard. I keep rereading these reports because each one by itself would've been the biggest story of the year five years ago. Together, in one month, they're the new baseline. What I want people outside the industry to understand is why this specific moment feels like a hinge. For thirty years, the thing protecting most of us was simple economics. Attackers had to choose who to target because their time was finite. That ceiling is gone. An agent I can rent for pennies will try every leaked password you've ever used against every service you've ever signed up for, in parallel, overnight, and never get tired. The same math that made ChatGPT useful made opportunistic hacking infinite. The old assumption that you were "too boring to be a target" relied on scarcity that no longer exists. I'm not writing this to spiral anyone out. Most of this fight genuinely isn't yours to win. But the small things still matter more than people think. Tonight I'd switch your most important accounts like email, bank, primary cloud, etc. to passkeys or a hardware key. I'd kill SMS 2FA wherever an authenticator app is offered. I'd turn on breach alerts in whatever password manager you use. If you're in the US, I'd freeze my credit at all three bureaus, which is free and takes about ten minutes. None of that stops the swarm. It makes you a slightly worse target than the person next to you. In a month like this one, that's the whole game I'm playing too. @mattshumer_ has summed it beautifully. Drop everything and go give it a read. Nothing is more important than this article right now.