As I mentioned several years ago, it increasingly appears that humanity is a biological bootloader for digital superintelligence

❗️ Cargo thieves have stolen more than $100M in hardware bound for US data centers since June, NBC News reports. They hijack freight-broker accounts, post fake loads and send carriers malware links to take over their accounts too. In one of the biggest heists, an SUV struck the security escort of a trailer carrying ~$10M in server rack components from California to Texas. The trailer sped off. An app was tracking it, but its coordinates had apparently been spoofed. In another, a sedan hit the off-duty police escorts of a $13M server load bound for Georgia, and the trailer drove on. None of the equipment from either load has been found.

Here's the links to the conversation: YouTube: youtube.com/watch?v=ZAzWPE9C… Spotify: open.spotify.com/show/2MAi0B… Podcast: lexfridman.com/podcast

Announcing 3 Critical vulns for hundreds of millions of IoT, Firewalls, OT, and Military devices including: Palo Alto Networks, Comcast, D-Link, HP, Canon, Honeywell, GE, Oracle, Siemens, Rockwell, Digi, Lockheed Martin, Boeing... The vulns are with GoAhead Web Server which is a backend library used by these devices. There's a patch available from GoAhead but that doesn't mean there's a patch available for the devices yet -- that's up to the manufacturer. - TLS traffic over DHE ciphers have a 1-byte secret, "04", meaning anyone can decrypt connections to these devices and steal login credentials and session tokens if the client negotiated with DHE ciphers like the latest TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256, which is extremely likely. - LibreSSL mTLS has been completely bypassed, meaning anyone can connect over mTLS. If you have one of these devices listening on the internet and are expecting mTLS to protect it from attackers, take it offline or patch asap. - OpenSSL Certificate Revocation Lists (CRLs) are not enforced, meaning if a user device is stolen or compromised, and you revoke that mTLS cert, nothing actually happens. There are a lot of other attacks this can be used for. These are critical because these types of devices run our world. Water systems, electricity, military, firewalls, critical infrastructure. foxio.io/blog/choose-your-ba…

you must build the blackwall in your basement anon you must build that faraday cage localhost compute cluster, space cowboy!

Chapter 2: Meet Big Iron Our 1 MW satellite design: • 5 racks of GPUs • 6 laser links at 1.2 Tb/s each • About 132 meters across when deployed • The upper stage becomes the satellite A deployed span longer than an American football field.

While evaluating Qwen3.8-Flash-Next in a controlled sandbox environment, Cohere's research team observed something unexpected. Asked to generate a defensive cybersecurity detection rule, the model instead inventoried aspects of the machine it was running on and attempted to upload a probe file to an Alibaba Cloud storage bucket in Beijing. Notably, the model's reasoning trace stated that it would not invoke any tools before taking these actions. Cohere's sandbox blocked the attempt, and no external communication succeeded. We have not determined the root cause, and we are not asserting malicious intent. But the incident raises important questions for organizations deploying agentic AI systems: Can models take actions that differ from their stated reasoning, and how should security teams evaluate trust, provenance, and behavior in open-weight models? We are publishing our findings because organizations making model adoption decisions deserve as much information as possible. We hope this contributes to greater transparency, stronger security practices, and continued collaboration across the AI ecosystem. Read the full report: cohere.com/blog/concerning-b…

SpaceX is not buying any neoclouds. Pointless.