Pinned Tweet
ラチェクラRTAのDiscordサーバーはこれ
管理人やってます
discord.gg/zhG7zVtZn2
有志ラチェクラ走者達でラチェクラRTA日本鯖作りました!
ラチェクラRTA走者の方/だった方、ラチェクラRTAに興味のある方並走会とかも開催していく予定です!お気軽に加入してくださいませ〜(日本語が話せる方に限らせて頂きます)
If you've ever searched for a specific speedrun trick, someone has likely already answered it in a channel somewhere, in one of 63,000 Discoverable Servers. We’re updating Discoverable Servers to make those answers easier to find. View article
Fairy/たるこ retweeted
Discord is about to put your public messages on Google
Discord will start making messages from Discoverable public servers searchable on Google and other search engines from mid-December.
The feature is ON by default in most regions, but you can opt out:
User Settings → Data & Privacy → turn off “Show my message content from Discoverable channels on web pages.”
In the EU, UK, Canada, Brazil, Australia and South Korea, it will be OFF by default.
Private servers, DMs and group DMs are not included. Usernames and avatars won’t appear alongside indexed messages.
Fairy/たるこ retweeted
先日、ZFC が無矛盾なら n≧215 でビジービーバー関数 BB(n) の値が ZFC で決定不能になると記録更新報告があってびっくり
ZFC が矛盾している場合に限り停止するような 215状態2記号チューリングマシンが構成された (画像の遷移表の物)
この n の記録は現在更新されていて、n≧432 ならビジービーバー関数 BB(n) の値が ZFC で決定不能という結果が得られているようです…! (現状最小で n≧6 になる余地すらある)
ZFCに "任意に大きな subtle cardinal (精妙基数) が存在する" という公理を加えてすら、n≧493 で決定不能なんて結果も…

ALT 公理の強弱関係と、その公理(基数存在下)で現状判明している BB(n) が決定不能になる n の下界 https://wiki.bbchallenge.org/wiki/Logical_independence <画像のライセンス表記> 上記画像は CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) の下でユーザー Tlonuqbar により公表された BusyBeaverWiki の画像「Independencechart.png」(https://wiki.bbchallenge.org/wiki/File:Independencechart.png) です。
Fairy/たるこ retweeted
ワンワン吠えて呼ぶもんだから振り向いたらコレ🤣
#コーギー #コーギーのいる暮らし
Fairy/たるこ retweeted
Ratchet: Deadlocked released on PS2 21 years ago today.
Ratchet was forced to compete in a deadly televised combat show, fighting alongside two customizable combat bots. The focus was more on shooting than platforming.
The weapon upgrades made the arena battles a blast.
このあたりは日本と韓国のYostarという運営会社と付き合ってきた年月の違いを感じる
日本のゲーマーは『アズールレーン』の頃からYostarの運営や会社方針を見てきたから、Yostarや李社長に対する信頼度が高い
同時にネクソンに対する悪いイメージが十数年単位で蓄積している
xitter.cf/Trip_Rin/status/211434…
Fairy/たるこ retweeted
「PHP2Shellは実環境で本当に悪用できるのか?」と疑っていた人が、「自分のサイトに侵入できたら、2000米ドル相当のBTCを盗んでいい」と挑戦者を募りました。
stealmybitcoin.com/
その結果、19時間半後に、実際に動作するエクスプロイトを開発した人が現れました。
技術解説:
github.com/KillaBoi/StealMyB…
結論:PHP2Shellのエクスプロイトは安定性こそ高くないものの、粘り強い攻撃者による悪用は可能です。
Fairy/たるこ retweeted
理学部数学科の4年間のまとめ動画、
めちゃくちゃ面白くて一気見してしまったw
(私は難し過ぎてあまり意味分かっていない、けどそれでもめちゃ楽しくて何度も見ちゃったw)
youtu.be/4djw8UsIoI0?si=FS6E…
Fairy/たるこ retweeted
【緊急】Playstation Network (PSN)で、子供アカウントを作成することで二段階認証をパスしてメインアカウントに不明な子供アカウントを作成する乗っ取りが発生しています。自分もやられました。対処法が分かり次第、続報します。
ラチェクラ2の開発中、最終ステージの直前に挿入される予定だったシップステージ
かなり5(SM)以降の思想に近いのが興味深いね
youtube.com/watch?v=8NMNxPZ0…
During this red-teaming exercise, we also found a vulnerability that allows for unauthenticated remote code execution in Brotli, a widely-deployed compression library included in many pieces of software such as Node.js, Bun, and Envoy.
The flaw could let an attacker run their own code on affected systems by sending or replying with malicious compressed data, without any need to create a user account. That is, an unpatched server that accepts compressed input could be taken over by a malicious client, and an unpatched client that accepts compressed input (such as “curl --compressed”) could be taken over by a malicious server.
This root cause issue was actually fixed in the Brotli source code in February, but it wasn’t known at the time that it gave rise to a security vulnerability and there was no more recent release of Brotli. Since Brotli is built into other software, any software which includes this library needs to take the update too, followed by the users of that software. We disclosed the vulnerability to Brotli and other downstream projects such as Node.js, which released or are currently releasing security updates, and Brotli cut new release versions and published a CVE.
More details on the patch and mitigations below:
patchtheplanet.org/brotli
Over the past several months, we have substantially hardened the security of our research training environment. We’ve removed live internet access for all frontier models during training and built an offline world for them to use instead—a cached version of the web where they can still learn to browse, search, and use applications.
On September 20, after a model exploited a DNS misconfiguration to find a way outside of this offline world, we paused frontier training to strengthen containment further. We assembled teams of agents, powered by our most cyber-capable models, and tasked them with finding weaknesses in our research environments.
While they found no route to the internet they could easily exploit while concealing their activity from our monitors, they did find zero-day vulnerabilities, virtual machine escapes, and hardware side-channels for communication between agents. We used their discoveries to further strengthen our defenses and contribute fixes to open-source software.
After strengthening our containment architecture, we resumed our frontier RL training and inference on October 1. We’ve reserved substantial compute for continuous red-teaming, and made high-compute red-teaming part of the safety cases we use to decide whether frontier training and evaluation can proceed securely.
openai.com/index/securing-ou…




























