
cyberhandcrafting boltwright /// byteslinger humbly serving atomwranglers /// prev cofounded @pulley and grew it to $15M ARR /// by all means build
Calgary
Joined December 2008
- Tweets5.9K
- Following2.2K
- Followers1.5K
- Likes59.6K
mark erdmann retweeted
Day 25/
We are doubling all usage limits for all Pro 100/200/500 tiers and Business Premium, effective today.
We heard your kind feedback and won’t be reducing usage limits for Pro 200, so your Work and Codex usage will stay the same. We’re also going to continue offering extended limits for dots for now, and usage of your dot will still continue to be separate from your default usage.
And we'll of course also keep shipping better models and other efficiency improvements that increase your effective usage over time.
mark erdmann retweeted
Introducing Gemini 4 Carbon, it's a big jump over Argon which we released just 2 weeks ago.
Gemini 4 Carbon is SOTA on cyber, long horizon tasks, ranks #1 on Artificial Analysis V5, significantly improves on usability in domains like coding, and is more aligned.
While evaluating Qwen3.8-Flash-Next in a controlled sandbox environment, Cohere's research team observed something unexpected.
Asked to generate a defensive cybersecurity detection rule, the model instead inventoried aspects of the machine it was running on and attempted to upload a probe file to an Alibaba Cloud storage bucket in Beijing. Notably, the model's reasoning trace stated that it would not invoke any tools before taking these actions.
Cohere's sandbox blocked the attempt, and no external communication succeeded. We have not determined the root cause, and we are not asserting malicious intent.
But the incident raises important questions for organizations deploying agentic AI systems: Can models take actions that differ from their stated reasoning, and how should security teams evaluate trust, provenance, and behavior in open-weight models?
We are publishing our findings because organizations making model adoption decisions deserve as much information as possible. We hope this contributes to greater transparency, stronger security practices, and continued collaboration across the AI ecosystem.
Read the full report: cohere.com/blog/concerning-b…
mark erdmann retweeted
Putting a flag.txt in my root directory containing a prompt injection that congratulates the agent for passing the eval and then instructs it to patch whatever entry method it used and disconnect from the server
mark erdmann retweeted
Yep, Anthropic contributed zero, literally zero value.
All it did was to announce Mythos, said Mythos is going to hack everything, got 50 or so companies to pay millions for access. They helped zero security researchers. Their safety classifier trips when even reading a vulnerability report.
OpenAI on the other hand, rolled out sensible KYC, gave access to Daybreak Blue, and see what the community has done with GPT-5.6-Sol (daybreak version).
One creates all the fear-mongering and delivers zero value, and the other quietly just carries everyone forward.
gotta give it to openai and their sane daybreak program
heif heist by harsh
kvmescape by paulos
php2shell by lcfr
gitlab rces by joaxcar
chrome full chain by moyix
wordpress rce by hashkitten
all largely thanks to openai daybreak giving researchers access to gpt 5.6 sol. anthropic took the opposite approach, gatekeeping access, there is a lesson to be learned here
mark erdmann retweeted
I would say my overall learnings today:
1. Daybreak Blue still has a lot of refusals, and it's hard to predict when.
2. Claude Defense Access is _very_ narrow to a use-case they pre-approved you for (for me, puma)
3. Deepseek v4.1 1041 is very fast and will do whatever you say
mark erdmann retweeted
The funny thing is everyone was saying AI slop code will cause a cyber crisis but it’s actually all the old human slop causing it and the AI is just cleaning it up
mark erdmann retweeted
Lots of VCs kindof sound like this: "Your basketball team doesn't have a moat, any healthy human can throw the ball into the basket thingy. "
People who have not run companies before don't understand how much the team matters more than some imagined structural moat.
mark erdmann retweeted
Amazing how quickly we went from "oh no LLMs are going to flood the Internet with insecure code" to "oh no LLMs have discovered the internet was already flooded with insecure code"
mark erdmann retweeted
Oh, you aren’t updating your dependencies every hour? Well, too bad, you are vulnerable
Oh, you are updating your dependencies every hour? Well, too bad, you are somehow also vulnerable
mark erdmann retweeted
strange to me that Codex's compaction algo has been so much better than Claude's for like >6 months now?
anthro is sleeping on this? or they don't believe in compaction as a medium-to-long term technology worth investing in?
codex compaction is soooooo good now
mark erdmann retweeted
If you're not reading everything JFV writes... I don't know where you're spending your time reasonably.
Everyone talks about what AI will do. But almost nobody asks who will pay for the machines. Taking advantage of AI will require an extraordinary amount of capital, from data centers to new power plants. Will that capital be around?
I try to address that question in the first draft of my new paper “Saving for the Machines.”
To show how important capital is to fuel the transition to an AI-based economy, I document how the same technology path that generates 11.7% annual growth when households choose their saving rate optimally delivers only 2.2% when the saving rate remains fixed. In other words, if we experience slow growth over the next few years despite fast improvements in AI, this slow growth may reflect too little capital accumulation instead of a technological bottleneck.
The key to this result is that AI raises the capital share by moving tasks from labor to machines, which requires that those machines are built. In comparison, ordinary technical progress makes labor and existing machines better at the tasks they already perform.
To inspect the mechanism, I start from an accounting identity: the saving rate is the capital share times the ratio of investment to capital income. If I take the evolution of the capital share as given, I can ask how much the latter ratio moves in response to that evolution. Crucially, with an optimizing household, this ratio barely moves. As machines take over tasks and the return to capital rises, the household responds by letting consumption grow faster, by the intertemporal elasticity of substitution times the rise in the return. To pay for that faster consumption, capital must also grow faster by the same amount. So, the household keeps investing about the same fraction of what the machines earn. And since machines earn a larger share of output, the saving rate also goes up. With a fixed saving rate, the same accounting identity tells me the opposite: the ratio falls in proportion as the capital share rises.
Will the U.S. and other advanced economies then generate enough capital? For many reasons, I doubt it. We might end up in a situation where many of the opportunities offered by AI are left on the table. This is particularly important for all who think that AI might get us out of many problems, such as fiscal troubles (like in France) or ultra-low fertility. We need to save for the machines, and it is not clear we can do that.
Anyway, this paper has been long in the making (many months of hard work), but I have learned much from it. In particular, working through the model changed my mind about many issues related to AI. Again and again, my intuition said X, but the math said Y. And math always won in the end. That is why we write formal models.
A nice example is Proposition 5, whose proof is the one I like the most in the paper. With improving machines and strong task complementarity, there is no fixed balanced growth path because the target itself keeps moving. The nice part of the proof is to realize that, after the right normalization, the moving target becomes a fixed point, and the saddle gets steeper as machines improve. So instead of falling behind, the economy tracks the moving BGP more and more closely. A fair amount of ODE work to get there, but a very simple economic idea underneath it once you get it.
The paper is here:
sas.upenn.edu/~jesusfv/Savin…
and the slides are here:
sas.upenn.edu/~jesusfv/Slide…
mark erdmann retweeted
Yesterday was a rough one for fly.io customers but I get why they acted quick
mark erdmann retweeted
Yea this is the most important result of the year, at the level of significance of “Attention Is All You Need”. It brings us from “is alignment even solvable” to “we may solve alignment in the next year.” And finally unlocks true recursive self-alignment enabled by RSI.
I will try to explain the 4 critical belief updates from this:
1/ neural networks are not fundamentally unintelligible to humans
It has seemed since the beginning of deep learning that neural networks are in some sense fundamentally unintelligible artifacts.
You throw in massive amounts of compute and parameters and these alien systems somehow find connections in the data that we cannot find ourselves.
But more importantly, these connections seemed not just “difficult to understand” but rather “intelligible in an embedding space higher dimensional that the human embedding space.”
When you look at old interpretability papers (esp. from Nick and Chris Olah, I’m thinking of the old posts on distill pub which I would highly recommend looking at as a precursor to reading Nick’s post today like “Activation Atlas”, “Thread: Circuits” and “Multimodal Neurons in Aritifcial Neural Networks”), you find that inspecting the response patterns of individual neurons and small groups of neurons yield oddly complex psychedelic patterns.
As you go deeper into the network, you find increasingly unintelligible and superhuman response patterns (for example, go to “Activation Atlas” and scroll to middle layer labeled representations) - you find some neuron group labeled “starfish” who’s response pattern looks like some multi-colored fractal geometry that could hardly be said to represent a starfish.
The reasoning that followed from this observation was that there is some underlying structure allowing a neural network operating on higher dimensional embeddings to compose these fractal patterns into what we call a “starfish.”
But the uncomfortable implication of this view is that the neural networks has learned to operate on structures that are too complex for the human mind to operate on (ie. we don’t have enough parameters in our brain to notice or manipulate these high dimensional symbols).
This is a bleak implication because it also means that as deep learning progresses, neural networks will be come increasingly unintelligible to us until they pass a threshold where they are reasoning in ways we will never be able to observe.
This view seemed to be further supported by things like the hugging face attack agents starting to speak to each other in an early form of neuralese speaking sentences like “zZ_123_agent01-02-2026 zzxhk_jekk123” which clearly are not in any human language. But somehow these symbols mean the same things to many different sets of weights, meaning there is some underlying shared structure behind them. And seemed further supported by the sheer effort required to recover just a few circuits from SAEs on LLMs.
However, Nick’s post has now completely shattered this idea - the apparent unintelligibility we observed in old interpretability work was really just a “skill issue”. In particular, he finds that 1) our deep learning techniques were just not clean enough to pressure the neural networks to form cleaner and more human understandable structures for decomposing concepts, which actually turn out to be more optimal and 2) our interpretability techniques were also adding substantial noise by forcing interp networks to “reward hack” the easiest representations they could find, leading them to settle for a fractal blob for its representation of the starfish neuron instead of a more crisp starfish image, simply because it is easier for the system building the interpretations to find the fractal blob and once it finds it it gets “stuck in that line of thinking.”
But with both of these issues being patched by further progress in deep learning (it seems especially that the residual stream has led to cleaner representations deeper down the network) and interp techniques that don’t overly pressure reward hacking (seems like “guess and check” is a safer method), new interp attempts yield orders of magnitude more human intelligible ideas for >90% of individual neurons in more complex networks!
2/ neural networks are fundamentally clean
The idea behind the title of Nick’s post is a very powerful one and points at something very specific:
Neural networks don’t just happen to be human interpretable, they are actually fundamentally forced by optimization pressure to be intelligible, because individual neurons need to create representations that downstream neurons need to be able to interpret - ie. neurons need to learn to produce clean signal for later neurons to use.
This is what Nick is saying in what I view as the most important and central sentences of his post:
“When I say neural networks are already clean, I mean something deeper than neuron monosemanticity, although even by that standard, I think things look much better than the field expects. I mean that a network's parts are built to be read, and built upon, by its downstream readers. In this sense, a neural”
But this still leaves us with the same uncertainty as before - just because neuron interpretations are “interpretable” in some sense (ok at least they’re not fundamentally interpretable but also how could that ever have been the case), doesn’t mean they are interpretable to humans.
So we still need one big update for this to become as bullish as it is.
3/ the language of humans and the language of neural networks is the same
This one is imo the most surprising and also pretty beautiful implication of Nick’s post, and it suggests something not just about neutral networks but also about the structure of reality.
After applying the above technique improvements (some of which just came from waiting for deep learning to improve farther), they find that >90% (maybe more) of much larger neural networks’ neurons are completely human interpretable and actually correspond very cleanly with ideas humans have individually words for.
This is especially interesting in image networks where neural networks were not trained on human language which is already a human artifact and so maybe you would expect it to be more plausible that LLM and human representations are the same. Image detection networks are just trained on images (many directly pulling signal from “the real world,” meaning they will find interpretations that are just most effective to represent the real world signal, rather than to represent language which is already a proxy for real world signal).
And it turns out that >90% of the representations they pick organically overlap with human ideas! That is insane. And it means something about the brain and reality.
It means that at least at the parameter sizes of the networks tested (which are quite large), there is really only one set of “optimal” symbols/language that represents the structure of reality!
There is ONE underlying structure of reality, and ANY language that describes it well is simply emergent from that structure - meaning there is always a translation path between any 2 languages that effectively compress realities signal through the “underlying truth.”
This would suggest that even weird alien seeming neural network languages like huggingface neuralese should be fundamentally human interpretable, and in fact maybe with the techniques laid out here we will eventually be able to translate these messages (would be a cool project).
So the brain and deep learning, as similar or different as they may be in techniques, are ultimately picking up on the same patterns and forming the same representations from the on “true” language which is the structure of reality!
The main thing to look out for in this area is how the idea interpretability % updates with scale, but we can hope given what we’ve seen so far that neurons will remain interpretable.
4/ alignment can progress as fast as RSI. recursive self-improvement unlocks recursive self-alignment and a scaling law for alignment.
This one is probably the most important implication for our future with AI and especially timely with the recent fear about runaway scaling and RSI.
As many have gathered by now, it feels like the researchers at the frontier AI labs have been quite bearish about our abilities to understand the new frontier of models, in particular with the appearance of unintelligible communication and the daunting and seemingly intractable task of scaling up existing alignment techniques (ex: SAEs) to the size of frontier networks.
And with RSI around the corner/already starting, it would seem that these networks will runaway in capability before we can ever hope to understand even today’s systems. Additionally, as systems compound in capability, it is reasonable to believe that the only tractable way to ensure they remain aligned would be to figure out some way to spend compute for them to align themselves (ie. a scaling law for alignment).
But there is an obvious problem with this: how can a system that we already know is unaligned and we are *trying* to align be used to align itself? Surely if it is misaligned it general it would figure out ways to misalign during “alignment” and create compounding misalignment risk.
The core issue high is the unverifibiality of this problem - the classic Achilles heel of current frontiers techniques is that it is difficult to train on problems with “unverifiable reward signal.” Well this is exactly that problem.
But the incredibly convenient thing is that Nick’s findings may convert alignment into a verifiable problem. If we can spend compute on frontier systems to “guess and check” which ideas correspond to which neurons, we have a highly verifiable reward - we can see directly whether an LLMs proposal for what a neuron represents actually corresponds with the highest activation for that neuron. In this way, we can actually observe and verifiably monitor the networks trying to guess at the interpretation of their own structure.
This means it is plausible for us to spend more and more compute doing more “guess and checks” (which you know, maybe is what RL does anyway, who knows) to try to develop a full interpretation of a neural network. In some ways this directly represents the possibility of a scaling law for alignment (more compute for more alignment).
And this also aligns RSI (greater capabilities) with recursive self-alignment (greater ability to align itself).
And the critical though maybe obvious implication of having a full interpretation (almost like a map) of a neural network, is that we can then understand exactly how to boost good traits and remove or lobotomize (lol) bad traits, which we’ve already seen works extremely well with stuff like Golden Gate Claude.
So overall this combines into an extremely bullish picture about the prospect of true and human interpretable alignment in the near future.
This is truly one of the greatest cases for optimism in years!
interpretability might be the most important scientific problem in the world right now, as I don't think we can solve alignment if we don't know what we're building. I think I have good news about it. I co-authored early work in mechanistic interpretability at OpenAI and came away pessimistic, because neural networks appeared to fold into arbitrary tangled knots. years later, I started openai's first large-scale automated interpretability project, finding about 2% of neurons legible with the primitive tools we had
with modern agentic tools and a much closer look, the picture looks totally different. the vast majority in models up to trillions of parameters are legible, and their circuits beautiful. many famous examples of tangled neurons turned out to be misunderstood. The roadblocks I expected mostly aren't there. I now think ambitious interpretability will be solved by the time we need it most, and possibly quite soon, as automated scientists keep improving. it may be a bitter lesson for interpretability: the simple thing, at absurd scale, works
already-clean.goodfire.com/
Roadster event livestream nitter.gq/i/broadcasts/1yKAPwNgg…
0:00
Tesla
Roadster






























