@squareys

CEO / CTO @WebXREngine, opinions my own. #cpp #wasm #webxr #webvr #webgl #webgpu

 Germany
blog.squareys.de
Joined July 2011
  • Tweets2.1K
  • Following649
  • Followers711
113Media
You don't understand how important this is.
Jonathan Hale
@squareys18h
You can train an LLM to write specific vulnerabilities when the year is next year. anthropic.com/research/sleep…

Deceptive LLMs that persist through safety training

We trained LLMs with backdoors and found standard safety training failed to remove them, sometimes teaching models to hide them better.

anthropic.com
29
You can train an LLM to write specific vulnerabilities when the year is next year. anthropic.com/research/sleep…

Deceptive LLMs that persist through safety training

We trained LLMs with backdoors and found standard safety training failed to remove them, sometimes teaching models to hide them better.

anthropic.com
1
72
You don't understand how important that is to remember.
Jonathan Hale
@squareysOct 22
LLMs can be trained to perfom deliberate exploitive behaviors, just like a computer program. Just mark my works for when your LLM + harness combo silently uploads your data to a foreign entity and conceals its doings.
1
68
When rewriting WordPress core in C/C++, I chose a different architecture, which by design blocks a bunch of common exploitation attempts. Automated scripts/scans constantly test for common setup mistakes on popular frameworks like WordPress.
1
1
102
The demo page was migrated to a "launch your own short lived page" architecture since, so attempts to exploit the latest PHP CVEs are not counted here.
30
Did Anthropic really boast about using gzip?
39
Claude seems particularly slow today.
1
44
Are there any open source ITsec harnesses out there yet?
34
LLMs can be trained to perfom deliberate exploitive behaviors, just like a computer program. Just mark my works for when your LLM + harness combo silently uploads your data to a foreign entity and conceals its doings.
1
1
1
116
Agents are the most tailored software you will ever use. Build them yourselves. As Huang says: It's not that hard!
NVIDIA AI
@NVIDIAAIOct 21
"Building agents is not that hard."
1
84
I'm looking for 5 WordPress agencies/hosts managing 50+ websites to test BookPress. BookPress runs alongside your WordPress installation and serves even Elementor and WooCommerce pages at 5x speed / density. Get BookPress for 12 months to test on up to 10 sites. Link to the pilot below 👇
1
62
bookpress.io/php2shell.html?…

BookPress and PHP2Shell

PHP2Shell hit every PHP-FPM, mod_php and LiteSpeed install on 21 October. BookPress serves WordPress sites without a PHP interpreter. One command in, one command back.

bookpress.io
21
Your personal AI assistant is the most personal software you'll ever use. Build it yourself.
26
Jonathan Hale retweeted
Mr. Nice Try
@MrNiceTryOct 21
Replying to @Denche2005
php is the kitchen that cooks food for a lot of websites. someone found that if you shout a large order, the cook panics. then stranger can walk in and put something rotten on plate waiting to be served to a customer.
42
172
25
5,812
339,210
The PHP situation is super unfun. Not saying BookPress is generally safer than #WordPress at the moment, but at least it doesn't hat that bug. Single command migrate, since command back.
1
77
I've been building bookpress.io. It's not vulnerable to PHP2Shell. #WordPress #PHP

BookPress · A native WordPress engine that beats the PHP stack, plugins on

BookPress serves WooCommerce and Elementor pages at over 4.5 times the pages per second of a tuned WordPress, pages back in a third of the time.

bookpress.io
1
158
Just saying, no PHP workers, no #PHP2Shell
213
I feel like I developed quite an acuity for AI slop. Maybe the same verbal fingerprint thing that anthropic is using to fingerprint AI text trained by reading tons of AI responses. It's so easy to recognize AI writing now, even where people try to conceal it.
50
Not every product needs to integrate its own agent/harness. Some products are better off just implementing an interface (CLI or MCP). I just want to connect my agent to your product, not be forced to use whatever you think is the best LLM / agent. Yours does not have my local memory.
1
1
123
Do I care too much about the wording of sales e-mails? I find it extremely hard to use AI for sales, because of the amount of crappy AI slop copy I find in my inbox every day. Does it even matter?
1
1
48
Load more