2,254 karma · joined March 26, 2015
Built Tunnelmole, the open source tunneling tool with similar capabilities to ngrok: https://tunnelmole.com
Feature flags are meant to be temporary.
Likely intended to promote the less secure devices and get them in the hands of those the state would like to target. If it were actually limited to drug traffickers, dangerous criminals and terrorists I'd have much less of an issue with it.
But there are several groups that will likely be targets that should not be. Catalonian independence activists (spain), Abortion/reproductive rights activitsts (US), Palestinian advocacy groups, depending on how the politics in each of these countries goes, LGBT and especially trans activists could be targeted also...
If a transaction is above that amount, you get alerts by email, SMS, push notification...
If it's expected you let it go though. If not, you take out the key, then reverse it.
Of course legit recipients would wait until the delay period is over before considering the transaction to be complete.
No worries if an attacker steals the key. Why would they reverse their own transaction?
Otherwise everywhere would have patched already with AI.
Better general security yes, but the incentive to hack them is quite large and now more hackers have the ability to pull it off.
Same with any purpose built wallet you didn't make yourself: https://www.forbes.com/sites/digital-assets/2026/10/23/ledge...
Its not creating bioweapons, but has code obfuscation that makes it look to an LLM like it is, to resist LLM reverse engineering of its code by triggering refusals. It even has Tienanmen square references to trip over the chinese models.
The servers I've joined typically have a lobby where you land right after joiming, and you need an admin to approve you before you get access to the actual channels
But if you're doing anything where your AI agent might get exposed to a prompt injection attack, you might prefer it to do a refusal in that case.
Removing them won't improve things as much as you might think.
The housing crisis is a supply and demand problem so they've got to increase housing supply.
The problem there is these is a shortage of construction workers. So the workforce simply isn't there to build more houses. Current construction workforce is 110% maxxed out.
I reckon they should be handing out visas to qualified construction workers left and right to solve that problem, then get the homes built. Dubai and Singapore do this and have no such shortage of construction workers. I can't see why we can't do the same.
Removing international students will also have big flow on negative effects for the rest of the economy.
Until the apocalypse arrives that is.
Someone does the exploit, then the creator of this service logs it and uses that exploit to go after higher value targets...
With projects like REA, it's going to get harder and harder for companies to get away with things like this.
I'd love to see the major social media apps reverse engineered and analyzed in this way. I can only imagine the dodgy practices that'll be found if this happens.
That would have been interesting to watch, which model gets the highest score.
https://nodejs.org/en/blog/vulnerability/october-2026-securi...
I'm also less afraid to make promising but risky changes. I have "broken" my machines multiple times, but each time this happens, I just boot back into the previous working iteration, with no real interruption to my work (or fun, depending on what that machine was for).
I can do things like try out new bleeding edge kernels and GPU drivers, important system libraries etc... getting the benefit of these things basically risk free.
There is also one server running NixOS serving up part of what runs Tunnelmole in production.
Initially LLMs were not good at writing Nix, but now they're much better and a good coding agent can do a write/build loop until their config works.
That is the road to hell. Even if your higher ups think it isn't, this strategy will for sure blow up in their faces soon.
I predict that Meta is soon going to be going on a hiring spree to fix all of the issues this strategy is going to create.
We saw this with the Bitcoin wallets recently, with hidden 5g modems being added in a supply chain attack. The payoff in this case for the attackers was large enough to motivate them go to such extreme lengths.
Interfering with a democratic countries elections is a pretty big incentive for across like Russia. They also have the resources to do it.
Given whom did this attack, I would not be surprised if it was used as intel for strikes on journalists.
There are reliable sources from inside the Israeli Intelligence apparatus that have stated on record that decisions were made to sacrifice 500+ innocent civilians to carry out a strike on one human target. I bet such a strike would be more likely if spyware indicated that one of the innocents was an "enemy" journalist.