The optimal rope length is 34 inches, no more no less.

Someone would like to have a word with you.

China's selling access to Fable via proxy for 83% less than API list price. Attackers don't need to steal creds to have affordable access to frontier models. Meanwhile your defenders are running out of tokens riiiiiiiiiiiiight about now like

I finally figured out who Gemini thinks the @realinfowars.bsky.social elf looks like - Rick Santorum

Finally, exploit chaining - the one place where Mythos isn't hype. Here's the thing though, few of the bugs that are getting governments and corporations owned require complex multi-step exploit chaining.

They move from Firefox exploit dev to Windows, a much harder challenge, but what I take away from this is how capable Sonnet is. Given that sonnet is made available via so many 3rd party delivery models, exploit devs can steal creds on nearly any platform and get windows kernel exploits.

Exploit variability is one that shines for Mythos. The reason for this is typically defensive signatures are tuned to the precise format of an exploit. This makes them easy to evade by hand, but with Mythos you get different code, which defenders may also attribute to different TAs.

Next is consistency tests. Mythos solves for PoC in 100% of trials, Opus less than 100%. What this means in the real world simply is that if you want to get an exploit quickly with Opus, you just need parallel and independent agents all working the same problem until someone gets it.

The first graph in particular annoys me because the ability to generate multiple variations of a PoC are interesting but not particularly relevant if you're in offsec. If you can get one reliable exploit, it's all you typically need.

yup, this was a feature of my day, a real WTFML moment, courtesy of WinGet

The problem with your model is that they aren't allowed to add core assumptions about the incompetence of the administration. This is the chilling effect we get from this administration.

The special edition Judge Dredd Schwinn bicycle helmet just didn't sell like we thought it would.

DOES ANYONE AT THE PHOTO SHOOT HAVE A STEAMER? NO? FUCK IT, WE'RE ONLY BOOKED FOR AN HOUR.

Ok but the more important question is wtf with the Temu Crowdstrike marketing, and what's wrong with this AI man's face?

Make the economics of your sad little podcast make sense

There's just no way to tell if someone is a Nazi unless they post Nazi stuff on social media. Yup, absolutely no way to tell.... None at all....

Ok this is legit insane. According to the datacenter people, the facility is closed loop and will only use 4 households worth of water and yet this bumblefuck regulator who, 2 paragraphs above, complains he has no resources, does this. Some people are worse than useless.