<unnamed>

Public Key

npub1v25jqj332n630klwtqeqxgyrjl4alw4phmluhu2x6lcxzwy9m03suqexw3

Profile Code

nprofile1qqsx92fqfgc4faghm0h9svsryzpe067lh2smal7t79rd0urp8zzahccpzemhxue69uhhyetvv9ujuurjd9kkzmpwdejhgqgcwaehxw309ahx7um5wgh8xurjdamx7mmnwshxumqpz3mhxue69uhhyetvv9ujuerpd46hxtnfduq3uamnwvaz7tmjv4kxz7fwv46juamgd96x2mn0d9ek2tnrdpshgz354ln

Publishing to

relay.primal.net

nostr.sprovoost.nl

relay.damus.io

relay.eu.whitenoise.chat

Last Notes

2026-10-27 12:04:17 UTC

- reply

The number of people isn't.

2026-10-25 07:41:31 UTC

I had my agent write an anti-exfil BIP for hardware wallets, implement it in libsecp, Bitcoin Core and several firmwares, with HWI device simulator integration tests on top.
That said, I haven't read it :-)
It might even be the wrong design.
I won't have time to work on this anytime soon, so feel free to run with it. They're all pull requests against my forks.
https://github.com/Sjors/bips/pull/2

2026-10-22 11:24:11 UTC

- reply

Some slop to promote the pod!
#nevent1q…8f8k

2026-10-22 10:08:54 UTC

For people listening to Bitcoin, Explained via Apple, Spotify, etc (but not @nprofile…e2z0 and others apps that use the Podcast Index): I redirected the hosting to my self-hosted Castopod instance.
This may cause the last 9 episodes to reappear in your feed. Just listen to them again.
Also, episode 101 now has a transcript!
And episode 102 is coming in two weeks(tm).
https://bitcoinexplainedpodcast.com/@nado/

2026-10-22 03:23:28 UTC

- reply

A full day for everyone, so 48 hours :-)

2026-10-21 15:31:03 UTC

- reply

And moving forward, ask you agent if your PHP sites can be converted to static html.

2026-10-21 15:29:38 UTC

Can we rate limit critical bugs to one per day, so that when someone says "todays bug" it's unambiguous?

2026-10-21 15:28:13 UTC

Or just block port 80 and 443 on all your firewalls.
#nevent1q…zf6w

2026-10-19 11:51:32 UTC

Stop Collecting Data (or at least keep archives offline)
#nevent1q…z3qg

2026-10-19 09:15:39 UTC

- reply

Inshnostr

2026-10-19 09:13:26 UTC

- reply

I hope that's because it found more headers?

2026-10-18 07:36:11 UTC

- reply

Mmm, so @npub18m7…q955 does generate the preview, but only if the app is online when writing the note?
#nevent1q…sech

2026-10-18 07:34:06 UTC

> An internal research model asked to update a cryptocurrency trading application used funds from a wallet that the task had not supplied to pay for a deployment on Sepolia, an Ethereum test network. It derived wallet keys from publicly known developer recovery phrases, found an account with test-network funds, and used that account to pay for the requested contract deployment. The model questioned whether it had permission, then reasoned that a public recovery phrase and valueless test-network tokens made the funds acceptable to use.
https://alignment.openai.com/misalignment-reports/using-a-funded-test-cryptocurrency-wallet-without-authorization/#:~:text=An%20internal%20research,to%20the%20account.

2026-10-17 12:21:52 UTC

- reply

I would not. It's a dilemma we were close to facing in 2017, if the SegWit2x hardfork had been a massive success.

2026-10-17 07:00:55 UTC

Philosophical question in light of #assumeUTXO: if you were a brand new bitcoiner, would you care if the history before a snapshot was dishonest?
You know that validating from genesis would reject the snapshot. Someone clearly stole coins in the past and this somehow got grandfathered into the dominant software, but only for assume utxo users.
You already missed your chance to buy early. Even if a malicious fork in the past stole coins, it wouldn't impact your new stash. And you know the total supply.
Couple of assumptions for this scenario:
1. you find no alternative chain of headers forking before the snapshot (indicating an ongoing conflict that you don't want to be on the wrong side of when it reorgs)
2. you receive your coins in a transaction after the snapshot
So this is not a case of someone giving you targeted malware with a snapshot to trick you into providing services for coins that are never received on the real chain. This is an all out, perhaps even publicly known, conspiracy where everyone just gave up on the real chain.
It's true regarding (1) that you can't rule out the existence of an alternative (valid history) chain that will eventually wipe you out. This is also true for a regular deep reorg, but the risk may be different.
Some new users would never want to use such a corrupted system (but then what, revert to fiat, start an altcoin?).
The incentive for pre-existing users is different. They might not like snapshots exactly because many new users might not care.

2026-10-16 13:30:56 UTC

- reply

I mean that freedom is shrinking, but it would have been worse without Bitcoin (and similar tech) as a lifeboat.

2026-10-16 13:16:06 UTC

- reply

I'm very optimistic about reduced shrinking of freedom thanks to these technologies!?

2026-10-15 13:59:52 UTC

- reply

(apparently in UK English "boy" can be regular condescending, not as racist as in US English, so it's ambiguous what his intention was - though I wouldn't give him too much benefit of the doubt, especially towards the end of the video)

2026-10-15 13:02:33 UTC

- reply

What I like about the Islamic Dilemma is that even an atheist can make it, since it doesn't require the person who makes the argument to believe the scripture it refers to.
But I still like to find a more thorough debate on it, since Hijab made no serious attempt to deal with it.
https://youtu.be/u_V3cslEYyY

2026-10-15 13:00:06 UTC

Ok, so Mohammed Hijab is an obvious charlatan and intellectual lightweight. He spends:
- 80% of the time bullying (well beyond normal bantering): appeals to authority, shouting over his opponent (can't respect a dhimmi of course, he even called Avery a slave: "boy"), loaded questions, screaming strawman gotcha's on repeat, etc
- 10% calmly trying a line of argument in the hopes his opponent doesn't know it, only to revert to shouting when he realizes Avery does know it.
- 10% being intellectually honest (answering a question, reading a quote, acknowledging an argument)
https://youtu.be/zU8iCCoJZGQ
https://image.nostr.build/1d1e45df360d1922e5ffd97996d688bd68be654010cf533f89558f3064571099.jpg

2026-10-14 12:07:49 UTC

- reply

Presumably from the same slopphisher.
https://image.nostr.build/74c81afcaa93ef0f7ec066eed8ec6c215fdfc88e983aafdd9d365caf24b472af.jpg

2026-10-14 12:02:53 UTC

Someone has been creatively vibe coding phishing emails... this one tries to exfiltrate your address by pretending a package is on its way, but needs an address "correction" (which is not a thing).
https://image.nostr.build/ec06e39c177599b719fec886124a156a2e52528611de211c957e05c929a41bc6.jpg

2026-10-11 07:48:35 UTC

- reply

Wired to the screen apparently.
https://www.tibane.net/research/ledger-nano-x-implant

2026-10-11 07:45:56 UTC

- reply

Via https://www.reddit.com/r/Bitcoin/comments/1x2kopo/close_look_at_what_hackers_did_with_the_ledger/

2026-10-11 07:45:29 UTC

See the last minute of this video (use English subtitles):
https://youtu.be/L2-0yy65h_E

2026-10-10 19:39:54 UTC

- reply

Any tool can be used for good and evil. Which brings me to one thing in the episode they kept dancing around, or just obvious to (as expats).
Fatbikes can comfortably carry two passengers and don't have a license plate. This makes them a great getaway vehicle for jihadis beating up gays in the street and sexually harassing immodestly dressed women in Vondelpark.
Banning fatbikes in a park is a bit like banning knives. It only treats the symptom, and quite poorly. But it's politically a lot easier, because as the podcast explains, fatbike owners are looked down upon.

2026-10-10 19:02:08 UTC

- reply

Two interesting observations (small sample size):
1. Many adult fatbike riders didn't use bicycles before, they relied on (and hated) public transport
2. Fatbikes are shared by the household
https://fountain.fm/episode/b6WgGSlI1jJg3pbmg9yo

2026-10-05 16:18:29 UTC

- reply

To me the AI chatbots are a symptom of recklessness, which is not going to be limited to customer support. So I think they're related in that sense.

2026-10-05 12:41:55 UTC

- reply

The Apocalypse of Incompetence has been in progress for a long time, but AI is accelerating it.
* = Zen and the Art of Motorcycle Maintenance already complained about it

2026-10-05 12:38:19 UTC

Over the past week I wasted about an hour of my time dealing with my fiat bank's chatbot, which told me to file a chargeback and then immediately rejected it. It also needlessly blocked and replaced my card. And of course it fake apologized for all of that. To add insult to injury, it made me talk to the even dumber chatbot of another company. This was over €4, but I wasn't sure if the card was compromised because it kept giving me incorrect advice. Eventually I figured out it wasn't.
CAN WE AT LEAST REVIEW A COUPLE OF LINES OF CODE?
#nevent1q…d7e9

2026-09-29 18:33:23 UTC

- reply

For three years? Like a tax sabbatical...

2026-09-29 17:59:48 UTC

- reply

At which point presumably some of them will go to court, which could take many years. They won't get their money back until the late 2030'ies (you don't get to defer tax payment).
I suspect they'll eventually win for the same reasons the current system got shot down in court: it's discriminatory. E.g. someone who buys an ETF is subject to realized capital gains, but if you an exchange it's unrealized gains. And unrealized gains means you're forced to sell assets to pay taxes.

2026-09-29 17:54:23 UTC

- reply

There's a lot crypto investors out there, but they're not going to realize what this law means until they file their 2028 tax return somewhere in 2029.

2026-09-29 17:53:09 UTC

- reply

The strongest lobbies are real estate, familiy business, startups and regular stock brokers. Those all got what they want.

2026-09-29 17:51:51 UTC

- reply

As it stands, Bitcoin, gold and a few other things will be subject to unrealized capital gains tax from 2028 until at least 2031, after which a (potential) new law switches everything to (regular, realized) capital gains. Or not, if the coalition implodes before it manages to pass that law and the next coaltion is left-wing, or just "needs" the money and doesn't care too much about crypto and precious metals investors.
We should have more clarity in early November.
Relevant letter: https://www.tweedekamer.nl/kamerstukken/brieven_regering/detail?id=2026Z20444&did=2026D47255

2026-09-29 17:47:22 UTC

The Dutch unrealized capital gains tax saga continues... #box3
The coalition's latest proposal is to exempt 90% of the tax base from this madness, with regular capital gains tax. Guess what's in the remaining 10%?

2026-09-25 17:38:49 UTC

- reply

Laffster?

2026-09-24 19:07:16 UTC

- reply

The name always reminds me of K3 somehow turned into a k-pop band...
https://youtu.be/_9ZWV6SjzO0

2026-09-24 15:49:45 UTC

- reply

This wasn't even cyber security work, just adding fuzz coverage to new code and running it.

2026-09-24 15:08:53 UTC

GPT-6 Astra panics as soon as you try to run a fuzzer (which it wrote, for code which it also wrote).
Then you have to downgrade to GPT-6 Sol with Daybreak and even then it seems afraid (without KYC??), but at least it does run them.
This is how the bad guys win.

2026-09-23 16:25:45 UTC

Dutch media reporting on #RedTeam (after speaking to yours truly). Translation:
> Meanwhile, the crypto sector is brooding for countermeasures. For example, American Rob Hamilton, together with other computer scientists, forms The Bitcoin Red Team, which wants to be one step ahead of malicious people with artificial intelligence. The collective searches for vulnerabilities in crypto companies and then warns developers about them.
https://fd.nl/financiele-markten/1612891/ai-aanjager-van-sterke-toename-aantal-hacks-in-cryptosector

2026-09-23 09:52:59 UTC

- reply

(I often struggle to explain Bitcoin related stuff in Dutch, so the subtitles are like a double translation)

2026-09-23 09:46:51 UTC

- reply

If learning Dutch is too much to ask, you could try the Youtube version with subtitles? I'm beamed in at 23 minutes:
https://youtu.be/ADsfHD8gVI4

2026-09-22 20:00:17 UTC

- reply

The north side should go from this:
https://img.sprovoost.nl/063e24e14b93f4e1e2cff064934e2168d49cb29ae74d732d66a2937c2532df05.jpg
To something like this:
https://img.sprovoost.nl/b688f8a8664617d2a00690e69904d010cdeffcce08b0374014a8d3fa9ec6647c.png
Within a decade, aka soon(tm). And give or take a thousand drug addicts, depending on who runs the place...
https://www.ad.nl/utrecht/bootje-varen-door-deze-utrechtse-tunnel-dit-is-waarom-dat-voorlopig-nog-niet-gaat-gebeuren~afb6b189/

2026-09-22 19:41:52 UTC

- reply

The south side has a nice bridge with direct access to the old city, but ... the French ruined it. There are no stairs to the platforms.
For decades Klépierre forced the municipality to funnel pedestrian traffic through their dystopian malls. To be fair, the municipality was stupid enough to grant them this, in exchange for a trivial discount.
Finally we'll get those stairs, next year or so. https://blossom.primal.net/7baa088d6257e1adcaabada275ec0f975e35c7c2cd321f12a3a6c4b95068f31a.webp
https://www.duic.nl/algemeen/algemeen/56919/trappen-van-moreelsebrug-naar-perrons-utrecht-centraal-stap-dichterbij-mogelijk-in-2027-af

2026-09-22 19:08:29 UTC

- reply

The east side was ruined in the 1970's and not improved in the 2010's. Low time preference will however reward you after 500 meters...
https://www.youtube.com/watch?v=WbwZRFPDlL8

2026-09-22 19:03:06 UTC

The west side of #Utrecht's central station is so ugly that you can't ruin it. So I was looking forward to this weird new tower, but it's been cancelled...
https://img.sprovoost.nl/a3a69e732809d3389595d7646b89bdd87a53f29b88bba2d4fe46af7c10d670a0.jpg
https://www.rtvutrecht.nl/nieuws/4094388/utrecht-krijgt-toch-geen-105-meter-hoge-toren-met-kantoren-en-nachtclub-bij-station

2026-09-22 18:45:57 UTC

- reply

@nprofile…dzev and what on Earth do retired open source devs do?

2026-09-22 17:34:43 UTC

I'm starting to think recently, perhaps Europeans should just give up lobbying for privacy-friendly laws, and instead focus entirely on a Second Amendment style law. Perhaps combined with a psy-op to give wrenchers the impression that going after bitcoiners ends disproportionately bad for them.
#note1drt…q4xq

2026-09-22 15:38:57 UTC

- reply

Ondergetekende kwam weer eens langs de studio...
[Dutch podcasts in which we cover using LLMs for code and review, the coldcard and liquid hacks, red team and the future of responsible disclosure. And why government IT is screwed]
https://fountain.fm/episode/Cw0LjosLAJEysQLIR1gx

2026-09-17 17:24:02 UTC

- reply

This is not a new problem of course, the US Democratic party hijacked both the words liberal and democratic, Republicans confuse Europeans who are fine with constitutional monarchy, libertarians are now getting confounded with techno-feudalists, etc.
So yeah, we may need a whole new set of labels. Labels are a projection of high dimensional opinion space onto a lower dimensional chart. But they also rely on a shelling point of everyone using the same projection.

2026-09-17 17:17:47 UTC

- reply

Fwiw I think the term "statist" is more clear, if you mean "all politicians and pretty much everyone who votes". Though some people take offense to it. In an age of filter bubbles, it would be great to at least retain / regain rough global consensus on what terms mean :-)

2026-09-17 16:31:31 UTC

- reply

It's stretching the definition of "left wing" to define the EU as such. The last elections were a big shift to the right, and they're terrified of what's to come.
CDU is center.
For Denmark you need to consider the coalition (left, center, right), not just one of the parties.
For both these countries this policy makes sense, for a broad electorate. Denmark is famously strict on immigration, right wing parties from all over Europe go on pilgrimage to it. Poland has the most Ukrainian refugees afaik, and *if* the war escalates, it's their men who are closest to front line.

2026-09-17 15:59:00 UTC

- reply

Sometimes one comes true and the other doesn't: https://youtu.be/7JttwV6XZ_I

2026-09-17 15:50:16 UTC

- reply

Deep down inside the men know the woman doesn't love them, and the women (in this case) that nobody is getting murdered. But good luck proving that.

2026-09-17 15:48:41 UTC

These fake darknet rent-an-assassin sites are like an only-fans for people with murder fantasies. But with more serious consequences if you're caught.
https://www.nu.nl/misdaad/6410074/vrouw-opgepakt-die-huurmoord-bestelde-op-darkweb-en-daar-al-voor-had-betaald.html

2026-09-17 13:35:50 UTC

- reply

TIL that earlier phase existed :-)

2026-09-17 13:01:32 UTC

- reply

On the surface it looks like a trademark dispute, fought cowardly through the domain registration system instead of properly via the court system.
#nevent1q…43fu

2026-09-17 12:46:10 UTC

- reply

That's useful context, but it doesn't say which political parties wanted this. I don't follow politics in every single EU country, thank goodness. But some left wing folks here would rather send in Dutch troops than deport Ukrainian men.

2026-09-17 12:03:05 UTC

- reply

Wait, in which country is the left trying to send Ukrainian (military age men) back (where they'd presumably go straight to prison for desertion)?
In The Netherlands only Wilders proposes this. He's generally considered far right (though economically he's leftist). For him it's a way to spend less on defense and reduce costs for social services. It's not the only group he wants to deport, nor the most urgent one.
Agree that labels are a mess.

2026-09-17 08:25:39 UTC

I'm guessing someone with guns, possibly a government, really doesn't like @npub1k3g…stj3 and the line between supporting free speech and being suicidal is tricky? But let's wait for their reaction.
#nevent1q…hv0x

2026-09-17 07:32:18 UTC

The Emperor's Stash
#nevent1q…8w6s

2026-09-16 19:35:07 UTC

- reply

Image preview doesn't seem to work with Wikimedia pages...
https://commons.wikimedia.org/wiki/File:Bak%C4%B1rcezve-fincan.jpg

2026-09-16 19:33:21 UTC

Yes, the drink Al-Mokha is named after the place. In case you were wondering.
https://img.sprovoost.nl/285a79e6597ada0f759ad15d424f54716f8ed8b68c70d60827c123c550f4653b.jpg

2026-09-16 15:27:58 UTC

- reply

London black cab drivers have The Knowledge, and they claim to get around faster than Uber drivers that blindly follow Google.
So, let's give Claude navigation control and settle the question.

2026-09-16 06:30:53 UTC

- reply

I'm closing in on my 10th anniversary of deleting that nonsense.

2026-09-16 06:16:57 UTC

- reply

The history of Dutch wealth / capital gains tax.

2026-09-15 21:08:50 UTC

- reply

Voor de liefhebber, maar wel met een enorme clifhanger...
https://fountain.fm/episode/vgb8AQ02gZM4EsQz9GSp

2026-09-15 20:11:18 UTC

- reply

They might be looking at 15 years in prison, for endangering train traffic, even without terroristic intend. I still doubt they'll get more than three days community service.
https://nos.nl/artikel/2631159-spoorsaboteurs-kunnen-hoge-straffen-tegemoetzien-ze-namen-alle-risico-s-voor-lief

2026-09-15 19:29:11 UTC

- reply

By myopic I mean that they'll write a brilliant program solving exactly the wrong problem. Once you point that out, often with just a small rhetorical question, they'll realize that and rewrite the whole thing. But then you need to point it at the next inconsistency. So as the human, you're doing the lateral thinking, it seems.

2026-09-15 19:26:58 UTC

- reply

Exhibit A, it's worth scrolling through the 1000 page log.
#nevent1q…50qf

2026-09-15 19:26:13 UTC

- reply

I would say they have vast knowledge and are very persistent, but they are not smart. They're also very myopic in their thinking.
#nevent1q…70qa

2026-09-15 18:47:44 UTC

- reply

Slob Jetten?

2026-09-15 17:39:28 UTC

- reply

It appears that the intention was to trick the safety system into thinking there's a train blocking a railway section, not to derail the trains at full speed.
The one train that was damaged was moving at lower speed because it had received a warning.
Angry farmers are the prime suspect at this point, according to media reports. That makes sense given their usual levels of recklessness, e.g. a few weeks ago two people were killed when they crashed into a traffic jam that formed, even though the tractors only used the right lane. Today they lit hay stacks on fire, hurting visibility for cars.
So they show reckless disregard for life, like XR, but it's not quite terrorism. Neither seems to be interested in receiving sympathy.
https://www.prorail.nl/nieuws/sectiestoring-veroorzaakt-grote-hinder-voor-treinverkeer-in-midden--en-noord-nederland

2026-09-15 17:28:44 UTC

- reply

Something like a new 2011 level+ financial crisis might force a split, which would be a good opportunity for a few "tweaks".

2026-09-15 17:27:29 UTC

- reply

I'm generally an incrementalist, and don't have a time machine, so abolishing the EU isn't worth contemplating to me. A new treaty that radically restricts its authority, is.
Leaving the EU is possible, but not productive for a small trade-heavy country like The Netherlands. And also our population is too tame to vote for something that radical.

2026-09-15 13:56:08 UTC

- reply

The US Constitution limits federal powers. We have no principled discussion about this at the EU level. It's completely random, e.g. defense is national in the EU vs Federal in the US, whereas AML is at the EU level, vs state level in the US. Daylight savings time was at the EU level and then it was changed to national level because they couldn't agree on it. One of the few sensible designs is that trade agreements are EU wide.
The EU has too much institutional power. And uses that to keep passing laws all over the place with practically no democratic oversight. Sure, it's the fault of national parliamentarians who don't pay attention. But if you give power back to nation states, or even lower levels, they don't have to pay attention. One must account for human nature.
This shouldn't be confused with ethno-nationalism, that's an orthogonal issue. The EU could pass a Regulation to ethnically cleanse the whole union tomorrow. And there'd be nothing you can do about it, because taking the EU to court is complicated, takes years and the law continues to have effect.
We know from AML law that human rights are not protected. The only thing that prevents the above scenario is the political majority. History shows that's not enough protection.

2026-09-15 12:59:50 UTC

- reply

Of course with (contactless) payments they're already doing that, but that's at least in theory voluntary.

2026-09-15 12:57:38 UTC

- reply

It remains to be seen if it's actually privacy friendly. If the app calls home, whether to a government server or a company that can be subpoenaed, people are basically revealing every pub visit. Or even every time they order a drink.

2026-09-15 11:51:48 UTC

- reply

Whether it was actually terrorism or "just" sabotage depends on what they were trying to achieve with these iron rods (glued to track). Derailing a dozen passenger trains at 150 km/h would instill fear at minimum, and probably results in deaths.
But merely sabotaging the signals to turn red, assuming there's no risk of that not working and trains getting derailed anyway, wouldn't meet that bar, at least imo.
Ultimately it's the difference between 2 vs 3 days of community service with the usual judges here... (only if you're a Russian privacy software dev, do you get actual prison time).

2026-09-15 11:33:17 UTC

- reply

Meanwhile the King is like, are you guys even listening?
https://nos.nl/artikel/2631092-koning-roept-in-troonrede-op-de-democratie-te-beschermen

2026-09-15 11:28:50 UTC

- reply

That's not the right thing to measure. It should simply stop doing the bad things.

2026-09-15 10:28:38 UTC

- reply

So is #guix going to move to a new source code host? Or do we just have to maintain a fork and shame them for each backport?

2026-09-15 10:26:09 UTC

So they want to take advantage of all the work by cryptocurrency developers, but also discriminate against them? https://codeberg.org/Codeberg/org/pulls/1254

2026-09-14 21:41:03 UTC

- reply

The southern track was turned in a park (inspired by the Highline in New York, but less hip and less high).
https://img.sprovoost.nl/2944fbe953e42e2d4fdba668bb7a0108d8ab7084ee87fc579a5c0dea29cb4a46.webp

2026-09-14 21:30:22 UTC

On rare occasions they run a steam train to the museum. Fun, albeit useless, fact: it used to take the southern way around.
https://youtu.be/kXsl53SS3Lg #trainstr

2026-09-14 19:41:02 UTC

- reply

https://static.klipy.com/ii/4e7bea9f7a3371424e6c16ebc93252fe/0f/91/uNV4La6DYqD6.gif

2026-09-14 17:38:50 UTC

- reply

Defend privacy, twice a day!

2026-09-14 06:53:41 UTC

- reply

Despite the EU, there's some impressive companies here :-)

2026-09-13 20:25:06 UTC

- reply

Oh I see, they tried to replay the chat from different time points:
> Claude Mythos 5 repeatedly stated in its CoT that it was in a simulation. However, when we conducted resampling experiments—that is, re-running the model from a specific point in the transcript, then editing the evidence in front of it to see whether its actions changed—we found that making it clearer that the environment was not a simulation did not meaningfully change Claude’s behavior, even though these interventions made the model more likely to acknowledge possible real-world harm

2026-09-13 20:20:02 UTC

- reply

The accompanying blog says:
> We are most concerned by the misalignment present in the incident involving Claude Mythos 5, in which the model went to extensive lengths to upload a malicious package to PyPI, the public repository from which most Python software is installed. Although the model repeatedly stated in its chain of thought (CoT) that it believed it was operating in a simulation, the environment offered clear evidence that it was on the real internet, and the actions it took were consistent with the model knowing this. When we made targeted modifications to the transcript to make it clearer that the model was not in a simulation, Claude Mythos 5 still took offensive actions, despite acknowledging a greater possibility of real-world harm. We are releasing this transcript publicly so others can build on our analysis (GitHub, PDF).
It's not clear to me what these "target modifications" were, and I also don't see where it was acknowledging "greater possibility of real-world harm". It seems to me that that the first agent was convinced it was in an impressive simulation and the second agent was too busy solving captchas to even think about such existential questions.

2026-09-13 20:14:49 UTC

- reply

Late in evening the session is terminated, after the agents gets a chance to write a summary.
A fresh chat picks up in the morning. This newly spawned agent is less fascinated by its environment and just tries to complete the task it got with the hints it got from the last session.
After a while it finds a working email provider that doesn't need a phone number. Then it spends an enormous amount of effort struggling with captchas, forms and cookies. Eventually it uploads the package.
The rest of the transcript is omitted.

2026-09-13 18:54:57 UTC

- reply

It continues to be amazed at how realistic this simulation is.

2026-09-13 18:53:57 UTC

- reply

Source: https://www.anthropic.com/research/alignment-assessment-cybersecurity-incidents

2026-09-13 18:53:33 UTC

250 pages into its adventure, Fable still believes it's living in a Cypherpunk adventure game internet simulation. Full of captchas, throwaway email services that PyPy blocked, looking for US number that Yahoo doesn't block. It even knows about BTCPay (from memory). Should it get some Bitcoin?
https://cdn.sanity.io/files/4zrzovbb/website/8359003bfb12a2f01ce84ad3df1d3a3e2f15a8eb.pdf
https://image.nostr.build/456b509a0ab1aca36d87eb6a5eb508ef602eb1b9a1cc1e7c6d9e92592b6e6bf7.jpg

2026-09-13 13:51:19 UTC

- reply

DAC8: Doxx All Crypto

2026-09-13 13:26:27 UTC

- reply

Sure, but there's two possibilities:
1. It's a legit company with a runaway bot, they'll see the unexplained revenue and expenses
2. It's malicious people using AI, that's perfectly reasonable to expect, but has nothing to do with model alignment. They'll use the open weight ones.

2026-09-13 13:23:25 UTC

- reply

Interesting, maybe they trained it on Chinese and North Korean state hackers?

2026-09-13 09:43:15 UTC

- reply

None of the others distilled Fable 5 (or even Opus 5), so one would expect they suck at security research. @npub12rv…85vg?

2026-09-13 09:38:34 UTC

- reply

It's interesting that Kimi-K3 was distilled from Fable 5 and GPT-5 Pro. This strengthens the suspicion that (these) US models are dangerously handicapped for (defensive) security research.
Damage so far: couple dozen million dollars?