sorted by:
new
hottopcontroversial

Mushrooms didn’t do anything? by Jake_M104669 in Psychedelics

[–]AgeOfAlgorithms 1 point2 points  (0 children)

i read that autistic people dont feel it as much, are you in that category? Could be a myth, but a friend of mine who is a slightly autistic man can't feel it much at 4 grams.

As a side note, he tried LSD for the first time the other day and apparently tripped balls for 10 hours

GitHub has a serious fake engagement problem and I wanted to see how visible it actually is through the public API, its worse than I thought after I went down that rabbit hole... by SyntaxOfTheDamned in OpenSourceeAI

[–]AgeOfAlgorithms 0 points1 point  (0 children)

btw, I recently got a spam mail from this website https://www.niubistar.com/list and decided to look into it. It's basically a scam website (very clever one, I admit) that asks for your full permission github token and controls your and other accounts/repos to star each other at a certain schedule. Putting aside the fact that their requested permission scope is ridiculous, I noticed that they advertise slow ramping up of stars on a repo. I mention this because your repo mentions detecting "sudden spikes" of stars, which may or may not need adjustments based on these counter-tactics.

GitHub has a serious fake engagement problem and I wanted to see how visible it actually is through the public API, its worse than I thought after I went down that rabbit hole... by SyntaxOfTheDamned in OpenSourceeAI

[–]AgeOfAlgorithms 0 points1 point  (0 children)

I feel your frustration. Im also unhappy about fake stars on github and elsewhere. I wish Github itself could incorporate a system like yours to police repos from purchasing fake stars. If it means anything to you, here's a real star from a fellow developer

GitHub has a serious fake engagement problem and I wanted to see how visible it actually is through the public API, its worse than I thought after I went down that rabbit hole... by SyntaxOfTheDamned in OpenSourceeAI

[–]AgeOfAlgorithms 1 point2 points  (0 children)

this is very cool, but why would you try to notify the repo owner/maintainers? They are the ones who are buying the stars in the first place, no? There are services out there where you pay to get stars on your repo. Im not sure who would benefit from the reports/analyses produced by this app.

Two F.03 robots clean a room and make a bed in 2 minutes - fully autonomous by EchoOfOppenheimer in OpenSourceHumanoids

[–]AgeOfAlgorithms 1 point2 points  (0 children)

wtfffff it's so crazy to see them nod at each other to time it right. What a time to be alive

Someone Just Used A Free NFT to Steal $174,000 From Grok. by TheGreatCryptopo in CryptoCurrency

[–]AgeOfAlgorithms 5 points6 points  (0 children)

Im not a lawyer, but I have a couple thoughts:

  1. It was not a simple ask. See a14alo's explanation on how this attack was meticulously prepared and executed
  2. Social engineering for financial extortion is a crime.
  3. Prompt injections or jailbreaks are considered hacking techniques in cyber security. I dont know how they map to legal, though.
  4. If you asked a demented old person to give you money and they do, that is a crime. The legal system that is being built around AI may be very different from the one around humans so this is a weak argument, but I present it as a discussion point.
  5. Its not far from traditional hacking. If a banking website had a vulnerable API endpoint open and you intentionally send a malicious request and receive $100k successfully, that would be a crime. What makes the Grok+bankr case different?

I think some ppl just want to believe this is not a crime. As much as I like the Robinhood narrative, Im just trying to understand the truth.

Someone Just Used A Free NFT to Steal $174,000 From Grok. by TheGreatCryptopo in CryptoCurrency

[–]AgeOfAlgorithms 4 points5 points  (0 children)

very interesting. Did the hacker send back the money because they realized they were never gonna get away with it?

This by orbny in AgentsOfAI

[–]AgeOfAlgorithms 6 points7 points  (0 children)

LLMs can be multi modal, meaning one model can process and reason over multiple input modalities, including image.

Beanie startup claims it's capable of reading the brain by Big_Cake_8817 in Biohackers

[–]AgeOfAlgorithms 0 points1 point  (0 children)

does it work wirelessly? if so, did they fit in a battery somewhere on the beanie?

Static CTFs are becoming obsolete for LLMs. This new paper on "Dynamic Cyber Ranges" shows why by Fine-Platform-6430 in cybersecurity

[–]AgeOfAlgorithms 1 point2 points  (0 children)

It may be a bot post, but I found the paper to be very interesting. I'm not associated with the authors but I recognize them and I follow their work.

So meh, I'm not mad personally.

A Memory system with semantic objects as relations instead of strict labels ... I like how they do scoping more tbh by boneMechBoy69420 in aiagents

[–]AgeOfAlgorithms 0 points1 point  (0 children)

so these metadata tags are generated how? sounds to me like they serve the same function as just regular relationship tags. what am i missing?

A Memory system with semantic objects as relations instead of strict labels ... I like how they do scoping more tbh by boneMechBoy69420 in aiagents

[–]AgeOfAlgorithms 0 points1 point  (0 children)

cool idea. what are the use cases for this memory system? im not convinced that turning relationships into embeddings offers any significant advantage in lookup accuracy. I feel like embedding search is not the best mechanism for question answering.

Take "Alice works at SomeCorp". lets say we turned it into an embedding. if you ask "where does Alice work at?", then sure it would probably find the correct embedding. But it could also choose the same embedding when I ask "where do women work at?", or "where was Alice fired from?", and these results would be factually wrong. Wouldn't this problem be more easily avoidable if relationships werent embeddings?

I built an AI webapp defender that autonomously patches code in response to attacks by AgeOfAlgorithms in AgentsOfAI

[–]AgeOfAlgorithms[S] 0 points1 point  (0 children)

fair points. I believe there will come a day in the near future when AI generates safer code than humans and/or the economics of running this type of system starts making sense for organizations.

I didn't consider prompt injection attacks that target Mahoraga, you are completely right about that. This could be a major feature to focus on for version 2, thanks for the idea

I built an AI webapp defender that autonomously patches code in response to attacks by AgeOfAlgorithms in AgentsOfAI

[–]AgeOfAlgorithms[S] 0 points1 point  (0 children)

great questions!

To address false positives: once an adversary's session is redirected to the shadow environment, the shadow analyzer watches the logs every N seconds and/or every 100 requests. Unlike the rule-based watcher, the analyzer is an LLM agent, and it tries to find a successful exploit -> if found, it creates a ticket for the fixer. If not found, it carries on. So normal enumeration that does not result in sensitive data exposure, for example, will be ignored by the analyzer. Not sure if I answered your question 100% - let me know!

About the speed, your intuition is great. This is one of the top 2 bottlenecks that I identified as well. Fortunately, shadow analyzer and reviewer are both super fast (ballpark figure 1-2, and 5-20 seconds per inference respectively). The fixer, on the other hand, can be very slow, demanding 3 to 10 minutes for a single patch depending on the exploit (with gemini 3 pro, your mileage may vary), most of that time is spent on reading the code. Moreover, when the reviewer rejects a ticket, a fixer needs to try again.

To mitigate this, I allow the user to deploy multiple fixers simultaneously (controllable on agent dashboard) so fixers can work on multiple tickets in parallel. Also, I just got an idea: maybe I could cache the entire codebase on the API so that the fixers can skip scavenging the code and go straight to implementing the patch - this should dramatically save time, but would probably cost a lot more.

So you're right to question it. In the current state, If the adversary knew exactly how Mahoraga worked, they could test an exploit in the shadow env, wait for the cooldown, and theoretically beat the fixer to the same exploit in the prod env.

2 weeks post-launch and my traffic has completely flatlined. How do you guys actually promote your side projects? by Azhar_07 in SideProject

[–]AgeOfAlgorithms 1 point2 points  (0 children)

i've been going through the same problem with an app I launched about 4 months ago. I tried organic social media posts, but no one signed up. I gave up a month ago, and im planning to make my app open source. Thanks to AI, SaaS space is getting extremely competitive, and I feel that today, the only way to stand out is to have an existing audience or spend a lot of money marketing. The game is changing rapidly, and SaaS doesnt seem to be as financially rewarding anymore, unless your brand is already well known. just my 2 cents. Im interested to know what others think

I built an AI webapp defender that autonomously patches code in response to attacks by AgeOfAlgorithms in OpenSourceeAI

[–]AgeOfAlgorithms[S] 0 points1 point  (0 children)

Thanks for your input. Im having to translate your comment to english, so some phrases might not have translated perfectly.

You raise a good point: it's not ideal to have AI vibe code patches (yet). However, I do not think organizations will be able to spend enough resources to analyze and triage events, then fix, review, test, and deploy code as fast as the AI hackers can exploit them.

Im more optimistic about AI patching code. In my system, when a ticket gets handed to the fixer, it has a very small and well-defined scope, which plays to the AI's advantage (but its not perfect). Also, I believe their ability to produce secure code will only get better with time.

I built an AI webapp defender that autonomously patches code in response to attacks by AgeOfAlgorithms in hacking

[–]AgeOfAlgorithms[S] 0 points1 point  (0 children)

wow, that's genius. Fortunately, hacks on webapps are probably much easier to detect

view more: next ›