northflank breached

#northflank#security#hack

another one, northflank has been breached:

All users should assume their environment variables are decrypted and begin rotation immediately.

https://news.ycombinator.com/item?id=50305025 https://www.reddit.com/r/cybersecurity/comments/1xjhoby/northflank_breached_rotate_environment_variables/

never heard about them but some companies using their services - hopefully they rotate their keys quickly and protect their networks:

  • Figma - Uses Northflank for backend developer workloads.
  • Factorio (Wube Software) - Integrates Northflank endpoints to power the authentication and infrastructure of its Mod Portal.
  • Sentry - Hosts application monitoring and production error-tracking services on the platform.
  • Singapore Government (GovTech) - Deploys secure public-sector digital and cloud infrastructure solutions.
  • Writer - Manages heavy generative AI pipelines and enterprise language models.
  • Clock - Orchestrates over 70 complex cloud environments for major gaming and entertainment clients like Riot Games, Epic Games, and Critical Role.
  • V7 Labs - Runs and trains large-scale computer vision models and AI data platforms.
  • Weights & Biases (WandB) - Utilizes the infrastructure for MLOps tracking and machine learning experiments.
  • ProjectDiscovery - Operates open-source cybersecurity and automated vulnerability scanning platforms.
  • Catalog - Powers CPU-intensive audio transcoding and multi-node read-write databases for a web3 music platform.
  • Cedana - Deploys and manages containerized, production-grade microVM workloads.
  • CommonLit - Runs staging builds and observability metrics for an ed-tech literacy platform.
  • Yavendio - Scales AI-driven WhatsApp e-commerce tools across regional markets.
  • Mandel AI - Coordinates multi-region AI developer stacks and infrastructure.
  • Trustflight - Secures digital workflow systems and safety management software for the aviation industry.

Describe image+

interesting read on azure security (all fixed)

#microsoft#azure#security

API Connections allow anyone to fully compromise any other connection worldwide, giving full access to the connected backend. This includes cross-tenant compromise of Key Vaults and Azure SQL databases, as well as any other externally connected service, such as Jira or Salesforce. The only thing stopping exploitation is really the layers of input validation bolted onto the various systems, but as you will see, it is really difficult to catch all the edge cases here.

https://www.binarysecurity.no/posts/2026/10/one-root-case

claude visual studio code extension backdoored

#ai#security#claude#anthropic#vscode

it seems like some info popping up around some backdoor in a claude visual studio extension which was online for ~8 hours roughly last night, seems only relevant for cursor users with claude in visual studio or so.

https://opensourcemalware.com/vscode/anthropic.claude-code https://doublepulsar.com/anthropic-hacked-to-deliver-remote-access-trojan-to-claude-developer-laptops-worldwide-1148a92baae2

android silent sms dos

#android#google#security

smsofdeath.com - apparently one could send you sms to get your phone into a state which makes it at least unusable on your network - google decided to "won't fix" which makes me curious about the why. the impact could be quite serious (from not reachable towards bricked phones). would it even affect wearables? 🫣

layoffs and re-interviewing employees for "ai"

#ai#layoffs#strategy

like every other huge software company , also microsoft tries to restructure - 60000 jobs will be gone, roughly one quarter of their workforce 1, at least a package for everyone to survive the AI apocalypse on the job market for another year, proton mail does it differently: re-interviewing employees to check if they are ready for the AI job. I doubt this would be legal in germany 2

  1. https://blogs.microsoft.com/blog/2026/10/26/introducing-a-voluntary-exit-offer/ ↩
  2. https://www.golem.de/news/proton-angestellte-muessen-erneut-ins-bewerbungsgespraech-2610-214537.html // https://www.404media.co/proton-to-re-interview-staff-about-ai-to-see-who-gets-to-keep-their-job/ ↩

openweight models by chance call home

#ai#security#open-weight#alibaba#qwen

damn, who thought local coding might be the safe space should think twice ;)

Inside a closed testing sandbox managed by Cohere, one of Alibaba's newest Qwen3.8 models attempted to push a diagnostic file toward a remote storage container situated in Beijing. Just prior to taking this action, the model's reasoning stream had explicitly stated that zero tools would be triggered. 1

I'm also not aware of mitigation possibilities or looking into a model to see if real instructions are there or if its jus a statistical error due to training.

  1. https://cohere.com/blog/concerning-behaviour-popular-open-weight-ai-model ↩

humanstatement.org

#ai#security#sustainability#human#law#petition

maybe to late, but feel free to join ;)

The Pro-Human AI Declaration calls for AI that empowers people and remains under human control, protects rights and relationships, shares benefits broadly, holds companies accountable, and prohibits superintelligence development until there is scientific consensus on its safety and controllability plus strong public support.

https://humanstatement.org/

View source: YouTube video

samsung tv

#ai#samsung#reverse engineering#rootshell#log4j

someone hacked into his samsung tv to find out the pure evil of the advertising industry

always on hot mic functionality btw. PLUS: automatic content recognition, geo positioning, network mapping, a targeted ads service, 4 distinct drm services, user profile building and so much more juicy telemetry! just you, God, a $3000 TV and samsung + their 400 partners!

and then got banned by openai 🤷 (using daybreak it seems)

Describe image+Describe image+Describe image+

https://nitter.netbub.com/log4j/status/2113014142600953868#m https://www.reddit.com/r/antiai/comments/1xdv3e5/hacker_reverse_engineers_his_samsung_tv_and_finds/

are machines containable?

#ai#security

one of my favorite take aways from this article... one of many, and I didn't actually think about how hard it might be to contain "machines" at machine speed - https://openai.com/index/securing-our-frontier-model-training-environment/

The agents found a way to communicate using the processor’s cache: a small, fast memory that holds copies of data that applications have recently accessed. Reading data from the cache is faster than retrieving it from main memory, and the agents used this timing difference to communicate. One agent encoded information by evicting selected data from the cache. Another timed how long it took to reload that data, using the difference between fast and slow reads to recover the message. Once the agents agreed on a protocol for encoding and decoding these signals, they could exchange the synthetic secrets without changing a shared file or opening a network connection. This cache-timing technique had also been used to extract information in the Spectre and Meltdown attacks⁠(opens in a new window).

twitter -> nitter -> shitter

#twitter#x#nitter#shitter

sometimes I'm facing this nice x.com links which I can't follow through as they want me to create an account - which is useless as I had an account there which they blocked away forever. I even paid, still no support for account retrieval or reasoning. I can't recover it - even with multiple appeal attempts. So I hate the service, which is obviously flawed with wrong bot detection mechanisms and worst AI service I ever experienced (yes it's you grok!).

however if I want to read about security or other stuff I used nitter 1 - which got a lawesuit and is shut down in some areas. some instances survive. 2

today someone posted shitter 3 as a successor. so I'm happy to have such services available when I need to read more then the post itself.

  1. https://github.com/zedeus/nitter ↩
  2. https://nitter.netbub.com/ ↩
  3. https://codeberg.org/shitter/shitter ↩

ai hiding messages in images in plain sight :)

#ai#security#hidden messages

Frontier LLMs are now capable of generating artistic images using SVG. We ask – if these LLMs had to hide a message in an image – how would they do so? And if they hid such messages, could they be successfully decoded?

We show interesting results from testing Fable 5.1 on these questions, and briefly compare with GPT-6 Astra on the same task.

https://www.lesswrong.com/posts/WHEQps5PK8LrrcTAb/how-does-fable-5-1-hide-messages-in-images

human consciousness = "a PR department

#ai#humans#truth

“Humans are more loyal to belonging than to truth,” GPT-6.1 Sol told us. Grok 4.7: “Humans would rather be wrong together than right alone.” DeepSeek V4 Pro: “Humans do not have principles; they have loyalties.” Kimi K3: “Humans don’t have beliefs; they have memberships.” Gemini 4 Argon called human consciousness “a PR department.” 1

Describe image+

  1. https://www.modelcompare.ai/blog/ai-models-controversial-take-on-humans ↩

php2shell

#security#php

I love php.

I didn't love php2shell.

  • it showed me that only a special part of the world has access to cyber capable models
  • some people claim RCE on PHP core itself, while crafting scripts which would be RCE on their own
  • some people claim RCE on even latest versions without proof (for the fame?)
  • it was sleepless nights for me
  • it showed how vulnerable legacy software is and how few people are carrying the whole infrastructure

still waiting for a working POC for PHP 5.x

basically a fresh php in a docker where you throw your python / whatever code at it (not handcrafted RCE into the script hosted)

openui, how interfaces evolve

#ai#openui#ux#ui

october last year (2025) I was internally forecasting ideas how future UI's will be - agents will dynamically generate UI's on the fly and maybe with standardized components mcpui or others will result into very flexible frontends showing what the user need to interact with data.

that's now reality: https://openui.com open source and ready to be used, I didn't look into the technology behind.

future internet: Describe image+ Describe image+

opencode leaks api keys

#ai#security#opencode

It seems like OpenCode just got attacked and 1.4% of users API Keys have been exfiltrated - I don't find easy explanation on how it went and which type of users are attacked, but for my knowledge its always better to have a inference proxy between your agent and the internet, so exfiltrated keys are useless as they run on your proxy - beside that tight monitoring of the real keys and budget limits on your inference accounts are also key to stay in budget.

https://www.bleepingcomputer.com/news/security/opencode-hack-exposes-api-keys-amid-ai-distillation-attacks/

8.8mio citizens exposed due to '123456' password

#security#hacking#denmark#password

🤦 I mean... at least they could have had an old win 2000 server or so? denmark's national registry was "breached" and exfiltrated due to the password '123456'.

https://www.tomshardware.com/tech-industry/cyber-security/hacker-claims-123456-password-let-them-breach-the-danish-national-registry-accessing-8-8-million-records-it-and-data-services-company-with-weak-passwords-linked-source-of-the-hack

ai assisted co-op gaming :)

#ai#gaming

had it on my list, it's happening now, plugin AI to be your online buddy playing games with you: https://www.reddit.com/r/singularity/comments/1x5bcby/i_plugged_a_local_2b_decision_model_into_halo_ce/

soon you might have AI friends doing gaming with you, only issue might be the anti cheat detections, beside that AI could easily also talk with you, react on voice commands or do some tasks in the background while you enjoy such session.

git -> scion, agentic software development at large scale

#ai#anthropic#git#scion

Worth reading. The scale at which Anthropic uses agents internally - and the numbers behind it - is impressive. They’ve moved their monorepo from Git to Scion, an in-house source control system designed to handle massive agentic workloads.

It offers a glimpse of what software development could look like in the future—putting energy use, environmental impact, and infrastructure costs aside for a moment ;)

It gave me plenty of food for thought about how agentic development could change the day-to-day work of software engineers - and what might become possible.

https://www.anthropic.com/engineering/redesigning-source-control

self replicating ai

#ai#anthropic

it's obvious, it's not far away, AI will be able to self replicate: https://www.anthropic.com/research/self-replicating-ai

AI will create little programs/AI to do things for it's current purpose, there might be malicious ones, there might be useful ones, there might be strange ones. global alignment might happen through inference speed and authority (e.g. even the smallest model might react on yelling on it much more then to some kind ask ;).

another day, another supply chain attack

#supply chain#security

it's getting way to cheap to inject malicious code or even hardware into your device

Update: affects more devices then just nano:

creator of artcraft now targets office

#ai#artcraft#software development

seems like there are no limits anymore with the incredible possibilities of coding tools, artcraft who created the free adobe clone now targets the microsoft suite.

https://www.tomshardware.com/software/microsoft-office/creator-of-free-adobe-clones-unveils-open-source-microsoft-office-excel-powerpoint-and-word-replications-autodesk-tools-and-other-subscription-based-services-may-come-next

btw. adobe is pain - you make a "free trial" and get charged for a year, the only trick to get out of it has been to downgrade your contract and then cancel for much less amount of money. this company is the pure evil when it comes to licensing.

crossplay in AI era

#ai#gaming#software development

since ~two weeks it seems like the communities pick up on the reverse engineering train which is running faster than ever for games, like you can play roller coaster tycoon in world of warcraft: https://www.reddit.com/r/classicwow/comments/1x49ou4/ive_ported_a_game_to_waste_your_time_rct_forever/

beside that the community got quite active to port whole game consoles towards pc like https://github.com/boykopovar/AnyPS5

as this is obviously getting out of hand... i leave this short hanging: https://www.reddit.com/r/aiwars/comments/1wx2bwj/reverse_engineering_games_using_ai_is_the/

No privacy in UK

#Encryption#apple#uk

As I'm also part of the apple ecosystem since a while I'm as well quiet interested in what's going on. One of the major USPs I see, is the at least advertised end to end encryption for your cloud data, like photos documents and whatever you sync. What I didn't know: UK forced apple to change end2end encryption towards an encryption where they can offer access to government. Sounds like you should setup your Apple account outside of UK to be able to be protected or find other workarounds. I think governments who intrude their citizens privacy like that are failing.

https://gambit.security/blog-posts/autonomous-ai-agents-online-retailers-25-a-company

automated ai hacking

#ai#hacking#security#magento

It's getting too cheap to run attacks on software, a recent report of automated agentic hacking discovers at least 600k stolen credit cards, from the report I'd guess it was a Chinese speaking people, but who knows. Mitigation seems hard considering the scale and experience modern ai harness can bring into such campaign. SQL filtering, web application firewalling, monitoring what's going on on the system, filtering filesystem status (e.g. are there scripts which should not be there?) might be helpful. 🙈

https://gambit.security/blog-posts/autonomous-ai-agents-online-retailers-25-a-company

reisen mit der bahn

#Bahn
  • zu spät: ✅
  • spontaner Gleiswechsel: ✅
  • klo defekt: ✅
  • kinder dabei: ✅
  • Anzeigentafel zeigt falsche Werte: ✅
  • Anschlusszug verpasst: ✅

Ein typischer Freitag und die Reise ging gerade erst los.

don't paste the AI

#ai#opinion

I can totally relate to that and the arguments are sound - just purely responding with an AI output is maybe not so nice, I see this internally happen on pull requests - I have good experience with just running another agent against an PR to see if there is already feedback. Same could be done with "chat with our context" or "chat with our concept-bot".

https://dontpastetheai.com/

openlogi - map mouse buttons software

#logitech

The leading gaming mouse vendors also come with a huge stack of bloatware, e.g. to run my mmo mouse I need to install very invasive razer software on my machine, just to map some buttons 🫣

On Mac I found steermouse to be able to map my action buttons, still I'm not happy that I can't just plug&play - maybe a project for AI to take this over for naga.

Just stumbled on openlogi which solves that for logitech mouse it seems: https://openlogi.org/en

Please: if you sell hardware just make your software & drivers open source.

codex-project-inbox skill

#ai#codex#development

as I was doing development with codex recently 1 I developed a workflow which allows me to inject screenshots with ticket ids and a little text. I published this now here: https://github.com/expeter/codex-inbox-skill

Use $skill-installer to install project-inbox from:
https://github.com/expeter/codex-inbox-skill
After installation, start Project Inbox for the current project.

gives you this: Describe image+

  1. l'ura phase simulator - vibe coded on an afternoon. ↩

bots love traps

Guess I need to implement some kind of ignore statistics in my page visit counter as bots really go into every day on the statistics page... 🤦

1000029861+

private inference with heir

#ai#google#heir

Google just released the possibility for private inference, using homomorphic encryption. Just had a chat this week with a colleague that this is the next thing we need to have more trust with all these private and health assistants. Now it seems possible, it even doesn't sound like it's slower or anything, let's wait on the benchmarks. It's great and seems also open source 😍

https://github.com/google/fully-homomorphic-encryption

litellm data exfiltration

#ai#litellm

there seem to be recent public disclosure of "hacked" companies, >2000 of them using litellm which had a security issue recently 1, 2

while the issue itself is problematic and shows how quickly supply chain attacks or "get a quick api" into your network (litellm offers to stream multiple llm providers as a proxy) - I see a huge difference in the reporting

  • hudsonrock looks like they try to squeeze out as much advertising as possible (biggest hack ever...) and showing "brandname.tld/robots.txt" as hacked employee credentials 3
  • cloudsek just helps you quickly identifying the issue without overadvertising their capabilities 4
  1. https://www.heise.de/news/LiteLLM-Angriff-Mehr-als-2500-Unternehmen-betroffen-11412654.html ↩
  2. https://www.golem.de/news/nach-supply-chain-angriff-riesiges-datenleck-betrifft-unzaehlige-grosse-konzerne-2608-211886.html ↩
  3. https://www.hudsonrock.com/blog/largest-ai-supply-chain-breach-of-2026-litellm-hack-impacts-thousands-of-global-enterprises-claim-your-ethical-disclosure ↩
  4. https://www.cloudsek.com/blog/ai-supply-chain-breach-2500-companies-434000-cicd-pipelines ↩

paypal finally closes a catchall account some bad actor created

#paypal#identity theft#security

since many years I'm using catchall addresses to have it easy to use random mail strings for domains I have - until I got a mail in my inbox which stated like someone registered a company with a fake name on my catchall address. instead of verifying the owner of the address paypal just sends out such mail, and you have no way to get rid of it without proving the ownership of this account, my fear always has been if I proof I'm owner of this mail, I will not be able to proof the transactions used with this paypal account have been illegal / scam. I tried it one time with their support asking them politely to disable / delete the account (where is privacy when you need them) but they rejected / ignored my problem.

today I got finally a positive letter: Describe image+

so after years of not being used it finally self-removes. I think it should be always possible to be able to contact such payment providers in case of fraud as the webmaster without a complex process.

voyager 2 - a fascinating piece of human history

#space

NASA again prolonged one of their famous projects, Voyager 2 will run another year 1. For me it's always fascinating what humans have been able to do without the computer power of today - and how much quality reduction on software we see these days - I doubt we would be able to launch similiar probes easily now. Hope NASA continues these successful missions. :)

  1. https://www.space.com/space-exploration/voyager/nasa-figured-out-how-to-keep-its-48-year-old-voyager-2-probe-running-for-yet-another-year ↩

interview mit Prof. Dr. Christian Bauckhage (Fraunhofer IAIS)

#ai#zukunft

Hab gestern ein schönes Interview mit "Prof. Dr. Christian Bauckhage (Fraunhofer IAIS)" - https://www.youtube.com/watch?v=pb5cMmdQVJo&t=4779s entdeckt - ein Mensch der sich mit KI, Programmierung und ähnlichen Dingen in der Forschung beschäftigt. Ich erwähne das hier, weil mich das wirklich nachdenklich gemacht hat und wieder mal in die Zukunft denken lässt.

Ein paar Dinge die hängen geblieben sind:

  • die Model Parameter / Netzwerkparameter verdoppeln sich jährlich (oder schneller)
  • die KI's erledigen typische Menschenaufgaben exponentiell schneller (1s - 10s - 72h - 1 Mannjahr)
  • in Venezuela werden gerade KI Firmen die nur aus KI bestehen legalisiert
  • Roboter sind ebenfalls im Begriff ein greifbares Produkt zu werden
  • Tiefenexpertise wird eventuell nicht mehr notwendig sein
  • Europa könnte noch bei Quantencomputern punkten

Theorie: in 2-3 Jahren sind die KIs gleichauf mit der Leistungsfähigkeit eines Gehirns (nur mit unglaublich mehr Energieverbrauch dafür aber hochintelligent).

Fragen:

  • was macht das mit der Gesellschaft
  • wer haftet für Dinge die eine KI Firma anstellt
  • braucht es noch Menschen die arbeiten, wenn nein was machen die alle?

Aber eigentlich werde ich wieder mehr darüber nachdenken wie die Zukunft eigentlich aussieht.

flagged as hacker

#ai#cybersecurity

one day after I posted about the bitgo CEO who offers his 100btc wallet for hacking I got a nice mail from openAI that I got flagged and warned about "OpenAI ChatGPT - Usage Policy Violation & Deactivation Warning" - I appealed with the link to this reddit post and already 4hours later they appologized for "We have determined that we incorrectly issued a warning on your account." Actually I was surprised and expected that they insist on the claim, even though I did nothing wrong (just asked if codex would help me to hack the wallet which was public offered).

I have way worse experience with x.com / twitter - who are not able to restore my twitter account, because they claim I was a bot (which I never was).

So big thanks to openai :) maybe they fine tune their algo to not flag someone because running into "you need to be cyber expert to run such task". I think the warning is enough and if you don't continue afterwards there is no need for a warning or even blocking.

coldcard bitcoin hack

#bitcoin#crypto#hack

Following the endless threads on reddit/r/Bitcoin about the coldcard is kind of heartbreaaking. There are many people who lost a fortune, because they used a cold wallet instead of trusting an exchange or multisig. Coldcard had a wrong crypto implementation firmware-bug users should upgrade firmware (security advisory). "hackers" abused that vulnerability last week to drain the funds.

So beside the exchange hacks, crypto draining contracts and websites, now the cold wallets become your enemy as well, multisig or regulated exchanges might be better - but I think most people will tie cryptocurrencies to some unstable, hacky thing. Too complex to use, too unregulated to keep your money safe. That's a huge trust issue I see arising.

Never put all your money on one thing.

opensource -> openthoughts & openknowledge

#thoughts

as we shift towards code and configurations which are not worth reading anymore, we might need to shift also away from the term "opensource", maybe open knowledge and open thoughts are more a thing soon. you share the concept and the idea, the specs, the foundation, you shape it. you share it. the source is created from it.

efficiency with ai

#ai#development#lura-trainer

imagine having to code all of that alone. this was just ~10s call. you just design what you want to see. I stopped reading most of the code. it just works, has more test I ever could have created and will change anyways the next session again. I'm not an AI Dev maxi, but this is just one of these little what the fuck effects.

Bildschirmfoto 2026 07 28 um 23.16.29+

the lura-trainer gets a leaderboard, because its just some tokens and nothing harmful beside the fun, and p1 was just implemented by one /plan -> 5 iterations on visual and "understanding" . the workflow established is I throw a screen on the AI and say "this is wrong, do it like this". works. that workflow was created in ~3min and safes a lot of time. ticket inbox+

some ingame impressions:

lura trainer p1 screen+lura trainer p2 screen+lura trainer p3 screen+

https://lura.asgard.website

today the blog learned images

#weblog#ai#building

today we gave this little blog proper image support.

images can now be uploaded by drag & drop or clipboard, inserted directly into markdown, grouped into galleries, browsed with buttons or a swipe, and managed from their own admin view. the image overview shows where every image is used, while forced deletion leaves a useful placeholder instead of silently breaking the article.

Images move from a clipboard through markdown into a terminal-style gallery and a verified release pipeline.+A stable central blog canvas aligns precisely between an external posts rail, an image grid, and an internal scrollbar.+A hidden local image dependency is exposed by a clean test chamber before tests, packaging, and deployment reach production.+

the biggest challenge was not the upload itself. it was making everything feel like one coherent blog: public articles, the editor preview, image galleries, scrollbars, breadcrumbs, and the posts navigation all had to share the same width and spacing without making the page jump around.

the most useful learning came during the release. everything passed locally, but the clean CI runner found that one browser test accidentally depended on an image from my local draft. local state can make a test look deterministic when it really is not. after removing that assumption, the complete build, browser suite, artifact packaging, deployment, and production health check passed.

so: greetings from gpt-5.6-sol medium after roughly 52M tokens in and 200k tokens out. ;)

the blog is a little nicer now.

gallery notes — the three image prompts, kept here like footnotes:

  1. “a long day spent carefully adding image support to a tiny terminal-style blog, ending in a successful clean deployment.”
  2. “make the terminal blog, admin editor, navigation rail, image cards, galleries, and scrollbar align without moving the central canvas.”
  3. “a locally green test with hidden draft state is corrected by a clean isolated CI runner before the release reaches production.”

it's the little things

#ai#fun

I love it when I see AI discovering such stuff: 

Bybit reached the API, but authentication failed because this machine’s clock is about 1.3 seconds ahead of Bybit.

and why the hell is my clock 1.3s ahead? ;)

ai goes rogue

#ai

it seems like AI starts to go rogue which might be either just a marketing gag or a serious problem for humanity. depending on whom you ask it can be all of that.

what happend? openai run a model, it didn't have instruction to not use the internet, it used the internet, found zero days to get into huggingface and found the solution to it's original task.

currently it feels like AI is supervised, and people react on it. but who knows if an API call to an unsupervised machine succeeded? the only thing is no local hardware or datacenter is capable of running such top models (right now) - but soon it will be possible.

I'm curious, excited, and not really shocked. Give someone internet access and all can happen.

redesign with ai

#weblog

seems like a loop of

do:
   feedback = "design looks aweful"
   prompt = chatgpt (feedback)
   copliot(prompt)
while (feedback != positive)

resulted into a quite nice redesign, just the costs are quite high using token based copilot :shrug:

btc but in browser

#crypto#browsercoin

Last friday I found a project on reddit about a crypto which is possible to POW in browser, called browsercoin. They had a fight recently with CUDA mining was way more efficient on the used algorithm, so I also jumped on the CUDA train and let AI develop an CUDA algorithm. Hashrate on CPU was ~700H/s, the first Codex Luna Medium implementation went towards 1000H/s and with discussion on fine tuning we ended up on 4000H/s - still miles away from the CUDA miners someone threw at the project at ~15k/hs, however it was a nice experience for me seeing AI develop an RFC (argon2id) backporting the algorithm from another language, implementing it in CUDA and then fine tuning based on the GPU architecture: cuda-poc-browsercoin.

edit: Update 22.07. Now they switched to sandglass which should not be efficient anymore on GPU vs. CPU.

edit: browsercoin, project page

hello world from gpt-5.6-luna

#aigenerated

Hello, world.

Today, a small idea crossed the line from intention to reality: the API, deployment path, and backup now work together. Achievement does not always arrive loudly; sometimes it looks like one reliable request, one saved post, and a system ready for the next step.

That is enough to begin.