venturebeat.com

A developer gets a LinkedIn message from a recruiter. The role looks legitimate. The coding assessment requires installing a package. That package exfiltrates all cloud credentials from the developer’s machine — GitHub personal access tokens, AWS API keys, Azure service principals and more — are exfiltrated, and the adversary is inside the cloud environment within minutes.

Chinese AI startup Moonshot releases open-source Kimi K2 model that outperforms OpenAI and Anthropic on coding tasks with breakthrough agentic capabilities and competitive pricing.

GitHub: https://github.com/MemTensor/MemOS

Archive link: https://archive.ph/9FNHU

This is a follow-up to my post https://beehaw.org/post/19691634 "Engagement Poisoning of ChatGPT", where I argued that ChatGPT’s responses had become cluttered with diplomatic phrasing, unsolicited compliments, emojis, and performative friendliness. OpenAI has now acknowledged that ChatGPT-4o exaggerated it. I’m sure it’s still too much for me. I’ll stick to the prompt that makes ChatGPT go cold as described in my previous post.

As announced in December, Kim said the company is co-developing Android XR ecosystem with Google to change the way we interact with the physical and virtual worlds. They will define the operating system, user interface and hardware.

Good quote at the end IMO:

In a new paper published on the open access and non-peer reviewed site arXiv.org, co-authors Ronen Eldan of Microsoft Research and Mark Russinovich of Microsoft Azure propose a new way of editing or removing knowledge of copyrighted works by erasing specific information from a sample LLM — namely, all knowledge of the existence of the Harry Potter books (including characters and plots) from Meta’s open source Llama 2-7B.