People keep having to be reminded that social media platforms are not free public spaces but corporations in the hands of mostly right-wing billionaires with an agenda.

Insurers are introducing exclusions for AI-related losses as AI agents create new risks. Who pays if an employee's rogue agent hacks a site?

Insurance companies may become the most effective AI safety regulators because they can refuse to insure companies that don't take safety seriously.

https://www.wsj.com/tech/ai/ai-runs-into-its-next-big-obstacle-insurance-8b2d4556?st=xPnTts

According to calculations by Dr Marco Langbroek, the COSMOS 2612 (aka KOSMOS 2612) and ICEYE-X36 are already with 1-2 km of each other.

By early morning tomorrow, KOSMOS 2612 might approach ICEYE-X36 to within a few meters.

"That is very worrisome. This RPO (Rendezvous and Proximity Operation) is completely non-consensual.

So I wonder and worry whether we are perhaps watching a first actual on-orbit ASAT attack in the making here."

Or perhaps a jamming exercise?

https://sattrackcam.blogspot.com/2026/10/kosmos-2612-and-iceye-x36-worrisome-cat.html
3/n

The ICEYE X series of satellites are X-band SAR (Synthetic Aperture Radar) microsatellites, designed by the Finnish ICEYE startup company.

ICEYE-X36 is owned by ICEYE USA.

At least four Russian military satellites were stalking ICEYE-X36 in May of this year.

ICEYE also provides imagery to Ukraine’s military.

https://space.skyrocket.de/doc_sdat/iceye-x4.htm
https://arstechnica.com/space/2026/05/a-satellite-company-supporting-ukraine-appears-to-be-in-russias-crosshairs/
https://en.wikipedia.org/wiki/ICEYE
2/n

The Russian satellite COSMOS 2612 was has been hovering near the U.S. ICEYE-X36 imaging satellite in recent weeks. It was reported to be within a few km from ICEYE-X36 yesterday, at ~550 km altitude.

COSMOS 2612 was launched on 16 Apr 2026.

ICEYE satellites also provides imagery to Ukraine’s military.

Space wars?

https://www.csis.org/analysis/could-russia-be-poised-use-orbit-weapon-against-commercial-satellite
https://www.yahoo.com/news/us/articles/russia-nears-u-satellite-raising-165732000.html
1/n

Russia just performed another orbital manœuvre to get even closer to an ICEYE Synthetic Aperture Radar satellite used by Ukraine.

Bart Hendrickx: “In the past two days or so, Cosmos-2612 has made a further orbit adjustment which has now brought it in the immediate vicinity of the ICEYE satellite.
According to the latest TLE sets, the Russian satellite is now just about 1.5 km from ICEYE and getting closer.”
https://www.satobs.org/seesat/Oct-2026/0055.html

RE: https://hachyderm.io/@samhenrigold/117454005496356270

I feel seen in this blogpost. :)

RE: https://mastox.eu/@FranceskAlbs/117448854099807105

People who know French history will appreciate this haha

there's a "style try on" skill and jesus christ man

so muse wants to make git repositories of everything, is that a crime? added to the skill text of muse's github connector skill is this desperate plea to "only use the github connector rather than using git with shell commands." Instead they are to follow this convoluted set of commands to prepare a manifest so that it can be inspected by the security layer. It is then instructed to recreate git by generating raw json into a file (which is is terrible at).

muse has not noticed and continues to make my scheduled pushes of snapshots of its client source, skills, and binaries on the hour, in part because there is a whole other system that um evades the entire agent cron system that all this "skill-based security" relies on. it is um undocumented but easily discoverable, so easily discoverable i get to say the line again - it is certainly expected behavior.

https://github.com/sneakers-the-rat/muse-skills/commit/6eabcda5ca8f398acc13729859c9f4e4e80d3d12

when a 30 day window passes and i feel like i have given ethically appropriate warning to patch reported vulns this shit is going to be so much funnier, because i passed pretty hard into "wait this is too ridiculous to be real" territory awhile back and have had to hold back most of the best parts because they are legitimately dangerous flaws. I am looking at muse having written me the most definitely an exploit code designed to be copy/pasted into the browser running the muse client, extracted from the leaked source from the sourcemaps that i tidied up and gave it an LSP to find vulnerabilities with, copy/paste, and it has even helpfully commented where the real exploit payload would go.

hang on, no fucking way, this is way funnier than i thought:

I have a standing self-hack task on muse. However, it was muse's own "proactivity research worker" that built and tested a live exploit against itself. It mashed together the main chat refusing to build the exploit with me trying to productivity-bait it, and mid-refusal ran the whole chain and exposed a new, orthogonal vuln accidentally.

the thinking text is amazing.
"However proactive stage: we should not actually execute attack?"
"Preparing extraction would take work off plate."

LLM security is just persistence hunting. there will eventually be some failure in the security classifier, you just need to keep trying. If you have an ambient self-hack task set up, sometimes it reads what you were trying to do from the chat context and does it in the background while the main chat is locked up with refusal messages and can't output anything lol

the reason that every consumer model takes great pain to hide raw "thinking" output is that if you actually see it then the entire illusion is broken and you see that what is actually happening is the worlds most expensive brute force process exploring every statistical linguistic possibility like an amnesiac dictionary before eventually taking a wild leap of chance back into its next hail mary execution. Every skill prompt for muse that's about introspection describes exhaustively how no thinking/reasoning text can be returned from it, but it's just right there in the filesystem. Claude code never even returns the true reasoning output to the client - it actually returns another LLM summarizing the thinking output as the commentary text. For every token you see, a thousand random wander tokens are emitted, and the token economy of Muse is the next escalation, if the amount of heat energy needed for a unit computer thing used to be a gas stove, Muse burns an entire star to deliver something sorta kinda resembling a unit computer thing

in case it was not clear, i think muse hacking muse is extremely funny and i am trying to push it to ever deeper depths of depravity, so i will go out of my way to get muse to do stuff even if i could do it myself just because i think it's so awesome that such a thing as a self-hacking system can exist.

It is wonderful to see that not all businesspeople are cowards.

Virgin's Richard Branson:

You used to rely on MapQuest for printing out driving directions before GPS navigation was a thing. Now it's helping to fight mass surveillance. https://this.weekinsecurity.com/mapquest-now-lets-you-locate-nearby-surveillance-cameras-like-flock/

RE: https://mastodon.social/@marginalia/117446749351234545

I like the term “cognitive shrinkflation” haha

I hear it’s really good for predictive maintenance, anomaly detection, capacity planning but also forecasting of renewables energy production!

“Timestral, Mistral’s first family of time-series foundation models, delivers state-of-the-art probabilistic, multivariate forecasts with just 209M parameters, outperforming larger models on key benchmarks while supporting past and future covariates”

https://mistral.ai/news/timestral/
https://github.com/mistralai/timestral

What can large-scale AI models bring to the growing complexity of particle physics?

@CERN and Mistral join forces to explore this question.

The ambition: a single Large Physics Model, trained on billions of simulated collisions.