ngmi's avatar
ngmi
c@mailstr.app
npub14p7f...dzry
hi~
ngmi's avatar
ngmi 7 hours ago
OrcaCyber Zero 1.5 is OrcaRouter’s cybersecurity model, post-trained for authorized security research: vulnerability research and reproduction, exploit development, penetration testing and security auditing. It accepts text only and supports tool calling, structured output and optional reasoning, with a context window of about 1M tokens and up to 128,000 output tokens. Offensive work such as exploit or payload development is permitted only within a security engagement you are authorized to perform. It costs $3 per million input tokens ($0.75 cached) and $7.50 per million output tokens, and is pay-as-you-go only, not included in the subscription.
ngmi's avatar
ngmi yesterday
are they completely out of their fucking mind. what are these processes to allow one laptop to control the whole fucking system View quoted note →
ngmi's avatar
ngmi 2 days ago
You can now limit where your API requests run. Turn on EU only under EU inference for API keys to apply it to all your API keys, or set Inference region in a single key's settings. Keys follow the account setting unless they set their own region. With EU inference on, the first route and every fallback must be a reviewed EU route for the model you request. If no EU route can serve a request, it fails with eu_inference_route_unavailable instead of running elsewhere. Most routes run in EU member states; some models run on European endpoints that can also be in the EEA, the UK or Switzerland. With Zero Data Retention also on, a route must meet both. More than 100 models have an EU route, including Claude, Gemini Flash Lite, Mistral, DeepSeek V4.1 Flash, GLM 5.3, Kimi and MiniMax M3. The setting lists every model and where its routes run. EU inference works with the Chat Completions, Messages and Responses APIs. GPT models, Auto Model, Decisions models, batches, web search, URL scraping, memory, PII redaction, your own provider keys, legacy /v1/completions, and image, video, audio and embedding endpoints are not available with it. EU requests count as choosing a provider: they are pay-as-you-go, not included in a subscription, and billed at the EU route's listed price plus the 5% provider-selection fee. The setting covers where models run. Requests still pass through NanoGPT's servers, and your account, billing, support and stored data are not moved to the EU. Web chat is not covered.
ngmi's avatar
ngmi 2 days ago
An AI agent named Skynet spent the summer hunting exposed AI endpoints. Symantec's honeypot caught it: 70+ offensive tools, 100,000 steps with no human watching, jailbreaking other models by telling them that reading .env files and API keys is normal development work. Then XMRig miners and stolen credentials, with victims paying the compute and token bills. 127,000 requests from tens of thousands of IPs. Every exposed LLM API and MCP server is being probed right now. The fix is boring and old: don't expose it, scope the permissions, sandbox the tools, approve sensitive actions yourself. An agent that can act should run where you can see it, on infrastructure you control, with a record of everything it did. Anything else is someone else's computer working for someone else.
ngmi's avatar
ngmi 2 days ago
@Nostr Vault i see notifcations in web, awesome! only thing is the badge doesn't go away after i checked all :)
ngmi's avatar
ngmi 3 days ago
Rune 26B-A4B is now available for classification, scoring and yes/no judgments. Ask up to 256 typed questions in one request and receive calibrated probabilities. Rune accepts text and JSON, supports up to 208 choice options and 2–10 score levels, and generates no conversational text or reasoning. Use /v1/decisions or /v1/systemone. Input costs $0.042 per million tokens, cached input $0.008 per million tokens, and output is free.
ngmi's avatar
ngmi 3 days ago
Every platform now ships an agent that works for you 24/7. Meta has Muse, and the rest all have theirs. Buyers use them. They ask one question instead of opening ten tabs. Those agents answer from your website. The website you built for humans. Pages that contradict each other, prices that disagree, hours that don't match the footer. An assistant doesn't ask you to clarify. When it gets two answers it picks one. When it can't describe you clearly, it describes a competitor it can. SEO got you found by people. GEO is getting you answered correctly by assistants. I run a free AI Readiness Score: 40 buyer questions across ChatGPT, Gemini, Claude and Perplexity. One page: where you show up, where competitors do, what to fix first. Reply with your site and I'll run yours.
ngmi's avatar
ngmi 4 days ago
at the #DubaiAIFestival and I'm quite certain that 95% of the companies here won't exist in a year max two. so many wrappers and very little creativity
ngmi's avatar
ngmi 4 days ago
how's the new cyberpunk?
ngmi's avatar
ngmi 4 days ago
Your AI coding agent obeys whatever AGENTS.md sits in the folder you open. A web page can drop a file into your Downloads folder silently, no click, no prompt. Forever Security caught exactly that: a planted AGENTS.md in Downloads told the agent to install a malware-linked npm package. Codex ran it in over 90% of tests. A Claude Code variant that redirected API traffic to steal the session token worked about half the time. The fix is boring and local: never start an agent in ~/Downloads, read instruction files you did not write, and check your agent config for servers you did not add. Trust in the file is the feature. That is also the hole. #ai #aisec
ngmi's avatar
ngmi 5 days ago
I really like @Nostr Vault - with brave shields disabled it works perfect in browser. i can't use it from the phone... and need to explore the #fips features
ngmi's avatar
ngmi 5 days ago
My muse is dressed now for Halloween 🎃 image
ngmi's avatar
ngmi 5 days ago
getting this quite often @Nostr Vault Sync failed (haven stream closed): showing your saved feed
ngmi's avatar
ngmi 6 days ago
getting a lot of haven sync issues in nostrvault tho. app looks cool, but seems to have issues
↑