Open-weight AI models can exploit the patch gap

kept by eddie oct 30

Open-weight model GLM 5.3 exploited the Firefox patch gap, turning public security fixes into one-click exploits for six releases at about $1,000 each.

I Asked 100 Agents to Hack Me - by Shrivu Shankar
In a five‑hour test, ~100 abliterated open‑source agents compromised five of the author’s accounts via old‑project vulnerabilities and password brute‑forcing, but failed to breach tier‑0 services.
also on GLM-5.3, #cybersecurity, #open-source
Just say no to OpenAI and Anthropic
The author urges rejecting OpenAI and Anthropic due to privacy risks and oligarchic control, recommending open-weight LLMs served via private enclave providers like Tinfoil or Maple.
also on GLM-5.3, #open-source
Mouse on GLM-5.3-Flash
Mouse's open‑source harness achieved a 77% pass rate on FrontierHarness using GLM‑5.3‑Flash at $0.29 per run, close to top performers but far cheaper.
also on Z.ai, #open-source
Toward Recursive Self-Improvement: How GLM Built Its Own Inference Infrastructure
GLM developed a production inference service on over 100,000 domestically made AI accelerators to run its GLM-5.3‑Flash model and achieved significant performance gains through aggressive memory optimizations.
also on Z.ai, #ai
Just the Browser
Just the Browser provides configuration files and scripts to disable AI features, telemetry, sponsored content, and other annoyances in Chrome, Edge, and Firefox using group policies.
also on Google Chrome, #browser-engineering, #open-source, #ai