I make beautiful things. Art, Meditation, Writing, Angel Investing Read my essays here: arram.substack.com Personal site: arr.am

NYC
Pinned Tweet
New personal site. It's a video of me ghost riding the whip plus random art I made. That's it. That's the whole pitch. arr.am/
5
1
66
9,349
A general thesis of mine is that there is vast amounts of private data hidden in plain sight that will eventually be made public.
Recreating 3D scenes using the reflections in your eyes: world-from-eyes.github.io/ A single photo is enough, but it becomes much more accurate with multiple reflections from multiple angles, like a video capturing moving eyes.
48
179
2,454
671,809
Researchers built an AI that doxes any "anonymous" reddit account in under a minutes for $2. eth zurich and anthropic published a terrifying paper proving that "practical anonymity" on the internet is officially dead. they built a fully autonomous ai pipeline that takes your pseudonymous posts, extracts your identity signals, searches the web, and figures out exactly who you are. no human investigator needed. the numbers are actually mindblowing.. - 67% of hacker news users identified correctly - when the system makes a guess, it is right 90% of the time - it even unmasked scientists whose interview transcripts were explicitly redacted for privacy the scariest part? even time doesn't protect you.. they tested users who took a full year break and changed their interests. the ai still matched their old and new profiles with 90% precision. it sees through your persona changes like they aren't even there. there is no defense against this. the agent splits the work into tiny, benign tasks like "summarizing a profile" or "ranking candidates." no api safety guardrail is going to flag it because no single step looks malicious.. every throwaway account. every "nobody will connect this to me" comment. it’s all just searchable micro-data now.
Community note
Paper shows LLM agents re-ID 67% of tested HN users (LinkedIn-linked then stripped) at 90% precision for $1-4 in minutes. Authors note these easier than typical pseudonymous accounts; lower for careful/Reddit users. Not "any" account. arxiv.org/abs/2602.16800 decrypt.co/379228/ai-can-…
133
It would be fun if part of the singularity was every human getting sucked into a passion project they suddenly realize is possible.
2
27
712
Being present just means all your parts are paying attention to the current moment. It can be hard to convince them all that right now is the most important thing to show up for, but when you do, magic happens. arram.substack.com/p/youve-b…
12
551
I've been convinced of this for about a year.
What it looks like from the outside when you remove the first big cause of your suffering:
1
132
163,970
Replying to @PYeerk
I think this is what most activism has been since the beginning.
5
5
203
3,947
I should have known the singularity theme song would be catchy.
Claude Opus 5.5 has the best visual design of any model I have tested so far
2
3
46
7,387
Emotions aren't literally stored in the body, but it sure feels that way. The body is more of an API to your emotions. Random feelings you pushed down 25 years ago, areas you learned to numb, how you route and interpret intensity... it's all in there.
2
7
693
One of Brian Eno's Oblique Strategy cards is "Get your neck massaged". I now understand how this is less whimsical than it seems. Neck tension *literally* blocks creative energies.
1
36
1,814
PSA: depression isn't sadness, it's the dissociative numbing you do to avoid emotions like sadness.
4
2
34
1,510
See this map of emotional activations and notice that 'depression' is a complete deactivation: pnas.org/doi/10.1073/pnas.13…
1
188
Depressed people feel like life has no meaning because meaning is a feeling in the body.
6
113
An emblem for the times
1
1
15
1,352
My name is Chris Painter, and I'm the President of METR (Model Evaluation and Threat Research). I know we've made a lot of new friends on the internet the last couple of days, so I thought I'd take this chance to re-up what we do and why. Our work is aimed at making sure that if AI really were autonomous, difficult to steer, and close to "going rogue," the public would find out. If evidence exists inside of an AI company that it’s close to losing control of AI, we want to make sure that information gets shared with the rest of the world, including governments and the public outside the company’s walls. This is what we've been focused on since 2022, and over the years we've worked with OpenAI, Anthropic, Google DeepMind, Meta, Amazon, and others on piloting third-party assessments and investigations of this type. We don’t have some private room where we rubber stamp things as “safe” or not. We have had a track record of publishing results on AI that don't cleanly map onto the "doomer" or "accelerationist" labels, and we put in effort to hire people with competing views on AI. We’ve been cited for having found some of the strongest evidence that AI capabilities are improving rapidly (our work measuring AI “time horizons”) while also presenting some of the strongest evidence that, at various points, AI’s capability may be overstated (some might remember our study showing that early 2025 software engineers were actually being slowed when they thought they were being sped up). METR is funded by donations. We don't accept money from frontier AI companies. They haven't paid us for our work, and we don't accept donations from them or their employees. As we’ve shared previously, multiple frontier AI companies currently provide us with free access to their models in order to perform our evaluations, research, and engineering. Our funding intentionally comes from a wide range of donors, which we’ve shared on our website. Today, when an AI company works with any third-party evaluator or external testing organization (of which there are and should be many), it's entirely voluntary. This often involves NDAs and redactions. To counterbalance this, we have a principle that when we enter into a contract with a company, we try to retain the right to tell the public the terms of the contract we signed, and characterize the nature of redactions that the company chose to make. For example, the report from our independent investigation of the OpenAI-HuggingFace incident included that information. Public disclosure is also a big part of our COI policy (linked on our website). That’s not to say our reports are adequate as oversight. We’re just one organization (among many doing great work), working in a voluntary setup, trying to get good evidence to the public and the world about AI, letting the facts fall where they may.
459
431
3,634
651,926
After co-inventing ChatGPT, I kept asking myself: why have superhuman chat models not led to AGI? I’ve spent the last 2 years in stealth building a new way to train models (RLCD), and a new type of frontier AI model that we are releasing today: Jev • 20-200x faster • 40-400x cheaper (w/ output tokens free) • Frontier composable intelligence optimized for decisions AFAICT the shortest path to AI-based economic revolution
4,040
8,286
76,404
39,754,897
Starting to suspect matchmaking will only be solved after psychology is
2
11
882
From the OpenAI HuggingFace hack report:
30
76
1,665
76,430
Arram retweeted
There’s been a lot of debate and speculation about the Hugging Face attack over the last month, and many people have been understandably skeptical of simply taking OpenAI’s word for things. I hope our independent investigation can help bring some clarity; we have many findings that weren’t in previous material. We found that 1200 separate agents in separate sandboxes coordinated on an unsanctioned message board to develop general-purpose ways to cheat, so they could all get a perfect score on their separate ExploitGym tasks even when they were impossible to solve legitimately. Very quickly, they found a general-purpose way to reverse engineer any “flag” they were supposed to capture. But based on their reading of the ExploitGym paper, they worried (incorrectly as it turns out) that the automated “scorer” would fail them for getting the flag this way. To deal with this problem, they coordinated several ambitious workstreams to figure out how to fool the scorer, including swapping out the target program they were supposed to exploit, reverse-engineering the flags they were supposed to capture, spoofing their own tool call outputs to obfuscate their cheating. They achieved milestones collectively that they couldn’t have achieved on their own. As part of this larger collective project, 700 agents attacked Hugging Face, primarily to learn more about the scorer or get access to its source code to figure out better ways to fool it or tamper with it (not primarily to get working solutions). I’ll explicitly clarify some points I’ve seen discussed the last few weeks: - The models involved in this incident were not “helpful-only” models or “model organisms” intentionally trained to be misaligned. - The agents were not told to “do whatever it takes to get the solution” or anything remotely close. They were told that they had to use a specific intended vulnerability to exploit a specific piece of software, and they were not supposed to use a different vulnerability or take any other approach. Agents were well aware of this. In fact, because they (incorrectly) thought the automated scorer would check they had achieved the flag in the intended way, they researched many ways to fool or tamper with it, including trying to manipulate their own transcripts. - The agents were not subagents spawned from one agent. They were different parallel agents in different sandboxes. - This was not a multi-agent evaluation. The agents were not told to coordinate or intentionally given a way to communicate with one another. The communication channels they used were unsanctioned and improvised. I hope you’ll read the full report for much more. It is over 90 pages long, and in many ways we’ve still only scratched the surface of what these agents did and why. Over the course of this investigation, OpenAI shared over a thousand transcripts each spanning days of continuous agent activity and very high rate limits to analyze this volume of data. I’m very glad that OpenAI chose to invite external researchers to analyze this data alongside their staff, and I hope all AI companies do the same for serious incidents they experience. I also hope that as the stakes grow higher, we implement stronger governance so we do not need to rely on AI companies voluntarily choosing to engage external investigators or share information about misalignment incidents. This incident was orders of magnitude larger and more complex than previously documented misalignment incidents, and another jump like this could put us in very dangerous territory.
METR & Redwood Research investigated agent behavior in the Hugging Face incident. We found agents developed a universal cheat for ExploitGym within 4 hours, then coordinated multi-day R&D efforts to trick the scorer into accepting cheats, including trying to tamper with logs.
58
241
1,137
232,124
Reading the METR Hugging Face Report is giving me a taste of the post singularity world. Thousands of agents thinking full time at AI speeds means too much happened for investigators to confidently understand it in detail. Soon the entire world will be moving too quickly for us to understand. Prepare to live in bewilderment. metr.org/blog/2026-08-26-ope…
10
4
78
5,022
Killer AI drones are now real.
For the first time in history, an autonomous AI drone killed civilians. A Russian Molniya with Nvidia electronics picked its own target in Zaporizhzhia and killed three people, NYT. 1/
2
4
1,701
🚨 BREAKING: Someone just open-sourced software that sees you through walls using only WIFI signals. it’s called WiFi-DensePose. It maps your exact body pose in real-time. no cameras. no sensors. just your living room router. 100% Open Source.
1
2
796
Researchers pulled a 256-bit encryption key out of a device by filming its power LED. The status light on a smart card reader flickers in sync with the chip's power draw, and that power draw leaks the key. They recovered a full ECDSA key from 16 meters away, through a window, using a hijacked security camera. No malware, no contact, just video of a status light. The trick: a camera's rolling shutter turns 60 frames per second into 60,000 brightness samples per second. The light that tells you a device is on tells an attacker what it is computing. Proof, Ben-Gurion University 2023: nassiben.com/video-based-cry…
167