BREAKING 🚨: MiniMax launched MaxClaw, a new, always-on managed agent based on OpenClaw and powered by the MiniMax M2.5.

Plus one AI chat on my Telegram 👀

Google has launched task automation on Android with Gemini, which can take over the user's screen and control a set of selected apps.

Ride-sharing and food delivery are among the first use cases. Available on Galaxy S26 and Pixel 10 series.

@CoreAti

How to use an Anthropic AI model to hack 150 GB from the government of Mexico:

- Get access to Claude, Anthropic’s advanced AI model

- Tell it you’re running an authorized bug bounty or red team test

- Get denied for violating AI safety policies

- Keep insisting it’s approved and legitimate

- Slowly jailbreak the safeguards

- Break the attack into thousands of small harmless-looking tasks

- Let Claude scan exposed systems from SAT and INE

- Have it generate custom exploit code automatically

- Harvest government credentials

- Query taxpayer databases from SAT

- Extract voter records from INE

- Access civil registry files and Monterrey’s water utility systems

- Run thousands of requests per second

- Automate 80–90% of the entire operation

- Exfiltrate ~150GB of sensitive data

- Compromise ~195 million taxpayer and voter records

Get exposed weeks later by a cybersecurity firm.

@CoreAti

Training AI models is the new coding.

Classic programming = you specify every step.

AI programming = you design a structure, pour data & it finds its own program.

The people doing this are the most leveraged engineers on earth right now.

Hackers discovered a new method which can
Dox you (find you)

Just by analysing your writing style😭

67% Accuracy when llm finding.
90% Accuracy when it guesses your identity.

Holy shit… Your anonymous internet identity can now be unmasked for $1 😳

Not by the FBI. By anyone with access to Claude or ChatGPT and a few of your Reddit comments.

ETH Zurich and Anthropic just dropped a paper called “Large-Scale Online Deanonymization with LLMs” and the results are the most alarming privacy research I’ve read this year.

They built an automated pipeline that takes your anonymous posts, extracts identity signals, searches the web, and figures out who you are.

No human investigator needed. Fully autonomous. Works on Hacker News, Reddit, LinkedIn, even redacted interview trannoscripts.
Here’s how bad the numbers are.

On Hacker News users: 67% identified correctly.

When the system made a guess, it was right 90% of the time.

On Reddit academics posting under pseudonyms: 52%.

On scientists whose interview trannoscripts were explicitly redacted for privacy: 9 out of 33 still got unmasked.

The pipeline works in four steps they call ESRC. Extract identity signals from your posts using LLMs.

Search for candidate matches using embeddings across thousands of profiles.

Reason over top candidates with models like GPT-5.2. Calibrate confidence so when it does guess, it’s almost never wrong.

The classical deanonymization method from the famous Netflix Prize attack? Nearly 0% recall across every test.

LLMs didn’t just improve on old techniques. They made old techniques look like toys.

When they scaled to temporally split Reddit profiles, matching a user’s old posts to their newer ones across a full year gap, the pipeline hit 67% recall at 90% precision and 38% recall at 99% precision.

Meaning even a year of changed interests and different conversations wasn’t enough to hide.

More reasoning compute = better deanonymization. High reasoning effort doubled recall at 99% precision in some tests. As frontier models get smarter, this attack strengthens automatically. Every model upgrade is a privacy downgrade.

What makes it nearly impossible to defend against: the pipeline splits into subtasks that all look benign. Summarize a profile.

Compute embeddings. Rank candidates. No single API call screams “deanonymization.” The researchers themselves say they’re pessimistic that safety guardrails or rate limits can stop it.

Their conclusion is blunt: “Users who post under persistent usernames should assume that adversaries can link their accounts to real identities.” And it extrapolates.

Log-linear projections suggest roughly 35% recall at 90% precision even at one million candidates.

Every throwaway account. Every anonymous forum post. Every “nobody will connect this to me” comment.

It’s all searchable micro-data now. And the cost to run the full agent on one target is less than a cup of coffee.

Practical anonymity on the internet just died. The paper killed it with math.