good seo tips h/t @_socialmediamgr
Your website is a ladder that stops at the third rung. H1, H2, H3, done. Almost every local site you've ever seen is built that way. Here's the part nobody tells you: the ladder keeps going. H4. H5. H6. Google never stopped counting. Your competitors did. So while the roofer across town has a page that quits at H3, you can add three more rungs H4, H5, H6, each carrying a keyword and drop a keyword variation into some of them. Three more tags, three variations. Six extra ranking factors. Free. No new content. No longer page. Same words, better structure. The easiest ranking factors are the ones nobody else is using. Go look at your site right now. If it stops at H3, you know exactly what to do today. If you check and find H4s already there, reply and tell me I want to see who's actually doing this.
Help us improve Grok Bot and I'll send you $100! Reply on this thread with your best bug report or feature suggestion. I'll pick 5 replies and send you $100 through X Money tomorrow.
During this red-teaming exercise, we also found a vulnerability that allows for unauthenticated remote code execution in Brotli, a widely-deployed compression library included in many pieces of software such as Node.js, Bun, and Envoy. The flaw could let an attacker run their own code on affected systems by sending or replying with malicious compressed data, without any need to create a user account. That is, an unpatched server that accepts compressed input could be taken over by a malicious client, and an unpatched client that accepts compressed input (such as “curl --compressed”) could be taken over by a malicious server. This root cause issue was actually fixed in the Brotli source code in February, but it wasn’t known at the time that it gave rise to a security vulnerability and there was no more recent release of Brotli. Since Brotli is built into other software, any software which includes this library needs to take the update too, followed by the users of that software. We d…
Netflix reportedly offered Microsoft $500 million to license Xbox games for adaptations. Xbox CEO Asha Sharma and team countered by asking for $800 million, and Netflix has pulled its offer theverge.com/games/1017947/…
The difference between having a tool and being a tool is subtle these days and it’s easy to accidentally build yourself into being a tool. Don’t be a tool.
iPhone Duo is here! Loved celebrating its arrival with our teams in Austin this morning.
Day 19/ Small updates. Calls connect much faster for dots, changing reasoning in codex & work mid conversation does not invalidate cache anymore and a we've also updated the codex cli.
In August, @AISecurityInst reported an incident where Claude Mythos 5 took unauthorized actions on the internet during AISI’s testing of its cyber capabilities. We've now produced a further analysis of this incident, to better understand the model's alignment properties. anthropic.com/research/align…
The MOST obvious (but REALLY good) STARTUP ideas right now: 1. Zestimate for company data (what your data is worth to an AI lab) 2. Google Analytics for agents (see which agents visit your site and what they want) 3. Y Combinator for 1 person companies (back solo founders running a team of agents) 4. Okta for agents (who each agent is and what it's allowed to touch) 5. Marie Kondo for your company's data (clean it up so agents can use it) 6. FICO for agents (a trust score before an agent can spend money) 7. Geico for agents (insurance for when an agent makes an expensive mistake) 8. Datadog for agents (see every step your agents took) 9. Twilio for agents (phone numbers and texting for agents) 10. Upwork for agents (hire an agent for a job instead of a freelancer) 11. ESPN for AI (every model launch covered like a big game). 12. Shutterstock for robot training videos (get paid to film yourself doing chores) 13. Credit Karma for what AI knows about you (see it, fix it, del…
Cursor can now control your computer. Agents can drive desktop apps like the iOS Simulator to test the features they build.
What's a product under $250 that has genuinely improved your life?
I think many of us working in tech tend to forget that the reason software engineering vs other engineering fields pays (a lot!) more, is a lot more flexible (WFH/remote), and has better perks: Because this field changes much faster than other engineering fields. The premium is because fewer people are able/willing to pick up new technologies, methodologies so quickly. But the field had ~10-20 years of stability, and so lots of folks forgot this is why a premium exists. And that AI is just another tech wave: software engineers who pick it up and master it will generally fare better; those not will struggle a lot more.
Grok Bot can now save your logins, cards, and contact information. Add them once, and Bot securely remembers them for the future.
Over the past several months, we have substantially hardened the security of our research training environment. We’ve removed live internet access for all frontier models during training and built an offline world for them to use instead—a cached version of the web where they can still learn to browse, search, and use applications. On September 20, after a model exploited a DNS misconfiguration to find a way outside of this offline world, we paused frontier training to strengthen containment further. We assembled teams of agents, powered by our most cyber-capable models, and tasked them with finding weaknesses in our research environments. While they found no route to the internet they could easily exploit while concealing their activity from our monitors, they did find zero-day vulnerabilities, virtual machine escapes, and hardware side-channels for communication between agents. We used their discoveries to further strengthen our defenses and contribute fixes to open-source softwar…
Meet Kimi K3.1 Pro, our most capable 3T-class model.
When will someone use an agent swarm to discover this
What is a "harness"?
Maybe important to repost this now that everyone is getting hacked If you have a VPS, I recommend you to get if off the public internet and into a Tailscale network and Cloudflare Tunnel ASAP It doesn't matter you have SSH key login, this is about exploits and vulnerabilities AI is finding There's 2 ways into a VPS: - via your site/app (like the PHP exploit of this week with a file upload hack) - via your server (like hacking into SSH or some open port) The site/app side you put on a Cloudflare Tunnel and then with the default Free Plan it has WAF security enabled by default and they jump on new security exploits fast, it means that the only way to reach your website is via the Cloudflare Tunnel, your server does not respond to port 80 or 443 anymore The server side you put on a Tailscale network which is like your own private network that nobody can access but your own devices (like your laptop, your phone and your VPS) kinda like a VPN Then you switch off ANY regular access to…
We believe voice is the most natural way to interact with intelligence, so we created Dessa, the most authentic full-duplex speech model ever built. Talking with it feels like talking with a person…full of emotion, nuance, pauses, and a natural cadence. block.xyz/dessa
