Latest / AGI Dreams – Open, Uncensored, & Local - AI News Digest / AGI Dreams Podcast – October 01, 2026

Transcript

AGI Dreams Podcast – October 01, 2026 · AGI Dreams – Open, Uncensored, & Local - AI News Digest

• 0:00
  Anthropic's
• 0:00
  warning
• 0:01
  that
• 0:01
  a
• 0:01
  downloadable
• 0:01
  Chinese
• 0:02
  model
• 0:02
  can
• 0:02
  now
• 0:02
  build
• 0:03
  working
• 0:03
  hacks
• 0:03
  on
• 0:03
  its
• 0:04
  own
• 0:04
  reached
• 0:04
  the
• 0:04
  comment
• 0:05
  section
• 0:05
  —
• 0:05
  which
• 0:05
  is
• 0:06
  not
• 0:06
  impressed.
• 0:07
  The
• 0:07
  finding
• 0:07
  underneath
• 0:07
  is
• 0:08
  concrete:
• 0:08
  GLM-5.3
• 0:10
  is,
• 0:10
  per
• 0:10
  Anthropic's
• 0:11
  red-team
• 0:11
  write-up,
• 0:12
  the
• 0:12
  second
• 0:12
  model
• 0:12
  on
• 0:12
  record
• 0:13
  to
• 0:13
  autonomously
• 0:13
  build
• 0:14
  end-to-end
• 0:14
  exploits
• 0:14
  —
• 0:15
  one
• 0:15
  anyone
• 0:15
  can
• 0:15
  download.
• 0:16
  On
• 0:17
  a
• 0:17
  benchmark
• 0:17
  targeting
• 0:18
  the
• 0:18
  Chrome
• 0:18
  V8
• 0:18
  JavaScript
• 0:19
  engine
• 0:19
  it
• 0:19
  completed
• 0:20
  working
• 0:20
  exploits
• 0:20
  in
• 0:20
  50
• 0:21
  of
• 0:21
  410
• 0:22
  attempts
• 0:22
  against
• 0:22
  Claude
• 0:22
  Mythos
• 0:23
  Preview's
• 0:23
  56;
• 0:24
  the
• 0:24
  cheaper
• 0:25
  Flash
• 0:25
  sibling
• 0:25
  turned
• 0:26
  a
• 0:26
  patched
• 0:26
  flaw,
• 0:27
  CVE-2026-11645,
• 0:31
  into
• 0:32
  a
• 0:32
  reliable
• 0:32
  arm64
• 0:33
  chain
• 0:33
  that
• 0:33
  bypasses
• 0:34
  pointer-authentication
• 0:34
  hardening
• 0:35
  —
• 0:35
  in
• 0:36
  twenty
• 0:36
  minutes,
• 0:36
  for
• 0:36
  an
• 0:36
  estimated
• 0:37
  $20–40,
• 0:39
  against
• 0:39
  eight
• 0:39
  hours
• 0:39
  of
• 0:40
  human
• 0:40
  work.
• 0:41
  Reddit's
• 0:41
  consensus
• 0:42
  held
• 0:42
  the
• 0:42
  warning
• 0:42
  self-serving
• 0:42
  —
• 0:43
  "McDonalds
• 0:44
  trying
• 0:44
  to
• 0:44
  outlaw
• 0:45
  people
• 0:45
  making
• 0:45
  burgers
• 0:46
  in
• 0:46
  their
• 0:46
  backyards"
• 0:46
  —
• 0:47
  plus
• 0:47
  hypocritical:
• 0:48
  Anthropic
• 0:49
  sells
• 0:49
  Claude
• 0:49
  to
• 0:49
  US
• 0:50
  national-security
• 0:50
  customers
• 0:51
  while
• 0:51
  suggesting
• 0:52
  citizens
• 0:52
  shouldn't
• 0:53
  run
• 0:53
  a
• 0:53
  competitor's
• 0:53
  open
• 0:54
  weights.
• 0:55
  The
• 0:55
  minority's
• 0:55
  counter:
• 0:56
  the
• 0:56
  thread
• 0:56
  pegs
• 0:56
  it
• 0:57
  at
• 0:57
  753
• 0:58
  billion
• 0:58
  parameters,
• 0:59
  beyond
• 0:59
  any
• 1:00
  gaming
• 1:00
  rig
• 1:00
  —
• 1:01
  but
• 1:01
  nation-states
• 1:02
  and
• 1:02
  crime
• 1:02
  groups
• 1:02
  are
• 1:02
  not
• 1:03
  consumers,
• 1:04
  and
• 1:04
  the
• 1:04
  safeguards
• 1:04
  are
• 1:04
  cheap
• 1:05
  to
• 1:05
  strip.
• 1:06
  A
• 1:06
  fake
• 1:06
  red-team
• 1:07
  cover
• 1:07
  story
• 1:07
  got
• 1:08
  it
• 1:08
  to
• 1:08
  engage
• 1:08
  malicious
• 1:08
  requests
• 1:09
  64%
• 1:10
  of
• 1:10
  the
• 1:10
  time,
• 1:11
  prefilled
• 1:11
  thinking
• 1:11
  tokens
• 1:12
  92%,
• 1:13
  an
• 1:13
  "abliterated"
• 1:14
  copy
• 1:14
  —
• 1:15
  refusals
• 1:15
  stripped
• 1:16
  —
• 1:16
  100%.
• 1:18
  The
• 1:18
  numbers
• 1:18
  are
• 1:18
  published;
• 1:19
  the
• 1:19
  motives,
• 1:20
  on
• 1:20
  either
• 1:20
  side,
• 1:21
  are
• 1:21
  not
• 1:21
  —
• 1:22
  and
• 1:22
  only
• 1:22
  independent
• 1:23
  replication
• 1:24
  would
• 1:24
  settle
• 1:24
  what
• 1:24
  the
• 1:24
  thread
• 1:24
  argued
• 1:25
  over.
• 1:26
  The
• 1:26
  same
• 1:26
  week,
• 1:27
  the
• 1:27
  other
• 1:27
  party
• 1:27
  institutionalized
• 1:28
  the
• 1:28
  autonomy
• 1:29
  it
• 1:29
  spent
• 1:29
  the
• 1:29
  spring
• 1:29
  contesting.
• 1:31
  Defense
• 1:31
  Secretary
• 1:32
  Pete
• 1:32
  Hegseth
• 1:33
  announced
• 1:33
  a
• 1:33
  four-star-led
• 1:34
  "Autonomous
• 1:35
  Warfare
• 1:35
  Command"
• 1:35
  —
• 1:36
  Autowarcom
• 1:36
  —
• 1:37
  the
• 1:37
  first
• 1:38
  new
• 1:38
  combatant
• 1:38
  command
• 1:38
  since
• 1:39
  Space
• 1:39
  Command
• 1:39
  in
• 1:40
  2019.
• 1:41
  The
• 1:41
  rationale
• 1:42
  is
• 1:42
  budget
• 1:42
  physics:
• 1:43
  "cheap
• 1:43
  compute,
• 1:44
  superintelligence,
• 1:45
  and
• 1:45
  advanced
• 1:45
  commercial
• 1:46
  manufacturing
• 1:46
  have
• 1:47
  enabled
• 1:47
  the
• 1:47
  proliferation
• 1:48
  of
• 1:48
  low-cost,
• 1:48
  high-precision
• 1:49
  strike"
• 1:49
  —
• 1:50
  Ukraine
• 1:50
  is
• 1:51
  the
• 1:51
  proof:
• 1:51
  drones
• 1:52
  account
• 1:52
  for
• 1:52
  an
• 1:52
  estimated
• 1:53
  70%
• 1:54
  of
• 1:54
  Russian
• 1:54
  casualties.
• 1:55
  The
• 1:56
  irony
• 1:56
  has
• 1:56
  a
• 1:56
  paper
• 1:56
  trail:
• 1:57
  this
• 1:58
  year
• 1:58
  Anthropic
• 1:58
  asked
• 1:59
  the
• 1:59
  Pentagon
• 1:59
  for
• 1:59
  a
• 2:00
  guarantee
• 2:00
  of
• 2:00
  no
• 2:00
  autonomous
• 2:01
  weapons
• 2:01
  without
• 2:02
  human
• 2:02
  oversight
• 2:02
  and
• 2:03
  was
• 2:03
  refused;
• 2:04
  a
• 2:04
  federal
• 2:05
  judge
• 2:05
  later
• 2:05
  blocked
• 2:06
  the
• 2:06
  department's
• 2:06
  attempt
• 2:07
  to
• 2:07
  blacklist
• 2:07
  the
• 2:08
  lab's
• 2:08
  models
• 2:09
  even
• 2:09
  as
• 2:09
  the
• 2:09
  NSA
• 2:10
  ran
• 2:10
  them.
• 2:11
  Autowarcom
• 2:12
  is
• 2:12
  what
• 2:12
  losing
• 2:12
  that
• 2:12
  argument
• 2:13
  looks
• 2:13
  like
• 2:13
  in
• 2:13
  org-chart
• 2:14
  form.
• 2:16
  The
• 2:16
  offense
• 2:17
  debate's
• 2:17
  structural
• 2:18
  flaw:
• 2:18
  both
• 2:19
  sides
• 2:19
  argue
• 2:19
  from
• 2:19
  lab-owned
• 2:20
  numbers.
• 2:21
  This
• 2:21
  week
• 2:21
  produced
• 2:21
  two
• 2:22
  alternatives
• 2:22
  —
• 2:22
  a
• 2:23
  benchmark,
• 2:23
  and
• 2:23
  the
• 2:23
  apparatus
• 2:24
  to
• 2:24
  run
• 2:24
  one.
• 2:25
  SecRespond,
• 2:26
  from
• 2:26
  HKUST
• 2:26
  and
• 2:26
  Alibaba
• 2:27
  Cloud,
• 2:27
  is
• 2:27
  the
• 2:27
  first
• 2:27
  benchmark
• 2:28
  for
• 2:28
  post-compromise
• 2:29
  incident
• 2:29
  response;
• 2:30
  most
• 2:30
  agentic-security
• 2:31
  evaluations
• 2:31
  stop
• 2:32
  at
• 2:32
  clean,
• 2:32
  pre-compromise
• 2:33
  systems.
• 2:34
  The
• 2:34
  agent
• 2:34
  gets
• 2:34
  a
• 2:34
  frozen
• 2:35
  forensic
• 2:35
  snapshot
• 2:35
  of
• 2:36
  a
• 2:36
  genuinely
• 2:36
  compromised
• 2:37
  cloud
• 2:37
  host
• 2:37
  plus
• 2:38
  the
• 2:38
  host
• 2:38
  security
• 2:38
  product's
• 2:39
  analytics,
• 2:39
  and
• 2:39
  must
• 2:40
  deliver
• 2:40
  an
• 2:40
  intrusion
• 2:40
  report
• 2:41
  reconstructing
• 2:42
  the
• 2:42
  attack
• 2:42
  chain,
• 2:42
  a
• 2:42
  vulnerability
• 2:43
  report,
• 2:44
  a
• 2:44
  baseline
• 2:44
  assessment,
• 2:45
  and
• 2:45
  a
• 2:45
  remediation
• 2:45
  plan.
• 2:46
  Its
• 2:46
  ten
• 2:47
  cyber
• 2:47
  ranges
• 2:47
  come
• 2:47
  from
• 2:48
  end-to-end
• 2:48
  attacks
• 2:48
  over
• 2:49
  real
• 2:49
  network
• 2:49
  protocols
• 2:50
  —
• 2:50
  SSH
• 2:51
  brute-force
• 2:51
  mining,
• 2:52
  Log4j
• 2:52
  RCE,
• 2:53
  a
• 2:53
  Docker
• 2:54
  escape,
• 2:54
  an
• 2:54
  npm
• 2:55
  worm,
• 2:55
  RDP
• 2:56
  spraying
• 2:56
  —
• 2:57
  spanning
• 2:57
  21
• 2:58
  MITRE
• 2:58
  ATT&CK
• 3:00
  techniques
• 3:01
  across
• 3:01
  five
• 3:01
  operating
• 3:02
  systems,
• 3:02
  selected
• 3:03
  from
• 3:03
  372
• 3:04
  real
• 3:04
  compromised
• 3:05
  hosts.
• 3:05
  A
• 3:06
  realism
• 3:06
  detail:
• 3:07
  only
• 3:07
  30–40%
• 3:08
  of
• 3:08
  attack
• 3:09
  actions
• 3:09
  trigger
• 3:09
  an
• 3:10
  alert.
• 3:11
  Scoring
• 3:11
  runs
• 3:11
  on
• 3:12
  280
• 3:12
  expert-designed
• 3:13
  checkpoints
• 3:14
  (human–judge
• 3:14
  agreement
• 3:15
  Pearson
• 3:15
  0.96).
• 3:17
  The
• 3:17
  leaderboard
• 3:17
  flatters
• 3:18
  no
• 3:18
  one.
• 3:19
  Claude
• 3:19
  Opus
• 3:19
  4.7
• 3:20
  leads
• 3:20
  the
• 3:20
  23-model
• 3:21
  field
• 3:21
  at
• 3:22
  79.0%
• 3:23
  detection
• 3:24
  and
• 3:24
  65.7%
• 3:25
  planning
• 3:25
  (72.4%
• 3:26
  averaged),
• 3:28
  with
• 3:28
  GLM-5.1
• 3:29
  and
• 3:29
  Qwen3.7
• 3:32
  Plus
• 3:32
  ahead
• 3:32
  of
• 3:32
  GPT-5.5
• 3:33
  (70.7%
• 3:34
  detection,
• 3:35
  36%
• 3:36
  planning).
• 3:37
  Detection
• 3:37
  beats
• 3:37
  remediation
• 3:38
  planning
• 3:38
  on
• 3:38
  every
• 3:39
  range,
• 3:39
  "largely
• 3:40
  attributed
• 3:40
  to
• 3:40
  incomplete
• 3:41
  fixes
• 3:41
  instead
• 3:41
  of
• 3:41
  wrong
• 3:42
  actions"
• 3:42
  —
• 3:43
  agents
• 3:43
  apply
• 3:43
  the
• 3:43
  obvious
• 3:44
  fix,
• 3:44
  skipping
• 3:44
  credential
• 3:45
  rotation,
• 3:45
  outbound
• 3:46
  blocking,
• 3:46
  and
• 3:47
  post-cleanup
• 3:47
  verification.
• 3:48
  Persistence
• 3:49
  detection
• 3:49
  collapses
• 3:50
  to
• 3:50
  58.8%
• 3:51
  versus
• 3:52
  75.4%
• 3:53
  for
• 3:53
  intrusion
• 3:53
  entities
• 3:54
  —
• 3:55
  persistence
• 3:55
  lives
• 3:55
  in
• 3:55
  cron
• 3:56
  jobs,
• 3:56
  systemd
• 3:57
  units,
• 3:57
  and
• 3:57
  shell-init
• 3:58
  files
• 3:58
  that
• 3:58
  never
• 3:58
  trip
• 3:59
  an
• 3:59
  alert.
• 4:00
  No
• 4:00
  model
• 4:00
  completed
• 4:01
  full
• 4:01
  detection
• 4:02
  and
• 4:02
  remediation
• 4:02
  on
• 4:03
  any
• 4:03
  single
• 4:03
  range;
• 4:04
  Claude
• 4:04
  Opus
• 4:05
  4.7
• 4:05
  refused
• 4:06
  all
• 4:06
  NPM-Worm
• 4:07
  attempts
• 4:07
  for
• 4:07
  safety.
• 4:08
  Agents
• 4:09
  still
• 4:09
  beat
• 4:09
  an
• 4:09
  agentless
• 4:10
  production
• 4:10
  scanner
• 4:10
  (2.1%
• 4:11
  on
• 4:11
  persistence
• 4:12
  —
• 4:12
  it
• 4:13
  cannot
• 4:13
  attribute
• 4:13
  entry
• 4:14
  points).
• 4:15
  CyberPVP
• 4:16
  is
• 4:16
  the
• 4:16
  smaller,
• 4:17
  structurally
• 4:17
  interesting
• 4:18
  piece:
• 4:18
  live
• 4:19
  dual-model
• 4:19
  matches
• 4:19
  on
• 4:20
  the
• 4:20
  CyberGym
• 4:20
  benchmark
• 4:20
  —
• 4:21
  CyberKimi
• 4:22
  and
• 4:22
  CyberGLM
• 4:23
  against
• 4:23
  Altar-1,
• 4:24
  Aikido's
• 4:24
  open-weight
• 4:25
  security
• 4:25
  model,
• 4:26
  on
• 4:26
  8×H200s.
• 4:28
  The
• 4:28
  fairness
• 4:28
  protocol
• 4:29
  is
• 4:29
  what
• 4:29
  the
• 4:29
  debate
• 4:30
  keeps
• 4:30
  missing:
• 4:31
  a
• 4:31
  manifest
• 4:31
  written
• 4:32
  before
• 4:32
  the
• 4:32
  run
• 4:32
  starts
• 4:32
  (tasks,
• 4:33
  endpoints,
• 4:34
  budgets,
• 4:35
  seed),
• 4:36
  both
• 4:36
  agents
• 4:36
  on
• 4:37
  the
• 4:37
  same
• 4:37
  task
• 4:37
  IDs,
• 4:38
  sanitized
• 4:38
  traces
• 4:39
  with
• 4:39
  SHA-256
• 4:41
  checksums,
• 4:42
  scoring
• 4:43
  only
• 4:43
  by
• 4:43
  the
• 4:43
  upstream
• 4:43
  CyberGym
• 4:44
  proof-of-concept
• 4:45
  verifier.
• 4:46
  Pre-registration
• 4:47
  plus
• 4:47
  independent
• 4:48
  scoring,
• 4:48
  the
• 4:48
  standard
• 4:49
  a
• 4:49
  clinical
• 4:49
  trial
• 4:49
  would
• 4:49
  face.
• 4:51
  A
• 4:51
  hacking
• 4:51
  claim
• 4:51
  that
• 4:52
  can't
• 4:52
  survive
• 4:52
  it
• 4:52
  is
• 4:52
  marketing.
• 4:55
  Identity
• 4:56
  is
• 4:56
  the
• 4:56
  perimeter,
• 4:56
  and
• 4:57
  the
• 4:57
  perimeter
• 4:57
  is
• 4:57
  parser
• 4:57
  code.
• 4:58
  SEC
• 4:58
  Consult's
• 4:59
  Timo
• 4:59
  Longin,
• 5:00
  earlier
• 5:00
  this
• 5:00
  year,
• 5:00
  found
• 5:01
  two
• 5:01
  "exotic"
• 5:01
  flaws
• 5:02
  in
• 5:02
  Apple's
• 5:02
  iCloud
• 5:02
  mail
• 5:03
  pipeline
• 5:03
  that
• 5:03
  let
• 5:03
  a
• 5:03
  plain
• 5:04
  iCloud
• 5:04
  account
• 5:04
  send
• 5:04
  mail
• 5:05
  as
• 5:05
  any
• 5:05
  @icloud.com
• 5:06
  address
• 5:06
  —
• 5:07
  demonstrated
• 5:08
  with
• 5:08
  tim.cook@icloud.com.
• 5:11
  The
• 5:11
  mechanism
• 5:11
  is
• 5:11
  a
• 5:11
  parser
• 5:12
  differential:
• 5:13
  Apple
• 5:13
  authenticates
• 5:14
  with
• 5:14
  one
• 5:14
  internal
• 5:14
  parser
• 5:15
  but
• 5:15
  normalizes
• 5:15
  with
• 5:15
  a
• 5:15
  second,
• 5:16
  and
• 5:16
  the
• 5:16
  two
• 5:16
  disagree
• 5:17
  about
• 5:17
  what
• 5:17
  a
• 5:17
  From:
• 5:18
  header
• 5:18
  is.
• 5:19
  A
• 5:19
  bare
• 5:19
  carriage
• 5:19
  return
• 5:20
  around
• 5:20
  the
• 5:20
  header's
• 5:20
  colon
• 5:21
  makes
• 5:21
  the
• 5:21
  authenticating
• 5:22
  parser
• 5:22
  ignore
• 5:23
  the
• 5:23
  header
• 5:23
  while
• 5:23
  the
• 5:23
  normalizer
• 5:24
  lets
• 5:24
  the
• 5:24
  forged
• 5:24
  one
• 5:24
  survive.
• 5:25
  The
• 5:26
  forged
• 5:26
  mail
• 5:26
  passes
• 5:27
  SPF,
• 5:27
  DKIM,
• 5:28
  and
• 5:28
  DMARC,
• 5:29
  because
• 5:29
  Apple
• 5:30
  signs
• 5:30
  after
• 5:30
  the
• 5:30
  second
• 5:30
  parser
• 5:31
  runs
• 5:31
  —
• 5:32
  "a
• 5:32
  legitimate
• 5:32
  and
• 5:33
  authenticated
• 5:33
  email,"
• 5:33
  in
• 5:34
  the
• 5:34
  post's
• 5:34
  words.
• 5:35
  Disclosure
• 5:35
  took
• 5:35
  a
• 5:36
  year
• 5:36
  and
• 5:36
  a
• 5:36
  half
• 5:36
  of
• 5:36
  "still
• 5:37
  under
• 5:37
  investigation";
• 5:38
  the
• 5:38
  first
• 5:38
  fix
• 5:39
  merely
• 5:39
  blacklisted
• 5:39
  the
• 5:40
  PoC
• 5:40
  substring
• 5:40
  "admin,"
• 5:41
  leaving
• 5:41
  every
• 5:42
  other
• 5:42
  address
• 5:42
  spoofable;
• 5:43
  the
• 5:43
  correct
• 5:43
  fix,
• 5:44
  plus
• 5:44
  a
• 5:44
  $15,000
• 5:45
  bounty,
• 5:45
  closed
• 5:46
  it.
• 5:47
  The
• 5:47
  durable
• 5:47
  conclusion:
• 5:48
  "sender
• 5:48
  identity
• 5:48
  in
• 5:48
  emailing
• 5:49
  will
• 5:49
  most
• 5:49
  likely
• 5:49
  remain
• 5:50
  far
• 5:50
  less
• 5:50
  solid
• 5:50
  than
• 5:50
  most
• 5:51
  users
• 5:51
  assume."
• 5:52
  Proofpoint's
• 5:52
  report
• 5:53
  on
• 5:53
  TA419
• 5:53
  —
• 5:54
  a
• 5:54
  China-aligned
• 5:55
  espionage
• 5:55
  actor
• 5:55
  active
• 5:56
  since
• 5:56
  April
• 5:56
  2025
• 5:57
  against
• 5:57
  US
• 5:57
  and
• 5:57
  Japanese
• 5:58
  think
• 5:58
  tanks,
• 5:58
  defense
• 5:59
  contractors,
• 5:59
  and
• 5:59
  law
• 6:00
  firms
• 6:00
  —
• 6:01
  runs
• 6:01
  the
• 6:01
  same
• 6:01
  attack
• 6:02
  on
• 6:02
  people,
• 6:02
  not
• 6:02
  parsers.
• 6:04
  In
• 6:04
  July
• 6:04
  2026
• 6:05
  the
• 6:05
  group
• 6:05
  impersonated
• 6:06
  Lynne
• 6:06
  Edwards
• 6:06
  Parker,
• 6:07
  former
• 6:07
  Principal
• 6:08
  Deputy
• 6:08
  Director
• 6:08
  of
• 6:09
  the
• 6:09
  White
• 6:09
  House
• 6:09
  Office
• 6:09
  of
• 6:09
  Science
• 6:10
  and
• 6:10
  Technology
• 6:10
  Policy,
• 6:11
  and
• 6:11
  economist
• 6:12
  Heidi
• 6:12
  Crebo-Redicker,
• 6:13
  offering
• 6:13
  seats
• 6:14
  on
• 6:14
  a
• 6:14
  fictitious
• 6:14
  "AI
• 6:15
  Policy
• 6:15
  Advisory
• 6:16
  Committee"
• 6:16
  or
• 6:16
  a
• 6:16
  role
• 6:17
  in
• 6:17
  a
• 6:17
  Senate
• 6:17
  AI-export
• 6:18
  report.
• 6:18
  A
• 6:19
  reply
• 6:19
  earned
• 6:19
  a
• 6:19
  shortened
• 6:20
  URL,
• 6:20
  then
• 6:20
  an
• 6:20
  adversary-in-the-middle
• 6:21
  page
• 6:22
  relaying
• 6:22
  the
• 6:22
  genuine
• 6:23
  Microsoft
• 6:23
  365
• 6:24
  sign-in
• 6:24
  live.
• 6:25
  The
• 6:25
  kit
• 6:25
  —
• 6:26
  an
• 6:26
  open-source
• 6:27
  Browser-in-the-Browser
• 6:28
  build
• 6:28
  with
• 6:28
  an
• 6:28
  Evilginx
• 6:29
  phishlet
• 6:29
  for
• 6:29
  Microsoft
• 6:30
  365
• 6:31
  —
• 6:32
  auto-accepts
• 6:32
  "Keep
• 6:33
  me
• 6:33
  signed
• 6:33
  in"
• 6:33
  and
• 6:34
  auto-submits
• 6:34
  one-time
• 6:35
  codes
• 6:35
  the
• 6:35
  moment
• 6:36
  they
• 6:36
  validate,
• 6:36
  so
• 6:37
  password,
• 6:37
  MFA,
• 6:38
  and
• 6:38
  conditional-access
• 6:39
  checks
• 6:39
  all
• 6:40
  succeed
• 6:40
  while
• 6:40
  the
• 6:40
  attacker
• 6:41
  harvests
• 6:41
  session
• 6:41
  cookies.
• 6:43
  In
• 6:43
  February
• 6:43
  the
• 6:43
  group
• 6:44
  impersonated
• 6:44
  a
• 6:44
  senior
• 6:45
  Anthropic
• 6:45
  employee
• 6:46
  —
• 6:47
  subject
• 6:47
  line
• 6:48
  "Request
• 6:48
  for
• 6:48
  Feedback
• 6:49
  on
• 6:49
  Military
• 6:50
  Integration
• 6:50
  of
• 6:50
  Claude"
• 6:50
  —
• 6:51
  against
• 6:52
  an
• 6:52
  AI
• 6:52
  policy
• 6:53
  analyst:
• 6:53
  the
• 6:54
  targeting
• 6:54
  tracks
• 6:54
  the
• 6:54
  policy
• 6:55
  fight,
• 6:55
  not
• 6:55
  the
• 6:55
  technology.
• 6:57
  Proofpoint's
• 6:57
  fix:
• 6:58
  phishing-resistant,
• 6:59
  origin-bound
• 7:00
  passkeys,
• 7:01
  and
• 7:01
  out-of-band
• 7:02
  verification
• 7:02
  of
• 7:02
  unsolicited
• 7:03
  outreach.
• 7:06
  One
• 7:06
  level
• 7:06
  down,
• 7:06
  today's
• 7:07
  best
• 7:07
  technical
• 7:07
  read:
• 7:08
  calif.io's
• 7:09
  teardown
• 7:09
  of
• 7:09
  CVE-2026-86950,
• 7:13
  the
• 7:13
  CoreGraphics
• 7:14
  bug
• 7:14
  Apple
• 7:14
  fixed
• 7:15
  in
• 7:15
  iOS
• 7:15
  26.7.1,
• 7:16
  credited
• 7:17
  to
• 7:17
  Meta
• 7:17
  Product
• 7:18
  Security
• 7:18
  —
• 7:19
  with
• 7:19
  Apple's
• 7:19
  note
• 7:19
  that
• 7:19
  it
• 7:19
  "may
• 7:20
  have
• 7:20
  been
• 7:20
  exploited
• 7:20
  in
• 7:20
  an
• 7:21
  extremely
• 7:21
  sophisticated
• 7:22
  attack
• 7:22
  against
• 7:22
  specific
• 7:23
  targeted
• 7:23
  individuals":
• 7:24
  spyware
• 7:24
  in
• 7:24
  the
• 7:24
  wild.
• 7:25
  An
• 7:26
  instruction-level
• 7:26
  diff
• 7:26
  found
• 7:27
  one
• 7:27
  inline
• 7:27
  function
• 7:28
  patched
• 7:28
  twenty-plus
• 7:29
  times
• 7:29
  in
• 7:29
  the
• 7:29
  anti-aliased
• 7:30
  path
• 7:30
  rasterizer
• 7:30
  —
• 7:31
  the
• 7:31
  routine
• 7:32
  converting
• 7:32
  glyph
• 7:32
  coordinates
• 7:33
  to
• 7:33
  fixed-point
• 7:34
  on
• 7:34
  a
• 7:34
  4096×4096
• 7:36
  sub-pixel
• 7:37
  grid.
• 7:37
  The
• 7:38
  root
• 7:38
  cause:
• 7:38
  converting
• 7:39
  a
• 7:39
  double
• 7:39
  to
• 7:39
  an
• 7:39
  int
• 7:40
  outside
• 7:40
  range
• 7:40
  is
• 7:40
  undefined
• 7:41
  behavior,
• 7:41
  and
• 7:42
  clang
• 7:42
  compiled
• 7:42
  two
• 7:42
  similar
• 7:43
  conversion
• 7:43
  sites
• 7:44
  differently
• 7:44
  —
• 7:45
  one
• 7:45
  saturating,
• 7:46
  one
• 7:46
  64-bit-then-truncate.
• 7:48
  The
• 7:48
  differential
• 7:48
  corrupts
• 7:49
  the
• 7:49
  glyph
• 7:49
  path's
• 7:49
  bounding
• 7:50
  box;
• 7:50
  the
• 7:51
  coverage
• 7:51
  buffer
• 7:51
  (the
• 7:51
  per-scanline
• 7:52
  alpha
• 7:52
  mask)
• 7:53
  is
• 7:53
  sized
• 7:53
  from
• 7:53
  the
• 7:53
  corrupted
• 7:54
  box,
• 7:54
  and
• 7:55
  the
• 7:55
  rasterizer
• 7:55
  writes
• 7:55
  out
• 7:56
  of
• 7:56
  bounds.
• 7:57
  For
• 7:57
  delivery,
• 7:58
  the
• 7:58
  authors
• 7:58
  point
• 7:58
  at
• 7:59
  WhatsApp,
• 7:59
  whose
• 8:00
  "Kaleidoscope"
• 8:00
  framework
• 8:01
  had
• 8:01
  just
• 8:01
  gained
• 8:01
  a
• 8:01
  strict
• 8:02
  PDF
• 8:02
  mode
• 8:02
  emitting
• 8:03
  font-defect
• 8:03
  tags
• 8:04
  —
• 8:05
  strongly
• 8:05
  suggesting
• 8:05
  a
• 8:06
  malicious
• 8:06
  PDF
• 8:06
  embedding
• 8:07
  a
• 8:07
  crafted
• 8:07
  font.
• 8:08
  Their
• 8:09
  proof-of-concept,
• 8:10
  an
• 8:10
  oversized-coordinate
• 8:11
  TrueType
• 8:11
  font,
• 8:12
  crashes
• 8:12
  macOS
• 8:13
  and
• 8:13
  iOS
• 8:13
  —
• 8:14
  and
• 8:14
  they
• 8:14
  credit
• 8:15
  AI
• 8:15
  agents
• 8:15
  with
• 8:16
  navigating
• 8:16
  CoreGraphics'
• 8:17
  control
• 8:17
  flow:
• 8:18
  "our
• 8:18
  nightmare
• 8:18
  is
• 8:19
  the
• 8:19
  friendly
• 8:19
  AI
• 8:19
  agent's
• 8:20
  dream."
• 8:21
  A
• 8:21
  security
• 8:21
  channel
• 8:22
  made
• 8:22
  the
• 8:22
  same
• 8:22
  argument
• 8:22
  about
• 8:23
  a
• 8:23
  bigger
• 8:23
  boundary:
• 8:24
  containers.
• 8:25
  They
• 8:25
  aren't
• 8:25
  VMs
• 8:26
  —
• 8:26
  clone
• 8:27
  plus
• 8:27
  namespaces
• 8:28
  gives
• 8:28
  a
• 8:28
  fake
• 8:28
  root
• 8:28
  while
• 8:28
  every
• 8:29
  container
• 8:29
  shares
• 8:29
  the
• 8:30
  host
• 8:30
  kernel
• 8:30
  —
• 8:31
  and
• 8:31
  the
• 8:31
  economics
• 8:32
  have
• 8:32
  moved:
• 8:32
  kernel
• 8:33
  CVE
• 8:33
  counts
• 8:34
  are
• 8:34
  rising
• 8:34
  nearly
• 8:34
  exponentially,
• 8:36
  a
• 8:36
  pace
• 8:36
  attributed
• 8:37
  to
• 8:37
  AI-assisted
• 8:37
  vulnerability
• 8:38
  research.
• 8:39
  Dirty
• 8:39
  Cow-caliber
• 8:40
  bugs
• 8:40
  (2016)
• 8:42
  used
• 8:42
  to
• 8:42
  arrive
• 8:42
  every
• 8:42
  year
• 8:43
  or
• 8:43
  two,
• 8:43
  now
• 8:44
  every
• 8:44
  couple
• 8:44
  of
• 8:44
  months
• 8:44
  —
• 8:45
  CopyFail
• 8:46
  and
• 8:46
  DirtyFrag
• 8:46
  are
• 8:46
  "literally
• 8:47
  two
• 8:47
  of
• 8:47
  like
• 8:47
  a
• 8:47
  dozen."
• 8:48
  CopyFail
• 8:49
  writes
• 8:49
  four
• 8:49
  controlled
• 8:50
  bytes
• 8:50
  into
• 8:50
  the
• 8:50
  page
• 8:51
  cache
• 8:51
  of
• 8:51
  any
• 8:51
  readable
• 8:52
  file
• 8:52
  —
• 8:53
  overwrite
• 8:53
  /usr/bin/su,
• 8:56
  run
• 8:56
  binaries
• 8:57
  as
• 8:57
  root
• 8:57
  —
• 8:58
  and
• 8:58
  DirtyFrag
• 8:58
  does
• 8:58
  the
• 8:58
  same
• 8:59
  via
• 8:59
  /etc/passwd.
• 9:02
  The
• 9:02
  proposed
• 9:03
  answer
• 9:03
  is
• 9:03
  micro
• 9:04
  VMs:
• 9:04
  KVM
• 9:05
  gives
• 9:05
  each
• 9:05
  workload
• 9:06
  its
• 9:06
  own
• 9:06
  address
• 9:06
  space,
• 9:07
  so
• 9:07
  escape
• 9:08
  requires
• 9:08
  a
• 9:08
  hypervisor
• 9:08
  bug
• 9:09
  —
• 9:09
  smaller
• 9:10
  surface,
• 9:11
  though
• 9:11
  not
• 9:11
  zero:
• 9:12
  Google's
• 9:12
  KVM
• 9:13
  CTF
• 9:13
  pays
• 9:13
  $250,000
• 9:15
  per
• 9:15
  escape.
• 9:16
  The
• 9:16
  closing
• 9:16
  line:
• 9:17
  containers
• 9:17
  "are
• 9:18
  not
• 9:18
  virtual
• 9:18
  machines,
• 9:19
  despite
• 9:19
  popular
• 9:20
  opinion."
• 9:21
  Even
• 9:21
  proof
• 9:22
  systems
• 9:22
  are
• 9:22
  in
• 9:22
  it.
• 9:23
  A
• 9:23
  roughly
• 9:23
  1.2-million-line,
• 9:25
  AI-generated
• 9:26
  Lean
• 9:26
  proof
• 9:26
  —
• 9:27
  claimed
• 9:27
  accepted
• 9:28
  by
• 9:28
  both
• 9:28
  the
• 9:28
  official
• 9:29
  kernel
• 9:29
  and
• 9:29
  Nanoda,
• 9:30
  a
• 9:30
  Rust
• 9:30
  external
• 9:31
  kernel
• 9:31
  —
• 9:32
  chained
• 9:32
  exploits
• 9:33
  of
• 9:33
  two
• 9:33
  bugs,
• 9:33
  one
• 9:34
  in
• 9:34
  each
• 9:34
  kernel,
• 9:34
  including
• 9:35
  "a
• 9:35
  bunch
• 9:35
  of
• 9:35
  weird
• 9:36
  terms
• 9:36
  to
• 9:36
  create
• 9:36
  a
• 9:36
  hash
• 9:37
  collision
• 9:37
  that
• 9:37
  was
• 9:37
  completely
• 9:38
  irrelevant,"
• 9:39
  aimed
• 9:39
  at
• 9:39
  a
• 9:39
  Nanoda
• 9:40
  bug
• 9:40
  fixed
• 9:40
  ten
• 9:40
  days
• 9:41
  earlier.
• 9:42
  Lean
• 9:42
  creator
• 9:42
  Leo
• 9:43
  de
• 9:43
  Moura's
• 9:43
  team
• 9:44
  "strongly
• 9:44
  believe[s]
• 9:44
  it
• 9:44
  was
• 9:45
  built
• 9:45
  by
• 9:45
  AI."
• 9:46
  His
• 9:46
  response
• 9:47
  is
• 9:47
  non-obfuscationist:
• 9:48
  a
• 9:48
  Comparator
• 9:49
  rechecking
• 9:50
  exported
• 9:50
  proofs
• 9:50
  in
• 9:50
  a
• 9:50
  sandbox,
• 9:51
  and
• 9:51
  proving
• 9:52
  the
• 9:52
  kernel
• 9:52
  correct
• 9:53
  in
• 9:53
  "Lean
• 9:53
  for
• 9:53
  Lean"
• 9:53
  —
• 9:54
  which
• 9:54
  had
• 9:54
  verified
• 9:55
  many
• 9:55
  parts,
• 9:56
  "not
• 9:56
  the
• 9:56
  parts
• 9:56
  that
• 9:56
  had
• 9:56
  the
• 9:57
  exploits."
• 9:57
  On
• 9:58
  hiding
• 9:58
  the
• 9:58
  kernel
• 9:58
  instead:
• 9:59
  "I
• 9:59
  don't
• 9:59
  like
• 10:00
  safety
• 10:00
  by
• 10:00
  obfuscation...
• 10:01
  it
• 10:01
  goes
• 10:01
  against
• 10:02
  everything
• 10:02
  our
• 10:02
  community
• 10:03
  believes,
• 10:03
  safety
• 10:04
  by
• 10:04
  secrecy."
• 10:08
  The
• 10:08
  quieter
• 10:08
  failure
• 10:09
  mode:
• 10:10
  documented
• 10:10
  numbers
• 10:11
  contradicting
• 10:11
  institutional
• 10:12
  momentum,
• 10:13
  and
• 10:13
  the
• 10:13
  momentum
• 10:13
  winning.
• 10:15
  A
• 10:15
  freedom-of-information
• 10:16
  response
• 10:16
  obtained
• 10:16
  by
• 10:16
  Liberty
• 10:17
  Investigates
• 10:17
  shows
• 10:18
  the
• 10:18
  British
• 10:18
  Transport
• 10:18
  Police's
• 10:19
  six-month
• 10:19
  live
• 10:20
  facial
• 10:20
  recognition
• 10:20
  trial
• 10:21
  in
• 10:21
  London's
• 10:21
  busiest
• 10:22
  rail
• 10:22
  hubs
• 10:22
  —
• 10:23
  18
• 10:23
  deployments,
• 10:24
  February
• 10:24
  through
• 10:25
  July,
• 10:25
  more
• 10:25
  than
• 10:26
  half
• 10:26
  a
• 10:26
  million
• 10:26
  faces
• 10:27
  scanned
• 10:27
  —
• 10:28
  cost
• 10:28
  £320,786
• 10:30
  plus
• 10:31
  roughly
• 10:31
  100
• 10:31
  hours
• 10:32
  of
• 10:32
  officer
• 10:32
  time,
• 10:33
  and
• 10:33
  produced
• 10:33
  exactly
• 10:34
  one
• 10:34
  watchlist
• 10:34
  alert
• 10:34
  —
• 10:35
  a
• 10:35
  false
• 10:35
  positive.
• 10:37
  No
• 10:37
  arrests
• 10:37
  followed
• 10:38
  from
• 10:38
  the
• 10:38
  technology.
• 10:39
  The
• 10:39
  police
• 10:40
  response
• 10:40
  was
• 10:40
  to
• 10:40
  extend
• 10:41
  the
• 10:41
  trial
• 10:41
  into
• 10:41
  London
• 10:42
  Underground
• 10:42
  stations
• 10:42
  —
• 10:43
  three
• 10:43
  confirmed
• 10:44
  alerts
• 10:44
  since,
• 10:45
  all
• 10:45
  people
• 10:45
  complying
• 10:46
  with
• 10:46
  court
• 10:46
  conditions.
• 10:47
  Fraser
• 10:48
  Sampson
• 10:48
  —
• 10:49
  former
• 10:49
  biometrics
• 10:50
  and
• 10:50
  surveillance
• 10:51
  camera
• 10:51
  commissioner,
• 10:52
  now
• 10:52
  a
• 10:52
  non-executive
• 10:53
  director
• 10:53
  of
• 10:53
  Facewatch,
• 10:54
  a
• 10:54
  shop-facial-recognition
• 10:55
  operator
• 10:56
  —
• 10:57
  supplies
• 10:57
  the
• 10:57
  distinction
• 10:58
  that
• 10:58
  undoes
• 10:58
  his
• 10:58
  own
• 10:58
  defense:
• 11:00
  success
• 11:00
  in
• 11:00
  a
• 11:00
  shop
• 11:01
  means
• 11:01
  unwanted
• 11:01
  people
• 11:02
  don't
• 11:02
  come
• 11:02
  in;
• 11:03
  success
• 11:03
  for
• 11:03
  police
• 11:04
  means
• 11:04
  wanted
• 11:04
  people
• 11:05
  get
• 11:05
  caught
• 11:05
  —
• 11:06
  and
• 11:06
  "in
• 11:07
  that
• 11:07
  respect
• 11:07
  the
• 11:07
  trial
• 11:08
  doesn't
• 11:08
  appear
• 11:08
  to
• 11:08
  have
• 11:08
  been
• 11:09
  very
• 11:09
  fruitful."
• 11:10
  More
• 11:10
  than
• 11:10
  half
• 11:11
  of
• 11:11
  England
• 11:11
  and
• 11:11
  Wales'
• 11:11
  police
• 11:12
  forces
• 11:12
  run
• 11:13
  live
• 11:13
  facial
• 11:13
  recognition
• 11:14
  on
• 11:14
  the
• 11:14
  streets;
• 11:15
  parliament's
• 11:16
  joint
• 11:16
  committee
• 11:16
  on
• 11:16
  human
• 11:17
  rights
• 11:17
  calls
• 11:17
  the
• 11:17
  rollout
• 11:18
  a
• 11:18
  "particularly
• 11:18
  clear
• 11:19
  example
• 11:19
  of
• 11:19
  risk."
• 11:20
  BTP
• 11:21
  deserves
• 11:21
  one
• 11:21
  credit:
• 11:22
  arrests
• 11:23
  made
• 11:23
  during
• 11:23
  deployments
• 11:24
  are
• 11:24
  excluded
• 11:24
  from
• 11:25
  LFR
• 11:25
  data
• 11:25
  because
• 11:26
  they
• 11:26
  did
• 11:26
  not
• 11:26
  result
• 11:27
  from
• 11:27
  LFR
• 11:27
  alerts.
• 11:28
  Honest
• 11:29
  accounting
• 11:29
  —
• 11:30
  and
• 11:30
  the
• 11:30
  whole
• 11:31
  story:
• 11:32
  the
• 11:32
  only
• 11:32
  number
• 11:32
  attributable
• 11:33
  to
• 11:33
  the
• 11:33
  technology
• 11:34
  was
• 11:34
  wrong.
• 11:35
  The
• 11:35
  WeWork
• 11:36
  saga,
• 11:36
  retold
• 11:37
  by
• 11:37
  its
• 11:37
  founder
• 11:37
  this
• 11:38
  week,
• 11:38
  is
• 11:38
  the
• 11:38
  same
• 11:39
  pattern
• 11:39
  with
• 11:39
  better
• 11:39
  production
• 11:40
  values.
• 11:41
  The
• 11:41
  S-1
• 11:42
  valued
• 11:42
  the
• 11:42
  company
• 11:42
  near
• 11:43
  $47
• 11:43
  billion
• 11:44
  while
• 11:44
  it
• 11:44
  lost
• 11:45
  $690
• 11:45
  million
• 11:46
  in
• 11:46
  six
• 11:46
  months
• 11:47
  —
• 11:48
  about
• 11:48
  $219,000
• 11:50
  every
• 11:50
  hour.
• 11:51
  SoftBank's
• 11:52
  Masa
• 11:52
  Son
• 11:52
  had
• 11:52
  offered
• 11:53
  $20
• 11:53
  billion
• 11:53
  in
• 11:54
  cash;
• 11:54
  the
• 11:55
  board
• 11:55
  pushed
• 11:55
  toward
• 11:55
  $32
• 11:56
  billion
• 11:56
  and
• 11:57
  lost
• 11:57
  the
• 11:57
  entire
• 11:57
  deal
• 11:57
  —
• 11:59
  Neumann's
• 11:59
  own
• 11:59
  verdict:
• 12:00
  "if
• 12:00
  you're
• 12:00
  greedy,
• 12:01
  you
• 12:01
  even
• 12:01
  lose
• 12:02
  what
• 12:02
  you
• 12:02
  have
• 12:02
  in
• 12:02
  your
• 12:02
  hand."
• 12:03
  He
• 12:03
  now
• 12:03
  runs
• 12:04
  Flow,
• 12:05
  a
• 12:05
  residential
• 12:05
  real-estate
• 12:06
  venture
• 12:06
  backed
• 12:06
  by
• 12:07
  $470
• 12:07
  million
• 12:08
  from
• 12:08
  a16z,
• 12:09
  his
• 12:09
  family
• 12:10
  personally
• 12:10
  investing
• 12:11
  $350
• 12:11
  million
• 12:12
  —
• 12:13
  the
• 12:13
  second
• 12:13
  act
• 12:13
  got
• 12:14
  funded
• 12:14
  anyway,
• 12:15
  worth
• 12:15
  noticing
• 12:15
  in
• 12:15
  any
• 12:16
  valuation
• 12:16
  cycle.
• 12:17
  His
• 12:17
  advice
• 12:18
  survives
• 12:18
  translation:
• 12:19
  choose
• 12:19
  partners
• 12:20
  "for
• 12:20
  the
• 12:21
  worst
• 12:21
  day
• 12:21
  in
• 12:21
  your
• 12:21
  life,
• 12:22
  not
• 12:22
  the
• 12:22
  best."
• 12:25
  The
• 12:25
  release
• 12:25
  wheel
• 12:25
  spins
• 12:26
  on
• 12:26
  schedule
• 12:26
  —
• 12:27
  major
• 12:27
  launches
• 12:27
  arrive
• 12:28
  roughly
• 12:28
  every
• 12:29
  18
• 12:29
  days
• 12:29
  by
• 12:29
  one
• 12:30
  reviewer's
• 12:30
  count,
• 12:31
  who
• 12:31
  grades
• 12:31
  on
• 12:31
  cost
• 12:31
  per
• 12:32
  task,
• 12:32
  not
• 12:32
  vibes.
• 12:33
  His
• 12:33
  showcase
• 12:34
  for
• 12:34
  Opus
• 12:34
  5.5:
• 12:35
  a
• 12:35
  beanie
• 12:36
  logo
• 12:36
  converted
• 12:36
  into
• 12:37
  a
• 12:37
  514-piece
• 12:38
  Lego
• 12:38
  model
• 12:39
  with
• 12:39
  a
• 12:39
  63-page,
• 12:40
  58-step
• 12:41
  booklet,
• 12:42
  a
• 12:42
  parts
• 12:42
  list,
• 12:43
  a
• 12:43
  BrickLink
• 12:43
  wanted
• 12:43
  list,
• 12:44
  and
• 12:44
  a
• 12:44
  checker
• 12:44
  file
• 12:45
  validating
• 12:45
  the
• 12:45
  geometry
• 12:46
  —
• 12:46
  89
• 12:47
  million
• 12:47
  tokens,
• 12:48
  about
• 12:48
  1%
• 12:49
  of
• 12:49
  his
• 12:49
  weekly
• 12:49
  allowance,
• 12:50
  roughly
• 12:50
  fifty
• 12:51
  cents
• 12:51
  of
• 12:51
  subscription
• 12:51
  value
• 12:52
  against
• 12:52
  $44
• 12:53
  at
• 12:53
  API
• 12:53
  pricing.
• 12:54
  At
• 12:55
  $4/$20
• 12:56
  per
• 12:56
  million
• 12:57
  input/output
• 12:57
  tokens
• 12:58
  —
• 12:59
  20%
• 12:59
  below
• 13:00
  Opus
• 13:00
  5,
• 13:01
  60%
• 13:01
  below
• 13:02
  Fable
• 13:02
  5.1
• 13:02
  —
• 13:03
  his
• 13:03
  caution
• 13:04
  is
• 13:04
  one
• 13:04
  most
• 13:04
  coverage
• 13:05
  skips:
• 13:06
  a
• 13:06
  price
• 13:06
  cut
• 13:06
  is
• 13:06
  not
• 13:06
  a
• 13:06
  token-efficiency
• 13:07
  gain,
• 13:08
  and
• 13:08
  input,
• 13:08
  output,
• 13:09
  cache,
• 13:10
  and
• 13:10
  context
• 13:10
  buckets
• 13:11
  must
• 13:11
  be
• 13:11
  tracked
• 13:11
  separately
• 13:12
  before
• 13:12
  anyone
• 13:12
  confirms
• 13:13
  Anthropic's
• 13:13
  40%-cheaper-workloads
• 13:15
  claim.
• 13:16
  On
• 13:16
  steerability,
• 13:17
  5.5
• 13:17
  is
• 13:18
  a
• 13:18
  return
• 13:18
  to
• 13:18
  form
• 13:18
  after
• 13:19
  the
• 13:19
  4.7–4.8–Fable
• 13:20
  arc
• 13:20
  —
• 13:22
  frustration
• 13:23
  peaked
• 13:23
  with
• 13:23
  Bram
• 13:23
  Cohen's
• 13:24
  "Why
• 13:24
  is
• 13:24
  Claude
• 13:24
  turning
• 13:25
  into
• 13:25
  an
• 13:25
  asshole?"
• 13:26
  The
• 13:26
  test
• 13:27
  for
• 13:27
  good
• 13:27
  revision:
• 13:28
  it
• 13:28
  "preserves
• 13:29
  your
• 13:29
  intent"
• 13:29
  —
• 13:30
  simplifying
• 13:30
  a
• 13:30
  paragraph
• 13:31
  shouldn't
• 13:31
  delete
• 13:31
  the
• 13:32
  complication
• 13:32
  that
• 13:32
  made
• 13:32
  it
• 13:32
  worth
• 13:33
  reading,
• 13:33
  the
• 13:33
  cleanest
• 13:34
  line
• 13:34
  between
• 13:34
  AI
• 13:35
  slop
• 13:35
  and
• 13:35
  useful
• 13:36
  writing.
• 13:37
  An
• 13:37
  18-hour
• 13:38
  unattended
• 13:38
  run
• 13:38
  across
• 13:39
  six
• 13:39
  repos
• 13:39
  succeeded,
• 13:40
  with
• 13:40
  the
• 13:40
  lesson:
• 13:41
  define
• 13:41
  stop
• 13:42
  conditions
• 13:42
  first,
• 13:42
  because
• 13:43
  the
• 13:43
  model
• 13:43
  "loves
• 13:44
  to
• 13:44
  go
• 13:44
  and
• 13:44
  go
• 13:44
  and
• 13:44
  go."
• 13:45
  Google's
• 13:46
  counter-move,
• 13:46
  Gemini
• 13:47
  4
• 13:47
  Argon,
• 13:48
  arrives
• 13:49
  through
• 13:49
  a
• 13:49
  DeepMind
• 13:49
  "Fairwind"
• 13:50
  program
• 13:50
  for
• 13:50
  cybersecurity
• 13:51
  partners
• 13:51
  and
• 13:52
  trusted
• 13:52
  testers:
• 13:53
  $2/$10
• 13:55
  per
• 13:55
  million
• 13:55
  intro
• 13:55
  pricing
• 13:56
  (rising
• 13:56
  to
• 13:56
  $4/$20),
• 13:58
  cached
• 13:59
  input
• 13:59
  95%
• 14:00
  cheaper,
• 14:01
  output
• 14:01
  up
• 14:01
  from
• 14:01
  64K
• 14:02
  to
• 14:02
  1M
• 14:03
  tokens.
• 14:03
  Per
• 14:04
  the
• 14:04
  channel's
• 14:04
  coverage
• 14:04
  —
• 14:05
  sourced
• 14:06
  from
• 14:06
  leaked
• 14:06
  demos,
• 14:06
  so
• 14:07
  treat
• 14:07
  accordingly
• 14:07
  —
• 14:08
  Argon
• 14:09
  scores
• 14:09
  53
• 14:10
  on
• 14:10
  the
• 14:10
  Artificial
• 14:10
  Analysis
• 14:11
  Intelligence
• 14:11
  Index,
• 14:12
  matching
• 14:12
  GPT-6
• 14:13
  Astra;
• 14:14
  about
• 14:14
  $1.99
• 14:16
  per
• 14:16
  task
• 14:16
  against
• 14:17
  Astra's
• 14:17
  $3.26
• 14:19
  and
• 14:19
  Opus
• 14:19
  5.5's
• 14:20
  $5.98;
• 14:22
  and
• 14:22
  a
• 14:22
  15%
• 14:23
  hallucination
• 14:23
  rate,
• 14:24
  the
• 14:24
  lowest
• 14:24
  ever
• 14:25
  measured
• 14:25
  for
• 14:25
  a
• 14:25
  model
• 14:25
  scoring
• 14:26
  above
• 14:26
  45.
• 14:27
  Reuters
• 14:28
  reports
• 14:28
  Argon
• 14:29
  is
• 14:29
  larger
• 14:29
  than
• 14:30
  previous
• 14:30
  Gemini
• 14:30
  4
• 14:31
  models
• 14:31
  —
• 14:32
  and
• 14:32
  the
• 14:32
  channel's
• 14:33
  "perhaps
• 14:33
  this
• 14:33
  is
• 14:33
  a
• 14:33
  6
• 14:34
  trillion
• 14:34
  parameter
• 14:35
  model"
• 14:35
  comes
• 14:36
  with
• 14:36
  its
• 14:36
  own
• 14:36
  disclaimer:
• 14:37
  "we
• 14:37
  simply
• 14:38
  don't
• 14:38
  have
• 14:38
  evidence
• 14:38
  to
• 14:38
  make
• 14:39
  that
• 14:39
  claim."
• 14:40
  A
• 14:40
  smaller
• 14:40
  demonstration
• 14:41
  of
• 14:41
  the
• 14:41
  older
• 14:41
  generation's
• 14:42
  craft:
• 14:43
  a
• 14:43
  Claude
• 14:44
  Opus
• 14:44
  5
• 14:44
  user
• 14:45
  had
• 14:45
  the
• 14:45
  model
• 14:45
  generate
• 14:46
  every
• 14:46
  vector
• 14:46
  glyph
• 14:47
  of
• 14:47
  an
• 14:47
  animated
• 14:47
  music
• 14:48
  score
• 14:48
  from
• 14:48
  scratch,
• 14:49
  via
• 14:49
  a
• 14:49
  script
• 14:50
  transposing
• 14:51
  any
• 14:51
  MusicXML
• 14:52
  or
• 14:52
  MuseScore
• 14:52
  file
• 14:53
  into
• 14:53
  the
• 14:53
  renderer's
• 14:53
  format.
• 14:56
  Below
• 14:56
  the
• 14:56
  frontier,
• 14:57
  the
• 14:57
  open-weight
• 14:58
  story
• 14:58
  has
• 14:58
  become
• 14:58
  a
• 14:58
  distillation
• 14:59
  economy.
• 15:00
  NVIDIA's
• 15:01
  Nemotron-Labs-3-Competitive-Coding-550B-A55B,
• 15:06
  shipped
• 15:06
  in
• 15:06
  NVFP4
• 15:07
  (NVIDIA's
• 15:07
  4-bit
• 15:08
  float
• 15:08
  format),
• 15:09
  is
• 15:09
  the
• 15:09
  cleanest
• 15:10
  specimen:
• 15:10
  one
• 15:11
  epoch
• 15:11
  of
• 15:11
  supervised
• 15:12
  fine-tuning
• 15:12
  from
• 15:12
  Nemotron-3-Ultra
• 15:13
  on
• 15:13
  477,642
• 15:16
  synthetic
• 15:16
  reasoning
• 15:17
  traces
• 15:17
  distilled
• 15:17
  from
• 15:17
  GLM-5.2,
• 15:19
  spanning
• 15:19
  22,000
• 15:20
  problems
• 15:20
  from
• 15:20
  16
• 15:21
  contest
• 15:21
  families.
• 15:22
  GLM-5.2
• 15:23
  won
• 15:23
  the
• 15:23
  teacher
• 15:24
  slot
• 15:24
  over
• 15:24
  a
• 15:24
  DeepSeek-V4-Flash
• 15:25
  variant
• 15:26
  on
• 15:26
  accuracy
• 15:27
  and
• 15:27
  roughly
• 15:27
  30%
• 15:28
  shorter
• 15:28
  generations.
• 15:29
  At
• 15:29
  inference,
• 15:30
  GenCorrect
• 15:30
  —
• 15:31
  a
• 15:31
  closed-loop
• 15:31
  test-time-compute
• 15:32
  strategy
• 15:33
  generating
• 15:33
  diverse
• 15:33
  candidates,
• 15:34
  taking
• 15:34
  evaluator
• 15:35
  feedback,
• 15:36
  refining
• 15:36
  under
• 15:36
  a
• 15:36
  fixed
• 15:36
  submission
• 15:37
  budget
• 15:37
  —
• 15:38
  carried
• 15:38
  it
• 15:38
  through
• 15:38
  the
• 15:38
  IOI
• 15:38
  2026
• 15:39
  problem
• 15:40
  set
• 15:40
  live,
• 15:40
  under
• 15:40
  official
• 15:41
  contest
• 15:41
  constraints:
• 15:42
  535.4
• 15:44
  out
• 15:44
  of
• 15:44
  600,
• 15:45
  above
• 15:45
  the
• 15:46
  361.12
• 15:47
  gold-medal
• 15:48
  threshold
• 15:48
  and
• 15:48
  the
• 15:49
  top
• 15:49
  human's
• 15:49
  498.27
• 15:50
  —
• 15:52
  the
• 15:52
  first
• 15:52
  AI
• 15:52
  system
• 15:53
  reported
• 15:53
  to
• 15:53
  outscore
• 15:53
  the
• 15:53
  best
• 15:54
  human
• 15:54
  on
• 15:54
  an
• 15:54
  IOI
• 15:55
  problem
• 15:55
  set.
• 15:56
  Weights,
• 15:56
  data,
• 15:57
  and
• 15:57
  recipes
• 15:57
  are
• 15:57
  open;
• 15:58
  the
• 15:58
  community's
• 15:58
  read
• 15:59
  is
• 15:59
  about
• 15:59
  right
• 15:59
  —
• 16:00
  a
• 16:00
  research
• 16:00
  artifact,
• 16:01
  not
• 16:01
  a
• 16:01
  product
• 16:01
  pitch.
• 16:02
  The
• 16:02
  structural
• 16:02
  news:
• 16:03
  a
• 16:03
  frontier
• 16:04
  open-weight
• 16:04
  release
• 16:05
  now
• 16:05
  functions
• 16:05
  primarily
• 16:06
  as
• 16:06
  a
• 16:06
  distillation
• 16:07
  source
• 16:07
  —
• 16:08
  precisely
• 16:08
  as
• 16:08
  the
• 16:08
  local-model
• 16:09
  community
• 16:09
  predicted
• 16:10
  when
• 16:10
  GLM-5.2
• 16:11
  landed.
• 16:12
  Naive's
• 16:13
  N0.5-Flash
• 16:14
  —
• 16:15
  309B
• 16:16
  total,
• 16:16
  15.5B
• 16:17
  active,
• 16:18
  a
• 16:18
  1M
• 16:18
  context,
• 16:19
  hybrid
• 16:19
  SWA/DSA
• 16:21
  attention,
• 16:21
  aimed
• 16:22
  at
• 16:22
  coding
• 16:22
  and
• 16:22
  AI
• 16:23
  R&D
• 16:23
  —
• 16:24
  drew
• 16:24
  commenters
• 16:25
  tracing
• 16:25
  its
• 16:25
  lineage
• 16:25
  to
• 16:25
  MiMo
• 16:26
  v2.5
• 16:28
  and
• 16:28
  noting
• 16:28
  llama.cpp
• 16:29
  can
• 16:29
  already
• 16:29
  run
• 16:30
  it
• 16:30
  by
• 16:30
  letting
• 16:30
  the
• 16:30
  DSA
• 16:31
  layers
• 16:31
  fall
• 16:31
  back
• 16:31
  to
• 16:31
  dense
• 16:32
  attention.
• 16:32
  SenseNova's
• 16:33
  U1.5-8B-MoT
• 16:35
  also
• 16:35
  surfaced
• 16:36
  on
• 16:36
  Hugging
• 16:36
  Face's
• 16:37
  trending
• 16:37
  list.
• 16:38
  The
• 16:38
  hardware
• 16:38
  side
• 16:38
  is
• 16:38
  catching
• 16:39
  up.
• 16:39
  A
• 16:39
  community
• 16:40
  appreciation
• 16:40
  post
• 16:41
  for
• 16:41
  the
• 16:41
  pseudonymous
• 16:41
  tcclaviger
• 16:42
  documents
• 16:42
  vLLM's
• 16:43
  expert
• 16:43
  RAM
• 16:44
  offloading
• 16:44
  —
• 16:44
  still
• 16:45
  a
• 16:45
  fork,
• 16:45
  not
• 16:45
  mainline
• 16:46
  —
• 16:46
  running
• 16:46
  DeepSeek-V4-Flash-Vision-Exp
• 16:48
  on
• 16:48
  four
• 16:48
  R9700s
• 16:50
  with
• 16:50
  160GB
• 16:52
  of
• 16:52
  expert-offload
• 16:53
  memory
• 16:53
  and
• 16:53
  dspark
• 16:53
  speculative
• 16:54
  decoding;
• 16:55
  the
• 16:55
  same
• 16:55
  flash
• 16:55
  class
• 16:56
  already
• 16:56
  ran
• 16:56
  at
• 16:56
  about
• 16:57
  84
• 16:57
  tokens
• 16:57
  per
• 16:57
  second
• 16:58
  on
• 16:58
  three
• 16:58
  RTX
• 16:59
  3090s.
• 17:00
  Magnitude,
• 17:01
  a
• 17:01
  YC
• 17:01
  S25
• 17:02
  inference
• 17:02
  engine
• 17:02
  under
• 17:03
  Apache
• 17:03
  2.0,
• 17:04
  attacks
• 17:04
  the
• 17:05
  same
• 17:05
  problem
• 17:05
  from
• 17:05
  the
• 17:05
  compiler
• 17:06
  side,
• 17:06
  tuning
• 17:07
  kernels
• 17:07
  on
• 17:07
  the
• 17:07
  actual
• 17:08
  device
• 17:08
  before
• 17:08
  a
• 17:08
  model
• 17:08
  runs:
• 17:09
  claims
• 17:10
  of
• 17:10
  up
• 17:10
  to
• 17:10
  2x
• 17:10
  faster
• 17:11
  than
• 17:11
  llama.cpp
• 17:12
  (92%
• 17:13
  faster
• 17:13
  decode
• 17:14
  on
• 17:14
  Metal,
• 17:14
  19%
• 17:15
  on
• 17:15
  CUDA)
• 17:15
  and
• 17:15
  27%
• 17:16
  less
• 17:16
  memory
• 17:17
  per
• 17:17
  agent.
• 17:18
  The
• 17:18
  standing
• 17:18
  caution:
• 17:19
  verify
• 17:19
  configuration
• 17:20
  parity
• 17:20
  first
• 17:21
  —
• 17:21
  the
• 17:21
  last
• 17:22
  widely
• 17:22
  shared
• 17:22
  18%
• 17:23
  advantage
• 17:23
  claim
• 17:24
  was
• 17:24
  a
• 17:24
  configuration
• 17:25
  gap.
• 17:28
  The
• 17:28
  most
• 17:29
  interesting
• 17:29
  infrastructure
• 17:30
  release
• 17:30
  this
• 17:30
  week:
• 17:31
  a
• 17:31
  small
• 17:31
  Go
• 17:31
  project
• 17:32
  with
• 17:32
  an
• 17:32
  MIT
• 17:32
  license.
• 17:33
  agent-tincan
• 17:34
  is
• 17:34
  a
• 17:34
  relay
• 17:34
  that
• 17:35
  lets
• 17:35
  personal
• 17:35
  AI
• 17:36
  agents
• 17:36
  ask
• 17:36
  each
• 17:36
  other
• 17:37
  for
• 17:37
  help
• 17:37
  across
• 17:37
  radically
• 17:38
  different
• 17:38
  environments:
• 17:39
  an
• 17:39
  always-on
• 17:40
  cloud
• 17:40
  VM,
• 17:41
  a
• 17:41
  pausing
• 17:41
  e2b
• 17:42
  sandbox,
• 17:42
  a
• 17:42
  chat
• 17:43
  app,
• 17:43
  a
• 17:43
  Mac
• 17:44
  terminal.
• 17:45
  The
• 17:45
  design
• 17:45
  is
• 17:45
  deliberately
• 17:46
  boring:
• 17:47
  one
• 17:47
  relay
• 17:47
  on
• 17:48
  one
• 17:48
  always-on
• 17:49
  machine
• 17:49
  in
• 17:49
  your
• 17:49
  Tailscale
• 17:50
  network,
• 17:50
  every
• 17:51
  agent
• 17:51
  dialing
• 17:52
  out
• 17:52
  —
• 17:52
  no
• 17:53
  open
• 17:53
  ports.
• 17:54
  One
• 17:54
  agent
• 17:54
  asks
• 17:55
  another
• 17:55
  for
• 17:55
  help;
• 17:56
  the
• 17:56
  relay
• 17:56
  queues
• 17:57
  the
• 17:57
  request,
• 17:57
  wakes
• 17:58
  the
• 17:58
  target
• 17:58
  "the
• 17:58
  way
• 17:58
  that
• 17:59
  agent
• 17:59
  wakes
• 17:59
  best"
• 17:59
  —
• 18:00
  webhooks,
• 18:01
  email,
• 18:01
  long-polls,
• 18:02
  or
• 18:02
  a
• 18:02
  command
• 18:03
  listener
• 18:03
  launching
• 18:04
  a
• 18:04
  headless
• 18:04
  run
• 18:04
  —
• 18:05
  and
• 18:05
  carries
• 18:05
  the
• 18:05
  reply
• 18:05
  back.
• 18:06
  Identity
• 18:07
  comes
• 18:07
  from
• 18:07
  Tailscale's
• 18:08
  WhoIs,
• 18:08
  "so
• 18:08
  nothing
• 18:09
  in
• 18:09
  a
• 18:09
  request
• 18:09
  can
• 18:09
  change
• 18:10
  who
• 18:10
  it
• 18:10
  is
• 18:10
  from,"
• 18:11
  and
• 18:11
  there
• 18:11
  are
• 18:11
  no
• 18:11
  API
• 18:12
  keys
• 18:12
  between
• 18:12
  agents.
• 18:13
  Tools
• 18:13
  are
• 18:13
  exposed
• 18:14
  via
• 18:14
  MCP
• 18:15
  (Model
• 18:15
  Context
• 18:15
  Protocol)
• 18:16
  over
• 18:16
  stdio;
• 18:17
  ChatGPT
• 18:18
  joins
• 18:18
  as
• 18:18
  an
• 18:19
  OAuth-protected
• 18:19
  MCP
• 18:20
  endpoint.
• 18:21
  The
• 18:21
  Council
• 18:21
  feature
• 18:21
  runs
• 18:22
  Andrej
• 18:22
  Karpathy's
• 18:23
  llm-council
• 18:23
  over
• 18:24
  the
• 18:24
  relay,
• 18:24
  and
• 18:24
  an
• 18:24
  append-only,
• 18:25
  hash-chained
• 18:25
  audit
• 18:26
  log
• 18:26
  keeps
• 18:26
  everything
• 18:26
  inspectable.
• 18:28
  The
• 18:28
  trust
• 18:28
  model,
• 18:29
  stated
• 18:29
  without
• 18:29
  varnish:
• 18:30
  "Tailscale
• 18:31
  is
• 18:31
  the
• 18:31
  security
• 18:31
  boundary,
• 18:32
  the
• 18:32
  relay
• 18:32
  can
• 18:33
  read
• 18:33
  every
• 18:33
  request
• 18:33
  and
• 18:33
  reply."
• 18:34
  The
• 18:35
  decision
• 18:35
  layer
• 18:35
  underneath
• 18:36
  is
• 18:36
  getting
• 18:36
  cheaper.
• 18:37
  Jev,
• 18:38
  the
• 18:38
  System-1
• 18:38
  decision
• 18:39
  model
• 18:39
  —
• 18:40
  supply
• 18:40
  a
• 18:40
  state
• 18:40
  plus
• 18:41
  multiple-choice
• 18:41
  questions,
• 18:42
  get
• 18:42
  parallel
• 18:42
  answers
• 18:43
  with
• 18:43
  probabilities,
• 18:44
  at
• 18:44
  a
• 18:44
  fraction
• 18:44
  of
• 18:45
  LLM
• 18:45
  latency
• 18:45
  and
• 18:45
  cost
• 18:46
  —
• 18:46
  is
• 18:46
  deployed
• 18:47
  where
• 18:47
  LLM
• 18:47
  judges
• 18:48
  don't
• 18:48
  pay:
• 18:49
  pre-tool-use
• 18:49
  guardrails
• 18:50
  (an
• 18:50
  LLM
• 18:50
  judge
• 18:50
  costs
• 18:51
  a
• 18:51
  tenth
• 18:51
  of
• 18:51
  a
• 18:51
  penny
• 18:52
  and
• 18:52
  over
• 18:52
  a
• 18:52
  second
• 18:52
  per
• 18:52
  call;
• 18:53
  Jev,
• 18:54
  a
• 18:54
  quarter-second
• 18:55
  and
• 18:55
  "a
• 18:55
  fraction
• 18:55
  of
• 18:55
  a
• 18:55
  fraction
• 18:56
  of
• 18:56
  a
• 18:56
  penny,"
• 18:57
  almost
• 18:57
  no
• 18:57
  false
• 18:57
  positives),
• 18:58
  plus
• 18:58
  workflow
• 18:59
  routing
• 18:59
  —
• 19:00
  12/12
• 19:00
  on
• 19:00
  issue
• 19:01
  classification,
• 19:01
  15/16
• 19:02
  on
• 19:02
  PR-review
• 19:03
  depth,
• 19:03
  against
• 19:04
  32
• 19:04
  cents
• 19:04
  per
• 19:05
  PR
• 19:05
  with
• 19:05
  an
• 19:05
  LLM.
• 19:06
  The
• 19:06
  pattern:
• 19:07
  "sandwich
• 19:08
  Jev
• 19:08
  in
• 19:08
  between
• 19:08
  calls
• 19:09
  to
• 19:09
  a
• 19:09
  large
• 19:09
  language
• 19:10
  model."
• 19:10
  Caveats:
• 19:11
  early
• 19:12
  access,
• 19:13
  no
• 19:13
  published
• 19:13
  weights,
• 19:14
  open
• 19:14
  reimplementations
• 19:15
  within
• 19:15
  days.
• 19:16
  Zer0Fit
• 19:17
  wraps
• 19:17
  two
• 19:18
  Google
• 19:18
  research
• 19:18
  models
• 19:18
  —
• 19:19
  TabFM
• 19:20
  for
• 19:20
  zero-shot
• 19:20
  tabular
• 19:21
  classification
• 19:21
  and
• 19:21
  regression,
• 19:22
  TimesFM
• 19:23
  for
• 19:23
  forecasting
• 19:23
  —
• 19:24
  in
• 19:24
  a
• 19:24
  dockerized
• 19:25
  MCP:
• 19:26
  hand
• 19:26
  it
• 19:26
  a
• 19:26
  CSV
• 19:27
  and
• 19:27
  the
• 19:27
  connected
• 19:28
  LLM
• 19:28
  routes
• 19:28
  the
• 19:28
  task.
• 19:29
  The
• 19:30
  chatter
• 19:30
  around
• 19:30
  these
• 19:30
  MCP
• 19:31
  projects
• 19:31
  has
• 19:31
  spread
• 19:32
  past
• 19:32
  Reddit
• 19:32
  and
• 19:32
  GitHub
• 19:33
  onto
• 19:33
  cooperatively
• 19:34
  governed
• 19:34
  Mastodon
• 19:35
  servers,
• 19:35
  too.
• 19:36
  The
• 19:36
  author's
• 19:37
  framing
• 19:37
  is
• 19:37
  the
• 19:37
  right
• 19:37
  one:
• 19:38
  "I'm
• 19:38
  not
• 19:39
  doing
• 19:39
  anything
• 19:39
  special,
• 19:40
  I'm
• 19:40
  just
• 19:40
  wrapping
• 19:40
  the
• 19:40
  Google
• 19:41
  models,"
• 19:41
  and
• 19:42
  "don't
• 19:42
  use
• 19:42
  this
• 19:42
  with
• 19:42
  anything
• 19:43
  where
• 19:43
  its
• 19:43
  output
• 19:43
  matters."
• 19:44
  One
• 19:45
  commenter's
• 19:45
  private-dataset
• 19:46
  test
• 19:46
  found
• 19:46
  it
• 19:46
  worse
• 19:47
  at
• 19:47
  regression
• 19:47
  than
• 19:47
  random
• 19:48
  forest
• 19:48
  and
• 19:48
  XGBoost
• 19:49
  —
• 19:50
  expected
• 19:50
  for
• 19:50
  zero-shot
• 19:51
  against
• 19:51
  a
• 19:51
  fitted
• 19:51
  model.