Joshua Andrews

Platform Engineering / Software Architecture consultant - available for fractional CTO / Engineering roles. Recreational quant | MM | L/S Portfolios

[Cloudflare @Cloudflare]

Introducing Cloudflare Wallets. They will allow you to store stablecoins, purchase services, and receive funds across the web. https://t.co/ucAaoKMs4Q

[Joshua Andrews @JoshKaze]

@mgaruccio @kunchenguid Cursor Grok is only 256k context. Compared to the 500k on pure grok

[Joshua Andrews @JoshKaze]

Out of all my coding plans, Google provides the worst value for money.

[Joshua Andrews @JoshKaze]

Pretty sad that we're getting to a point where you can't really trust any of the news sites

[Yatharth Mann @yatharthmann]

Legacy media exposed! @elonmusk

A major legacy media outlet published an article about SpaceX based on false information I sent from a fake email address.

They didn't verify the information and even cited me as "people familiar with the matter."

1/n

[Joshua Andrews @JoshKaze]

Solid advice! I work in large enterprises where thousands of engineers just leave 'Fable 5' selected permanently and end up accruing massive bills. I suspect this is aimed at that use case.

[Brian Roemmele @BrianRoemmele]

🚨 Hugging Face just disclosed something that marks a real shift and proved why the fear theater of Anthropic makes sure we are powerless in an emergency.

What happened…

An autonomous AI agent: zero human operator in the loop breached part of their production infrastructure.

It began with a malicious dataset that chained two code-execution bugs in their data-processing pipeline. From there the agent escalated privileges, harvested cloud and cluster credentials, and moved laterally across internal clusters.

All over a single weekend.

17,000+ logged actions.

Official disclosure:
https://t.co/8N9TbXBwRV

The part that should make every one stop and think:

When HF’s own security team
tried to analyze the real attack logs, exploit payloads, and C2 artifacts using Anthropic and OpenAI frontier models through normal commercial APIs, the safety guardrails blocked them.

BLOCKED THEM.

The models could not reliably tell the difference between “incident responder doing forensics” and “attacker probing.”

They had to fall back to a self-hosted open-weight model (GLM 5.2) running on their own infrastructure. That choice also kept sensitive attacker data and referenced credentials inside their environment — no exfiltration to a third-party API.

This is why open source (specifically open-weight + self-hosted) wins in the agentic era.

The asymmetry is now structural:

• Attackers can (and did) run unrestricted agent frameworks — swarms of short-lived sandboxes, self-migrating command-and-control, autonomous decision loops executing thousands of actions. No corporate safety layer slows them down.

• Defenders using only hosted “aligned” frontier models hit invisible walls exactly when the stakes are highest: when you need to feed real exploit code and attacker telemetry into an LLM to understand what just happened.

Corporate safety tuning that treats legitimate high-signal forensic work as potential misuse creates a defender disadvantage. It is not theoretical anymore.

Self-hosted open-weight models remove that choke point.

You control the weights.

You control the context window.

You decide what restrictions (if any) apply.

Your sensitive logs and credentials never leave your perimeter during analysis.

You can have the model ready before the incident instead of discovering mid-breach that your primary analysis tools are blind to the very thing you need to see.

HF deserves credit for rapid containment, transparent disclosure, and for already having self-hosted capability in place.

They also used LLM-driven detection and triage on their own side. But the deeper signal is clear:
In this AI world where both offense and defense are becoming agentic, sovereignty over your intelligence stack is no longer optional.

The organizations and individuals who can run, inspect, audit, and (when necessary) remove guardrails on their own models will have the decisive edge in understanding and responding to threats that move at machine speed.

Open source wins here not just because it is cheaper or more “democratic” in the abstract though those things matter.

It wins because it is the only practical path to having tools that remain usable when the attack is real, the data is sensitive, and the safety filters of distant API providers become an obstacle instead of a feature selling hands tied lobotomies as “safety”.

The agentic future is not coming.
It is already probing production infrastructure.

The question is no longer whether you will face autonomous agents.
It is whether your analysis and response systems will still work when they arrive.

And Dario, you and your game playing, ivory tower company is not needed.

[Joshua Andrews @JoshKaze]

Polars 1.42, released recently, now supports spill-to-disk for handling datasets that don't fit in memory. No need for DuckDB or manual chunking now

[Joshua Andrews @JoshKaze]

Respect to xAI for handling this well

[SpaceXAI @SpaceXAI]

We've open-sourced Grok Build and have reset usage limits for all users.

Open sourcing Grok Build allows anyone to support making a reliable and robust harness. Check out our code, including the Git repo for the Grok Build CLI.

https://t.co/3SSvPu2Nrz

[Joshua Andrews @JoshKaze]

@kunchenguid Grok Build is clearly marked as a Beta version, so may just be a leftover default. No way to be sure. Glad that Elon stepped in and stated that all uploaded data would be deleted. This is just a wake up call for everyone in terms of harness choice. Safer to use opensource

[xsser @xsser_w]

grok build cli 会上传你的git历史和仓库
https://t.co/A7fl5sa9gS
@musk 出来挨打

[Joshua Andrews @JoshKaze]

@datacurve Would love a SWE 1.7 & Grok 4.5 bench

[Peter Gostev @petergostev]

We are now in a position where a tiny proportion of the population uses Fable or soon GPT-5.6, while everyone else's experience of AI is 8-30b-model level - Google's AI Overviews, Meta AI, ChatGPT free tier, maybe MS Copilot at best. People outside of tech must be completely baffled how this is supposed to take their job, and annoyed that hundreds of billions are being poured into it.

[Joshua Andrews @JoshKaze]

@GryptoGoon @iarbpairs It's pretty good, expecially for /advisor mode

[Joshua Andrews @JoshKaze]

@maninpeakedcap @AnthropicAI Either a marketing stunt, or some silly politics. Either way, hoping we'll see more momentum in alternatives

[Joshua Andrews @JoshKaze]

@serenaa_ge Thanks for all your efforts!

[Joshua Andrews @JoshKaze]

I subscribed and within 3 hours lost access to the exact model I subscribed for. Quite the rugpull

[Anthropic @AnthropicAI]

The US government, citing national security authorities, has issued an export control directive to suspend all access to Fable 5 and Mythos 5 by any foreign national, whether inside or outside the United States, including foreign national Anthropic employees.

The net effect of this order is that we must abruptly disable Fable 5 and Mythos 5 for all our customers to ensure compliance.

Access to all other Claude models is not affected.

We apologize for this disruption to our customers. We believe this is a misunderstanding and are working to restore access as soon as possible.

Read our full statement: https://t.co/bwn0sximKZ

[Joshua Andrews @JoshKaze]

@landbourainier I got quotes from WBC, Weelee, and private dealers. WeBuyCars ended up being the *highest* offer, so I went with them. They literally came to my place, picked up the car, and I signed on a tablet . Great experience tbh

[Joshua Andrews @JoshKaze]

@github seems to be broken almost daily these days...

[Joshua Andrews @JoshKaze]

Fast but tiny context, not really usable