Spencer Thompson

I work @originhq (and @preludeorg) - where we build endpoint AI observability to make organizations go faster

[Spencer Thompson @SThomps]

@JayaGup10 Non trivial problem to figure out https://t.co/wXm2yvIBFr

[Origin @originhq]

Do you know where your tokens are going?

You can see what you spent. Not what it bought.

We fixed that. ↓

[Konstantine Buhler @Konstantine]

Sir @demishassabis has a mind for synthesis. His favorite book is about a grand theory of everything. His preferred philosophers are seen by some as opposites. His life's work ranges from board games to Nobel-winning science.

We're grateful to have hosted Demis and his @GoogleDeepMind team at @sequoia AI Ascent last week for a fireside chat. He kindly gave us permission to share this, and you can watch the full video here:

00:00 Intro
00:38 The Common Thread
01:29 Games as AI Training
02:59 Startup Advice 1.0
04:39 Founding DeepMind
07:25 DeepMind and AGI
08:52 AI for Science
10:37 Biology Breakthroughs and Isomorphic
12:42 New Sciences
20:29 Philosophy

[noscroll @noscroll]

X has the best information on the internet and the worst incentives & culture.

meet noscroll — the AI that doomscrolls it for you and texts you just the things that matter.

no feed. no brainrot. no ragebait. just signal.

try it for free → https://t.co/XqdExWR13j 🙅🏼‍♂️

[Spencer Thompson @SThomps]

@andrew__reed "don't disagree" beats this

[Spencer Thompson @SThomps]

@adambain Yes, we have spent a lot of time on this. Happy to chat if helpful.

[Origin @originhq]

Introducing Praxis, an adversarial framework for discovering, controlling, and orchestrating computer-use agents running on endpoints.

Announcement → https://t.co/hAPblR4rkp
Get Praxis → https://t.co/HFYJfspy3I

[David Kaplan @depletionmode]

Natural language collapses meaning across layers.

LLMs don’t just fail at instructions, they misinterpret intent, and they expose that unforgivably when we treat language like a protocol.

In a short @originhq blog post, I break down semantic protocol confusion and what it means for agent safety.

https://t.co/FwWkAoa7aH

[Spencer Thompson @SThomps]

Yup

https://t.co/2Vo9j6HUTc

[Origin @originhq]

In this simple example, we show that Claude Code can read the iMessage database on the latest version of macOS, even with a leading EDR running on the system, illustrating the impact of an adversary who can remotely control the agent. We do this using Terminator, an internal research tool we built while studying the security implications of computer use agents. In this setup, the terminal application has previously been granted FDA, a subtle misconfiguration that effectively gives the agent access to unexpected context.

[Origin @originhq]

We believe that:

1. The potential economic upsides of the productivity boosts that Computer Use Agents offer incentivize us to provide them with more access to our computers to increase the amount of context they can have.

2. They represent a new type of interpreter that dramatically closes the gap between intent and execution, is self-corrective, and yields nondeterministic outputs that create massive amounts of "noise"

3. Their ability to generate and execute new tools on the fly, combined with expanded access, challenges the very foundation of a signature-based model of detection

As these systems become increasingly intertwined with how we use computers, we must consider what it means to detect their misuse through out-of-context interactions with the host.

If you're interested in collaborating on tooling or joining our team, please contact [email protected]

[Connor McGarr @33y0re]

Today I am happy to release a new blog post about Pointer Authentication (PAC) on Windows ARM64! This post takes a look at the Windows implementation of PAC in both user-mode and kernel-mode.

I must say, I have REALLY been enjoying Windows on ARM!!

https://t.co/isnItJ0nb3

[Origin @originhq]

This method demonstrates how hardware-level telemetry, coupled with contextual reasoning, can surface malicious activity that signature-based approaches will always miss as malware authors innovate in response.

📃Full write-up → https://t.co/DnjYsVdSWA

[Spencer Thompson @SThomps]

https://t.co/M1DTWvvpEr

[Spencer Thompson @SThomps]

Following up on our financing announcement from last week - we believe that the conditions are right for a 3rd generation of endpoint security, based on a new technology shift, new architectural requirements, new adversary behavior. In short, we think "it's time". Post below.

[Spencer Thompson @SThomps]

Today we're announcing an additional investment into Prelude from Brightmind Partners, @sequoia, @insightpartners , and others.

https://t.co/fRqhTWYsUy

[Connor McGarr @33y0re]

Today I am releasing a new blog post on VSM "secure calls" + the SkBridge project to manually issue them!!

This blog talks about how VTL 0 requests the services of VTL 1 and outlines common secure call patterns!!!

Blog: https://t.co/xzB1s7HoPO

SkBridge: https://t.co/0zO0E1L4Sy

[Spencer Thompson @SThomps]

Today we're announcing Runtime Memory Protection in research preview. This is a user mode _only_ agent designed to catch in-memory attacks, no matter how much creativity or AI the adversary applies. We believe it's the future of endpoint security.

[Origin @originhq]

Announcing our whitepaper on the future of endpoint security.

https://t.co/NogsQiku9B

[Matt Hand @matterpreter]

There is a very limited pool of donors. The process for getting screened to see if you’re a match is a simple oral swab you can do at home. Please consider signing up at https://t.co/wXIvHOkKEp

There’s nothing more important to me than her. It would mean the world to my family.

[Spencer Thompson @SThomps]

Read more about the release here:

https://t.co/gaGxOl3riS