Pablo Ramos

Security researcher dissecting AI risks, privacy threats & digital shadows. Traveler lost in the Internet. Views my own.

[Pablo Ramos @ramospablo]

Totally agree. Also some of the things that you see people implementing will take longer to be adopted at companies.

Which creates opportunities for people at an individual level and also as part of teams.

Orchestration is something that needs to happen tat least at three levels.

[Pablo Ramos @ramospablo]

There is so much truth on this blog that is a slap in the face when you realise how things have changed.

Independently of what you do, where you do it and even if you have side gigs.

A great wake up call!

[@Coldly @Just_Codly]

https://t.co/Kn5xICgw2V

[Pablo Ramos @ramospablo]

@zodchiii Great read and loads of pragmatic recommendations! Thanks for sharing!

[Pablo Ramos @ramospablo]

This a great read on the new features and the mindset as a user.

Using things wisely, know what to tweak depending the case and prevent long and costly fixing sessions by using models accordingly.

[darkzodchi @zodchiii]

https://t.co/ggo0KPgQ2J

[Pablo Ramos @ramospablo]

@0xMortyx Pretty nice write up, interesting they're all being ran as projects.

How does the workflows and some of the other plan orchestration helped in automation?

[Pablo Ramos @ramospablo]

A good read that summarises when to buy a fancy new toy (NVIDIA AI Boxes or Mac Studio) and when to go for the right option.

Fun and clear.

[John Doe @DoeOnChain]

https://t.co/a1oTrJrBB6

[Pablo Ramos @ramospablo]

https://t.co/mSWr8kVcEp

[Pablo Ramos @ramospablo]

Arrancó la manija…..

[Fran @frabigol]

SALIÓ LA PUBLICIDAD DEL MUNDIAL DE QUILMES, NO TENGO PALABRAS

LA MEJOR PUBLICIDAD DE LA HISTORIA

[Pablo Ramos @ramospablo]

This can be bad.

Really bad.

[GitHub @github]

We are investigating unauthorized access to GitHub’s internal repositories. While we currently have no evidence of impact to customer information stored outside of GitHub’s internal repositories (such as our customers’ enterprises, organizations, and repositories), we are closely monitoring our infrastructure for follow-on activity.

[Pablo Ramos @ramospablo]

Boom

[Andrej Karpathy @karpathy]

Personal update: I've joined Anthropic. I think the next few years at the frontier of LLMs will be especially formative. I am very excited to join the team here and get back to R&D. I remain deeply passionate about education and plan to resume my work on it in time.

[Pablo Ramos @ramospablo]

@Saboo_Shubham_ Really nice read and clarity on the way you continued to build and expand with this.

[Pablo Ramos @ramospablo]

I would prefer slower responses and work where Agents are doing the work in the background but with a great quality.

If you’re building a consumer product speed might help in the interaction but the real use for building things is long, consistent and performant execution.

Either with Codex, Claude or OpenClawd the deepest work and more complex happens while I sleep.

[Pablo Ramos @ramospablo]

How far are we from AI lawyer debating in court? Was listening to @farnamstreet interesting discussion and could not hold myself…. https://t.co/G9Z5PAVZ7j.

Make your bets.

[Pablo Ramos @ramospablo]

Remember. Infosec requires consistency, discipline and courage.

There are no silver bullets.

[Pablo Ramos @ramospablo]

This is bad

[International Cyber Digest @IntCyberDigest]

‼️🚨 UPDATE: The TanStack npm attack is now a full campaign.

'Mini' Shai-Hulud has hit:
- OpenSearch
- Mistral AI
- Guardrails AI
-UiPath
- Squawk packages across npm and PyPI

The malware specifically targets AI developer tooling. It hooks into Claude Code (.claude/settings.json) and VS Code (.vscode/tasks.json) to re-execute on every tool event, long after the infected package is gone. npm uninstall does not fix this.

[Pablo Ramos @ramospablo]

This is totally true.

[Elon Musk @elonmusk]

Incentives drive outcomes

[Pablo Ramos @ramospablo]

@recouso Curious on where you are.

This never happened to me.

[Pablo Ramos @ramospablo]

@jvrsanch Pretty nice and interesting analysis.

Still I believe there is a lot of opportunity for Engineers in Spain

[Pablo Ramos @ramospablo]

@GergelyOrosz Is the hypothesis that they were testing the crowd reaction and a potential response.

If they actually pull it off would others follow?

Also there is a theory of computing availability so who knows!

[Pablo Ramos @ramospablo]

@staples46198 @MilkRoadAI I think there is also the point that @ylecun always points into the LLMs approach to knowledge is fundamentally wrong and why he is now approaching a different paradigm.

Large LLM models are way past being trained with the internet data and loads is synthetic data used