robin

[robin @robnsngh]

@moinnadeem Incentives shape outcome - it’s far easier to ride the usage curve of a few big customers than to assemble the same demand across a long tail.

[robin @robnsngh]

Golden era of hacking as just began.

[Guillermo Rauch @rauchg]

Here's my update to the broader community about the ongoing incident investigation. I want to give you the rundown of the situation directly.

A Vercel employee got compromised via the breach of an AI platform customer called https://t.co/7PY6gGtzgI that he was using. The details are being fully investigated.

Through a series of maneuvers that escalated from our colleague’s compromised Vercel Google Workspace account, the attacker got further access to Vercel environments.

Vercel stores all customer environment variables fully encrypted at rest. We have numerous defense-in-depth mechanisms to protect core systems and customer data. We do have a capability however to designate environment variables as “non-sensitive”. Unfortunately, the attacker got further access through their enumeration.

We believe the attacking group to be highly sophisticated and, I strongly suspect, significantly accelerated by AI. They moved with surprising velocity and in-depth understanding of Vercel.

At the moment, we believe the number of customers with security impact to be quite limited. We’ve reached out with utmost priority to the ones we have concerns about. All of our focus right now is on investigation, communication to customers, enhancement of security measures, and sanitization of our environments. We’ve deployed extensive protection measures and monitoring. We’ve analyzed our supply chain, ensuring Next.js, Turbopack, and our many open source projects remain safe for our community.

The recommendation for all Vercel customers is to follow the Security Bulletin closely (https://t.co/BLVnic9fJC). My advice to everyone is to follow the best practices of security response: secret rotation, monitoring access to your Vercel environments and linked services, and ensuring the proper use of the sensitive env variables feature.

In response to this, and to aid in the improvement of all of our customers’ security postures, we’ve already rolled out new capabilities in the dashboard, including an overview page of environment variables, and a better user interface for sensitive env var creation and management. As always, I’m totally open to your feedback.

We’re working with elite cybersecurity firms, industry peers, and law enforcement. We’ve reached out to Context to assist in understanding the full scale of the incident, in an effort to protect other organizations and the broader internet. I also want to thank the Google Mandiant team for their active engagement and assistance.

It’s my mission to turn this attack into the most formidable security response imaginable. It’s always been a top priority for me. Vercel employs some of the most dedicated security researchers and security-minded engineers in the world. I commit to keeping you updated and rolling out extensive improvements and defenses so you, our customers and community, can have the peace of mind that Vercel always has your back.

[robin @robnsngh]

Napoleon spent his whole life trying to conquer Europe with cannons. Jensen did it with CUDA.

[Auren Hoffman @auren]

insane that Nvidia's market cap is bigger than every public company in France and Italy combined

[robin @robnsngh]

Tim Cook's breathing intensifies

[Josh Wolfe @wolfejosh]

1/ On-device inference....

[Tracy Alloway @tracyalloway]

Allbirds, the shoe brand, now says it's an AI compute company.

[robin @robnsngh]

codex pro vs openai free tier

[Andrej Karpathy @karpathy]

Judging by my tl there is a growing gap in understanding of AI capability.

The first issue I think is around recency and tier of use. I think a lot of people tried the free tier of ChatGPT somewhere last year and allowed it to inform their views on AI a little too much. This is a group of reactions laughing at various quirks of the models, hallucinations, etc. Yes I also saw the viral videos of OpenAI's Advanced Voice mode fumbling simple queries like "should I drive or walk to the carwash". The thing is that these free and old/deprecated models don't reflect the capability in the latest round of state of the art agentic models of this year, especially OpenAI Codex and Claude Code.

But that brings me to the second issue. Even if people paid $200/month to use the state of the art models, a lot of the capabilities are relatively "peaky" in highly technical areas. Typical queries around search, writing, advice, etc. are *not* the domain that has made the most noticeable and dramatic strides in capability. Partly, this is due to the technical details of reinforcement learning and its use of verifiable rewards. But partly, it's also because these use cases are not sufficiently prioritized by the companies in their hillclimbing because they don't lead to as much $$$ value. The goldmines are elsewhere, and the focus comes along.

So that brings me to the second group of people, who *both* 1) pay for and use the state of the art frontier agentic models (OpenAI Codex / Claude Code) and 2) do so professionally in technical domains like programming, math and research. This group of people is subject to the highest amount of "AI Psychosis" because the recent improvements in these domains as of this year have been nothing short of staggering. When you hand a computer terminal to one of these models, you can now watch them melt programming problems that you'd normally expect to take days/weeks of work. It's this second group of people that assigns a much greater gravity to the capabilities, their slope, and various cyber-related repercussions.

TLDR the people in these two groups are speaking past each other. It really is simultaneously the case that OpenAI's free and I think slightly orphaned (?) "Advanced Voice Mode" will fumble the dumbest questions in your Instagram's reels and *at the same time*, OpenAI's highest-tier and paid Codex model will go off for 1 hour to coherently restructure an entire code base, or find and exploit vulnerabilities in computer systems. This part really works and has made dramatic strides because 2 properties: 1) these domains offer explicit reward functions that are verifiable meaning they are easily amenable to reinforcement learning training (e.g. unit tests passed yes or no, in contrast to writing, which is much harder to explicitly judge), but also 2) they are a lot more valuable in b2b settings, meaning that the biggest fraction of the team is focused on improving them. So here we are.

[robin @robnsngh]

"damn daniel back at it again with the white vans"

[Pronto @ProntoAI]

🚨 BIG NEWS: Pronto has officially been acquired by Atoms, the physical AI company founded by @travisk. We are incredibly proud to step in as the core technology engine of the newly formed Atoms Mining division.

Read the full announcement: https://t.co/fovua0xvWo

[robin @robnsngh]

Worst day for a product launch.

[robin @robnsngh]

hey, come on.

[Chintan Zalani @chintanzalani]

The only 4 jobs that will remain at tech companies.

Credits: @yrechtman

[robin @robnsngh]

closed source models are a means to an end. The end is owning your destiny with an open source model where you have a fine grain control over quality, latency and throughput, esp if you have data to . Obviously, your product line has to cross minimum threshold revenue bar. That bar is keeps getting lower.

[clem 🤗 @ClementDelangue]

After @Pinterest @Airbnb @NotionHQ @cursor_ai, today it’s @eoghan @intercom publicly sharing that they’re finding it better, cheaper, faster to use and train open models themselves rather than use APIs for many tasks.

And hundreds of other companies are doing the same without sharing.

Ultimately, I believe the majority of AI workflows will be in-house based on open-source (vs API). It took much more time than we anticipated but it’s happening now!

[robin @robnsngh]

@zavaindar both zuck and sama pulled the plug when they had a better alternative to invest into. Much harder to consolidate bets without a winning frontier.

[robin @robnsngh]

@vipulved @togethercompute intentional blurring?

[robin @robnsngh]

@petergyang @theinformation @pxd No one knows what it means, but it's provocative… gets the people going!

[robin @robnsngh]

@luigifcruz Noted

[robin @robnsngh]

Weaponized tism.

[Kane 謝凱堯 @kane]

Ham Radio Language Models
🤝
Autistic Hobbyists

[robin @robnsngh]

thoughts and prayers with @CrusoeAI

[zerohedge @zerohedge]

*ORACLE AND OPENAI END PLANS TO EXPAND TEXAS DATA CENTER SITE

[robin @robnsngh]

@NadimHossain @kevinakwok @chiefofstuffs funny though

[robin @robnsngh]

@NadimHossain @kevinakwok @chiefofstuffs too soon dude, too soon.

[robin @robnsngh]

Arm the kurds. Progressive and dependable American ally across wars. Let’s get them a country while we are at it.

[unusual_whales @unusual_whales]

BREAKING: CIA is 'working to arm Kurdish forces' in Iran, per CNN