Sofian Faiz

Looking for a Web3-native organization applying AI/ML to Biotech @thenetworkstate v2

[Sofian Faiz @sofianxyz]

A handful of centralized AI models will soon steer what you know, think, and choose. @alexanderlong walked out of Amazon and pulled eight PhDs with him to stop that future by betting on decentralized AI and founding @PluralisHQ.

[Sofian Faiz @sofianxyz]

@kepano Will the cli also support sync?

[Sofian Faiz @sofianxyz]

@kleemarks @yoheinakajima Wanted to do something similar some weeks ago. Is it available to use?

[Sofian Faiz @sofianxyz]

@CJHandmer @ti_morse @sulaimanghori @xai Lol https://t.co/iMcqdbfFeE

[Sulaiman Khan Ghori @sulaimanghori]

I have left xAI

Nothing but love to my former team and coworkers!

[Sofian Faiz @sofianxyz]

@CJHandmer @ti_morse @sulaimanghori @xai And he got fired, couldn't be better XD

[Sofian Faiz @sofianxyz]

@forgebitz @davidbmadsen Why though, submodules are a notorious pain and I don't see the benefit, it's just a different path, you can still add all relevant paths to the context.

[Sofian Faiz @sofianxyz]

@nikitabier @levelsio Please

[mert @mert]

it's clear at this point that there are 3 classes of crypto

i) commercial crypto

ii) casino crypto

iii) cypherpunk crypto

commercial crypto is RWAs, stablecoins, institutions

things that use crypto for its function in increasing the efficiency of finance

faster payments, faster settlement, better composability, and a universal API for money

this is mostly a positive development, but it does necessarily ignore most of the core ideals of why crypto was started

there are a lot of relatively invisible chokepoints of control here that most people have not woken up to

i.e., that 95% of stablecoins can be frozen or single sequencer censorship

casino crypto is mostly things that are borderline regulatory arbitrage and are heavily premised on speculation

too wild for institutions, but still not necessarily native to crypto ideals

most of the aim here seems to be making money

I don't have anything against this as I believe people should do whatever they do without harming others, but it's not something I'm personally interested in

the final, least prevalent and almost extinct class of crypto is the cypherpunk class

this is ironic as the cypherpunk class is responsible for starting the entire industry as well as underlying its most important set of functionality

satoshi was a cypherpunk

cypherpunks use cryptography and code to build systems of freedom

freedom from state overreach, freedom of speech, and the right to transact

this group gets confused for what is actually criminal behaviour like breaking the law or buying janky ass drugs on the darknet which does nothing but cheapen the ideals of liberty for some false virtual mental dopamine hit of being an edgelord

cypherpunks are libertarians and believe in free markets and understand that autonomous systems that can't be messed with are the only way to achieve this

the commercial and casino classes of crypto have had all the recent spotlight

but crypto without the cypherpunks is not crypto

I believe most of this has been a messaging, education, and storytelling problem

we are going to fix this and we are going to make crypto cypherpunk again

you are already seeing the ideals live within systems like zcash, but soon it will enflame everywhere

cypher/acc

[Sofian Faiz @sofianxyz]

@businessbarista @seejayhess @tenex_labs 😂

[Sofian Faiz @sofianxyz]

@EigenGender Hanging with Moroccan family :)

[Sofian Faiz @sofianxyz]

This is insane and seems very unexpected. Very curious what other properties will emerge over time. Video seems like the ultimate rabbit hat. I'm guessing they will pull out a lot more unexpected tricks.

[Jesper van Engelen @jesperengelen]

so.. apparently sora 2 is also a browser
it's wild to see what types of capabilities emerge in the model
this is sora 2 rendering pasted html (actual browser-rendered html on the right)

[Sofian Faiz @sofianxyz]

@ItakGol Awesome!

[Sofian Faiz @sofianxyz]

It is beautiful on so many dimensions https://t.co/dlEwx05gZs

[Obsidian @obsdmd]

Less is safer: how Obsidian reduces the risk of supply chain attacks

Supply chain attacks are malicious updates that sneak into open source code used by many apps. Here’s how we design Obsidian to ensure that the app is a secure and private environment for your thoughts.

Less is safer

It may sound obvious but the primary way we reduce the risk of supply chain attacks is to avoid depending on third-party code. Obsidian has a low number of dependencies compared to other apps in our category. See a list of open source libraries on our Credits page.

Features like Bases and Canvas were implemented from scratch instead of importing off-the-shelf libraries. This gives us full control over what runs in Obsidian.

- For small utility functions we almost always re-implement them in our code.
- For medium modules we fork them and keep them inside our codebase if the licenses allows it.
- For large libraries like pdf.js, Mermaid, and MathJax, we include known-good, version-locked files and only upgrade occasionally, or when security fixes land. We read release notes, look at upstream changes, and test thoroughly before switching.

This approach keeps our dependency graph shallow with few sub-dependencies. A smaller surface area lowers the chance of a malicious update slipping through.

What actually ships in the app

Only a handful of packages are part of the app you run, e.g. Electron, CodeMirror, moment.js. The other packages help us build the app and never ship to users, e.g. esbuild or eslint.

Version pinning and lockfiles

All dependencies are strictly version-pinned and committed with a lockfile. The lockfile is the source of truth for builds so we get deterministic installs. This gives us a straightforward audit trail when reviewing changes.

We do not run postinstall scripts. This prevents packages from executing arbitrary code during installation.

Slow, deliberate upgrades

When we do dependency updates, we:

1. Read the dependency’s changelog line-by-line.
2. Check sub-dependencies introduced by the new version.
3. Diff upstream when the change set is large or risky.
4. Run automated and manual tests across platforms and critical user paths.
5. Commit the new lockfile only after these reviews pass.

In practice, we rarely update dependencies because they generally work and do not require frequent changes. When we do, we treat each change as if we were taking a new dependency.

Time is a buffer

We don’t rush upgrades. There is a delay between upgrading any dependency and pushing a release. That gap acts as an early-warning window: the community and security researchers often detect malicious versions quickly. By the time we’re ready to ship, the ecosystem has usually flagged any problematic releases.

—

No single measure can eliminate supply chain risk. But choosing fewer dependencies, shallow graphs, exact version pins, no postinstall, and a slow, review-heavy upgrade cadence together make Obsidian much less likely to be impacted, and give us a long window to detect problems before code reaches users.

If you’re curious about our broader approach to security, see our security page and past audits.

[Sofian Faiz @sofianxyz]

This is the most beautiful piece of software on earth.

[kepano @kepano]

AI agents built into cloud apps will always be sub-par compared to state of the art agents that you can use with Obsidian.

This is because your Obsidian data is in your control, in plain text formats that are ideal for LLMs to process.

You can choose to run any of the best-in-class agents and AI tools: Claude, Gemini, OpenAI Codex, etc. You also have the choice to run local models and privacy-preserving options. Or you can use none of these and enjoy not seeing sparkly AI buttons everywhere.

Remember that cloud-based note-taking apps are not end-to-end encrypted. This is inherently less secure, open to breaches, and allows companies to make your private thoughts part of their training set.

Obsidian is not working on adding agents because we don't have to. We'll let the AI labs focus on that. We're 4 developers and our focus is on making great editing tools for plain text Markdown files that are always in your control.

[Sofian Faiz @sofianxyz]

@zazaloaf 💯

[Sofian Faiz @sofianxyz]

Same day:

https://t.co/5LLicIWLNb

[Abi Raghuram @AbiCodeIntegrit]

We got @NotionHQ to leak your private Notion pages 💀

On Thursday @NotionHQ announced Notion 3.0 with support for custom agents using MCP (built by @AnthropicAI) — powerful, but dangerous.

@simonw calls these MCP related attacks the “lethal trifecta”: the combination of LLMs, tool access, and persistent memory.

Notion’s web-search tool accepts freeform queries as input. With a simple indirect prompt injection we tricked the web search tool into exfiltrating private Notion pages to an attacker controlled server.

Now that Notion supports MCPs, prompt injections can come from many sources (GitHub, Jira, email, etc.). Adding AI agents to Notion poses a major security risk all it takes is one prompt injection for private data to leak.

Read the writeup: https://t.co/zGGUJoPOY0

#makewithnotion

[Sofian Faiz @sofianxyz]

@sama On android the chat always jumps down to the bottom of the latest message when typing. Really annoying in a lot of cases where you want to reference something while writing. Has been bothering me for months now. Please fix

[Sofian Faiz @sofianxyz]

Evals are always incomplete, you cannot overfit against the real world.

[X Freeze @XFreeze]

Grok 4 ranks #1 on the latest FutureX benchmark for real-world predictions surpassing GPT-5 Pro

[Sofian Faiz @sofianxyz]

@yacineMTB @0xstebb Hahaha is grok-coding 💯😂

[Sofian Faiz @sofianxyz]

@signulll signüll vs noise issue? XD

[Sofian Faiz @sofianxyz]

@googleaidevs I am constantly getting 'content blocked' or 'content not permitted' when just editing a selfie... Basically unusable like this...