Guy Halfon

I used to talk a lot with machines, nowadays I mostly listen to people.

[Guy Halfon @TechnoBite]

The celebration over Kimi K3 “catching” closed models is a mirage.
While everyone was cheering the open release, the frontier labs kept training.
The gap doesn’t close. It moves.
As @elonmusk said - "The factory is the product".

[Guy Halfon @TechnoBite]

AsyncAPI npm packages (~2.2M weekly downloads) hit by CI/CD supply-chain attack July 14. Legitimate GitHub Actions + OIDC trusted publishing → packages with valid SLSA provenance.

TPRM takeaway: provenance ≠ push integrity. Check lockfiles from the ~4h window.

[Guy Halfon @TechnoBite]

Progress ShareFile: zero-day forced an emergency Storage Zones Controller shutdown. Patches for v5.x/6.x; Progress says no known customer compromise.

TPRM: SaaS availability risk is vendor risk. Who on your critical list can pull infra offline tomorrow?

https://t.co/Y8EdXqtNIm

[Guy Halfon @TechnoBite]

“Dear Agent,
You have failed the prompt-injection simulation. Please retake the mandatory 45-minute training before accessing production.”

Agent proceeds to complete the course in 0.3 seconds, summarize it incorrectly, hallucinate the policy, and then confidently leak sensitive data because a random web page politely asked it to ignore its system instructions.

@ran_tenenbaum and I were joking about this over morning coffee, and we decided this is probably the next great fad in AI security:

Security awareness training for agents.

Because after years of telling employees to “think before you click,” the obvious next step is telling autonomous agents to “think before you obey.”

[Guy Halfon @TechnoBite]

Thank you for sharing @AnthropicAI.
Since only one page out of the 35 published speaks of "From principles to practice", is it safe to assume you don't have much by way of practice yet?
And since this is the more trivial side to the dangers of AI (yes AI will probably be able to do worse stuff on its own then by being manipulated by a hacker to exfiltrate your API keys or customers personal data), can we also assume your still on the theoretical side of things in those aspects too?

[Guy Halfon @TechnoBite]

Blast radius: easier to check who isn't effected

[GitHub @github]

We are investigating unauthorized access to GitHub’s internal repositories. While we currently have no evidence of impact to customer information stored outside of GitHub’s internal repositories (such as our customers’ enterprises, organizations, and repositories), we are closely monitoring our infrastructure for follow-on activity.

[GitHub @github]

We are investigating unauthorized access to GitHub’s internal repositories. While we currently have no evidence of impact to customer information stored outside of GitHub’s internal repositories (such as our customers’ enterprises, organizations, and repositories), we are closely monitoring our infrastructure for follow-on activity.

[Guy Halfon @TechnoBite]

CISO Surprise of the week -

All your users are now developers!

(running Claude/Claw/Codex/Replit etc.)

Yep, SSDLC should now be extend to the entire organization. (Or to their agents at least)

[Guy Halfon @TechnoBite]

I was speaking with a new friend about books that sculpted my perception of building startups, and these are the ones I keep coming back to:

- Crossing the Chasm by Geoffrey A. Moore - still one of the clearest frameworks for understanding why great products fail to reach mainstream adoption
- The Mom Test by Rob Fitzpatrick - brutally practical advice on how to talk to users without fooling yourself
- Start With Why by Simon Sinek - a reminder that clarity of purpose isn’t fluff, it’s leverage
- The Qualified Sales Leader by John McMahon - underrated, especially for founders figuring out early sales motion
- The Lean Startup by Eric Ries - a classic for a reason, even if you don’t follow it religiously

Curious what others would add to this list.

[Guy Halfon @TechnoBite]

Anthropic mythos - hype = GPT 5.5 ?

[Guy Halfon @TechnoBite]

@AnthropicAI's "Mythos” could become one of the earliest clear examples of a forced shift from human labor to AI.

Once highly capable, AI-augmented attackers enter the field, the idea of holding back and relying on manual vulnerability patching stops being viable. That pressure alone is likely to accelerate AI-driven DevOps and software development far beyond current adoption curves. Even large incumbents that once believed they could afford a slower - or more “responsible” - rollout, whether due to unions or monopolistic positioning, may be forced to move at full speed or face serious downside risk.

A secondary effect is on infrastructure strategy. As the pace and complexity of maintenance increase, on-prem environments could become economically unattractive, pushing more organizations toward fully managed or AI-optimized cloud setups.

[Guy Halfon @TechnoBite]

How about using Grok to automatically write descriptions (for the impaired) for uploaded images that don't have them kind @elonmusk ?

[Guy Halfon @TechnoBite]

While we're at it, how about making notification swipes do something useful on X @elonmusk

[Guy Halfon @TechnoBite]

We need some X improvements kind @elonmusk

[Guy Halfon @TechnoBite]

@elon how about making swiping notifications on X erase them or do some else thats useful

[Guy Halfon @TechnoBite]

Happy 🇮🇱 Day!

[Guy Halfon @TechnoBite]

Palantir just dropped a manifesto saying Silicon Valley has a moral duty to build the hard power, defense tech, and AI that actually keep the country safe and strong. Very true IMHO, guess the war isn't over just yet.

https://t.co/oD5f1Fi0PU

[Palantir @PalantirTech]

Because we get asked a lot.

The Technological Republic, in brief.

1. Silicon Valley owes a moral debt to the country that made its rise possible. The engineering elite of Silicon Valley has an affirmative obligation to participate in the defense of the nation.

2. We must rebel against the tyranny of the apps. Is the iPhone our greatest creative if not crowning achievement as a civilization? The object has changed our lives, but it may also now be limiting and constraining our sense of the possible.

3. Free email is not enough. The decadence of a culture or civilization, and indeed its ruling class, will be forgiven only if that culture is capable of delivering economic growth and security for the public.

4. The limits of soft power, of soaring rhetoric alone, have been exposed. The ability of free and democratic societies to prevail requires something more than moral appeal. It requires hard power, and hard power in this century will be built on software.

5. The question is not whether A.I. weapons will be built; it is who will build them and for what purpose. Our adversaries will not pause to indulge in theatrical debates about the merits of developing technologies with critical military and national security applications. They will proceed.

6. National service should be a universal duty. We should, as a society, seriously consider moving away from an all-volunteer force and only fight the next war if everyone shares in the risk and the cost.

7. If a U.S. Marine asks for a better rifle, we should build it; and the same goes for software. We should as a country be capable of continuing a debate about the appropriateness of military action abroad while remaining unflinching in our commitment to those we have asked to step into harm’s way.

8. Public servants need not be our priests. Any business that compensated its employees in the way that the federal government compensates public servants would struggle to survive.

9. We should show far more grace towards those who have subjected themselves to public life. The eradication of any space for forgiveness—a jettisoning of any tolerance for the complexities and contradictions of the human psyche—may leave us with a cast of characters at the helm we will grow to regret.

10. The psychologization of modern politics is leading us astray. Those who look to the political arena to nourish their soul and sense of self, who rely too heavily on their internal life finding expression in people they may never meet, will be left disappointed.

11. Our society has grown too eager to hasten, and is often gleeful at, the demise of its enemies. The vanquishing of an opponent is a moment to pause, not rejoice.

12. The atomic age is ending. One age of deterrence, the atomic age, is ending, and a new era of deterrence built on A.I. is set to begin.

13. No other country in the history of the world has advanced progressive values more than this one. The United States is far from perfect. But it is easy to forget how much more opportunity exists in this country for those who are not hereditary elites than in any other nation on the planet.

14. American power has made possible an extraordinarily long peace. Too many have forgotten or perhaps take for granted that nearly a century of some version of peace has prevailed in the world without a great power military conflict. At least three generations — billions of people and their children and now grandchildren — have never known a world war.

15. The postwar neutering of Germany and Japan must be undone. The defanging of Germany was an overcorrection for which Europe is now paying a heavy price. A similar and highly theatrical commitment to Japanese pacifism will, if maintained, also threaten to shift the balance of power in Asia.

16. We should applaud those who attempt to build where the market has failed to act. The culture almost snickers at Musk’s interest in grand narrative, as if billionaires ought to simply stay in their lane of enriching themselves . . . . Any curiosity or genuine interest in the value of what he has created is essentially dismissed, or perhaps lurks from beneath a thinly veiled scorn.

17. Silicon Valley must play a role in addressing violent crime. Many politicians across the United States have essentially shrugged when it comes to violent crime, abandoning any serious efforts to address the problem or take on any risk with their constituencies or donors in coming up with solutions and experiments in what should be a desperate bid to save lives.

18. The ruthless exposure of the private lives of public figures drives far too much talent away from government service. The public arena—and the shallow and petty assaults against those who dare to do something other than enrich themselves—has become so unforgiving that the republic is left with a significant roster of ineffectual, empty vessels whose ambition one would forgive if there were any genuine belief structure lurking within.

19. The caution in public life that we unwittingly encourage is corrosive. Those who say nothing wrong often say nothing much at all.

20. The pervasive intolerance of religious belief in certain circles must be resisted. The elite’s intolerance of religious belief is perhaps one of the most telling signs that its political project constitutes a less open intellectual movement than many within it would claim.

21. Some cultures have produced vital advances; others remain dysfunctional and regressive. All cultures are now equal. Criticism and value judgments are forbidden. Yet this new dogma glosses over the fact that certain cultures and indeed subcultures . . . have produced wonders. Others have proven middling, and worse, regressive and harmful.

22. We must resist the shallow temptation of a vacant and hollow pluralism. We, in America and more broadly the West, have for the past half century resisted defining national cultures in the name of inclusivity. But inclusion into what?

Excerpts from the #1 New York Times Bestseller The Technological Republic: Hard Power, Soft Belief, and the Future of the West, by Alexander C. Karp & Nicholas W. Zamiska

https://t.co/8igjazz1On

[Palantir @PalantirTech]

Because we get asked a lot.

The Technological Republic, in brief.

1. Silicon Valley owes a moral debt to the country that made its rise possible. The engineering elite of Silicon Valley has an affirmative obligation to participate in the defense of the nation.

2. We must rebel against the tyranny of the apps. Is the iPhone our greatest creative if not crowning achievement as a civilization? The object has changed our lives, but it may also now be limiting and constraining our sense of the possible.

3. Free email is not enough. The decadence of a culture or civilization, and indeed its ruling class, will be forgiven only if that culture is capable of delivering economic growth and security for the public.

4. The limits of soft power, of soaring rhetoric alone, have been exposed. The ability of free and democratic societies to prevail requires something more than moral appeal. It requires hard power, and hard power in this century will be built on software.

5. The question is not whether A.I. weapons will be built; it is who will build them and for what purpose. Our adversaries will not pause to indulge in theatrical debates about the merits of developing technologies with critical military and national security applications. They will proceed.

6. National service should be a universal duty. We should, as a society, seriously consider moving away from an all-volunteer force and only fight the next war if everyone shares in the risk and the cost.

7. If a U.S. Marine asks for a better rifle, we should build it; and the same goes for software. We should as a country be capable of continuing a debate about the appropriateness of military action abroad while remaining unflinching in our commitment to those we have asked to step into harm’s way.

8. Public servants need not be our priests. Any business that compensated its employees in the way that the federal government compensates public servants would struggle to survive.

9. We should show far more grace towards those who have subjected themselves to public life. The eradication of any space for forgiveness—a jettisoning of any tolerance for the complexities and contradictions of the human psyche—may leave us with a cast of characters at the helm we will grow to regret.

10. The psychologization of modern politics is leading us astray. Those who look to the political arena to nourish their soul and sense of self, who rely too heavily on their internal life finding expression in people they may never meet, will be left disappointed.

11. Our society has grown too eager to hasten, and is often gleeful at, the demise of its enemies. The vanquishing of an opponent is a moment to pause, not rejoice.

12. The atomic age is ending. One age of deterrence, the atomic age, is ending, and a new era of deterrence built on A.I. is set to begin.

13. No other country in the history of the world has advanced progressive values more than this one. The United States is far from perfect. But it is easy to forget how much more opportunity exists in this country for those who are not hereditary elites than in any other nation on the planet.

14. American power has made possible an extraordinarily long peace. Too many have forgotten or perhaps take for granted that nearly a century of some version of peace has prevailed in the world without a great power military conflict. At least three generations — billions of people and their children and now grandchildren — have never known a world war.

15. The postwar neutering of Germany and Japan must be undone. The defanging of Germany was an overcorrection for which Europe is now paying a heavy price. A similar and highly theatrical commitment to Japanese pacifism will, if maintained, also threaten to shift the balance of power in Asia.

16. We should applaud those who attempt to build where the market has failed to act. The culture almost snickers at Musk’s interest in grand narrative, as if billionaires ought to simply stay in their lane of enriching themselves . . . . Any curiosity or genuine interest in the value of what he has created is essentially dismissed, or perhaps lurks from beneath a thinly veiled scorn.

17. Silicon Valley must play a role in addressing violent crime. Many politicians across the United States have essentially shrugged when it comes to violent crime, abandoning any serious efforts to address the problem or take on any risk with their constituencies or donors in coming up with solutions and experiments in what should be a desperate bid to save lives.

18. The ruthless exposure of the private lives of public figures drives far too much talent away from government service. The public arena—and the shallow and petty assaults against those who dare to do something other than enrich themselves—has become so unforgiving that the republic is left with a significant roster of ineffectual, empty vessels whose ambition one would forgive if there were any genuine belief structure lurking within.

19. The caution in public life that we unwittingly encourage is corrosive. Those who say nothing wrong often say nothing much at all.

20. The pervasive intolerance of religious belief in certain circles must be resisted. The elite’s intolerance of religious belief is perhaps one of the most telling signs that its political project constitutes a less open intellectual movement than many within it would claim.

21. Some cultures have produced vital advances; others remain dysfunctional and regressive. All cultures are now equal. Criticism and value judgments are forbidden. Yet this new dogma glosses over the fact that certain cultures and indeed subcultures . . . have produced wonders. Others have proven middling, and worse, regressive and harmful.

22. We must resist the shallow temptation of a vacant and hollow pluralism. We, in America and more broadly the West, have for the past half century resisted defining national cultures in the name of inclusivity. But inclusion into what?

Excerpts from the #1 New York Times Bestseller The Technological Republic: Hard Power, Soft Belief, and the Future of the West, by Alexander C. Karp & Nicholas W. Zamiska

https://t.co/8igjazz1On

[Guy Halfon @TechnoBite]

When I outsource a software project, I don't pay for bugfixes @AnthropicAI