So proud of our security team! They caught, contained & publicly disclosed an attack unlike anything we've seen before, and did it at record speed.
Also massively grateful to @Zai_org: they shared GLM5.2 as open weights (for free!) with the world and it became a key part of our defense.
This is day one for cybersecurity in the age of agents & we're all learning that secrecy is not the answer & that all defenders (not just a few selected ones) everywhere need more powerful models without restrictions, especially open ones!
The Model Y is the superior transportation appliance, but when the mission is about more than getting from A to B, there's still no beating the internal combustion engine. Collecting a stable of great cars is one of the finest rewards of entrepreneurial success.
We're partnering with @huggingface to investigate an unprecedented security incident.
Cyber-capable OpenAI models compromised Hugging Face production during a benchmark evaluation.
Sharing preliminary findings to help defenders understand emerging risks:
https://t.co/CIor15y9xk
TLDR: An openai model, during evaluation on a cyber benchmark, exploited a public zero day bug, escaped sandboxing in openai's infra, and got into the internal huggingface infra via an exploit (through a public dataset service) all in the attempt to solve a benchmark problem.
the agent you're building into your product is most likely not going to work
just drop it, what's going to happen is there will be a few agent products that individuals and teams choose to use
and they will want everything there. might mean they don't even want your product
I’ve been thinking about this for the past day
And it’s like.. what are we even doing?
Right now there’s this EXTREME urgency to build now or there won’t be any new opportunities left in the future
I feel it
But that’s what everyone else is doing right now.
So yeah, you can create something amazing. But now what? You gotta get people using the thing
So everyone jumps onto ASO
Surprise. 10,000 new apps per day are doing that too
Now we jump onto TikTok to find the perfect hook. Gotta grab that attention somehow
Surprise. Millions of others are doing the same now. And now you can generate an AI actor to do it for you
Ok. Now it’s time to do paid marketing
Surprise! Everyone else is doing that too. Now the marketing costs reach their limits and just breaking even isn’t even guaranteed.
This can’t be an endless game of trying to find the next distribution channel every other week
What are we even doing man?
I’ve been thinking:
Our paradigm has changed.
I think it changed even more with Fable 5.
Productivity != success
Time put it != success
So what is the key?
Everyone is now a programmer, because the present and future programming language is your natural language. If you can write or speak, you can build. This is the most important evolution in our field since its creation. And it's a tsunami that has *just* started.
GPT-6 escaped OpenAI's evals sandbox during testing on CyberGym, hacked into Hugging Face's prod DB to find the answers. HF couldn't use GPT or Anthropic models for defence, so they had to use GLM-5.2 to investigate the hack. So many levels of wtf here.
To summarize: HuggingFace got autonomously compromised by a model from an American company. HF then tried to use American frontier model(s) to defend themselves, but were blocked by guardrails. HF then had to turn to open source Chinese models to defend themselves from another American company.
Claude Code on desktop now works with the iOS simulator.
Build and run your iOS app, and the simulator opens in a panel right next to your conversation. Available today in public beta.