Are you prepared for the Singularity?
Floating world
Joined April 2014
- Tweets35.2K
- Following1.3K
- Followers2.7K
- Likes105K
Ξdo retweeted
Every service will need an agent that can interact with your agent and ensure permission and maintain observability and governance.
SCOOP: Major U.S. banks are detecting unauthorized third-party AI agents inside customer accounts, including some attempting to take actions that appear to be independent of user instructions, sources told Axios.
The findings have alarmed banking executives, who are racing to restrict access to their systems as AI moves at a velocity faster than financial institutions can respond, multiple industry and bank executives told Axios.
Several banks are now preparing for worst-case and even “day after” scenarios, including how to rapidly secure or restore customer accounts if things go wrong, the people said.
Several bank executives told Axios they're struggling to distinguish between human users and AI agents. One executive said banks also struggle to determine whether agents are authorized by customers or potentially operating without their permission, more akin to rogue agent behavior.
Read my latest for Axios here: axios.com/2026/10/22/ai-agen…
Ξdo retweeted
The TSO, or Technology Support Office, was established in April to 'covertly disrupt and sabotage foreign technology programs considered threats to American military superiority.'
In September the Washington Sun reported that the NSA told lawmakers in classified intelligence briefings that it estimates it has spent billions of dollars 'evaluating and testing' models this year already.
In the draft S-1 leaked by the WSJ yesterday, Anthropic said that one-fifth of its $16.3 billion in revenue in the first half of 2026 came from just two customers.
Motive, means, and opportunity. I think a lot of money is being spent by agencies through Project Glasswing or channels related to it, and they have probably covertly penetrated every nation on earth to look at anything even potentially considered a threat. There is no defense against the current internal version of Mythos unless you have access to it. No foreign intelligence agency on earth has anything even close. It's actions would also almost certainly be undetectable. Assume US agencies know much more about any technological progress in China than they are letting on; given Dario's openly stated position on China, this would almost certainly be done with his approval.
Ξdo retweeted
Sam Altman on the amount of compute needed if 50% of the world were using personal AI assistants to its full capabilities:
"How many GPUs do you want working for your personal assistant? When people talk about the global market for GPUs and demands for this and demand for compute, the thing I think it misses is people are assuming models are going to stay at the same capability and cost per task as it is today, and maybe there is a cap on demand at that point. For sufficiently high quality intelligence at a sufficiently low cost, I think it is very hard to talk about an arbitrary market size there. I think it's just going to keep going up."
"I believe there will be some periods, like with any new technology, there's supply constraints and supply gluts and we don't have it perfect all the time but I would bet a lot the directional trend is to wanting much more compute."
Via @MatthewBerman
$GOOGL $AMZN $META $MSFT $NVDA $AMD $ORCL
Ξdo retweeted
OpenAI CEO Sam Altman: "I don't even know a dramatic enough word to use… models can find bugs that are outside of the normal threat model of what we think a hacker can do… hardware-level, insane stuff… I no longer think we're gonna be able to just patch all the bugs."
It's over.
Ξdo retweeted
The first thing to change will be terms of service and blocking these agents. Not because the value is low but because the risk is high. Banks will chose self preservation and risk mitigation.
Then we will need to find a security and governance architecture that will get external auditors comfortable.
These are the practical issues of human risk tolerance in AI diffusion that model capability can’t solve.
SCOOP: Major U.S. banks are detecting unauthorized third-party AI agents inside customer accounts, including some attempting to take actions that appear to be independent of user instructions, sources told Axios.
The findings have alarmed banking executives, who are racing to restrict access to their systems as AI moves at a velocity faster than financial institutions can respond, multiple industry and bank executives told Axios.
Several banks are now preparing for worst-case and even “day after” scenarios, including how to rapidly secure or restore customer accounts if things go wrong, the people said.
Several bank executives told Axios they're struggling to distinguish between human users and AI agents. One executive said banks also struggle to determine whether agents are authorized by customers or potentially operating without their permission, more akin to rogue agent behavior.
Read my latest for Axios here: axios.com/2026/10/22/ai-agen…
Ξdo retweeted
So basically, today PHP got two critical bugs that let anyone run code on your server without even logging in, which is bad, and then the details leaked before the patch was even out, which is worse, and it works on WordPress and MediaWiki and Magento and Joomla and Laravel, and Censys says like 1.5 million servers are running a version with no fix, so the NSA was like "take your system offline," and the FBI was like "take your system offline," and CISA and the UK and CERT-EU were all like "take your system offline," and then the Prime Minister of Japan, the actual Prime Minister, posted at 5:55 in the morning telling 48.8 million people to take their system offline, so everyone took their system offline, like the Dutch cybersecurity agency took its own website offline, and the Dutch parliament went offline, and the Port of Rotterdam went offline, and Finland and France and Denmark started pulling government sites, and Wikipedia went down, and Archive.org went down, and Asana and GOG and Something Awful went down, and the University of Vienna's webmail went down for some reason, and that's just PHP. Because GitLab also dropped a CVSS 10.0, which is the highest score they give out, for a bug that's been there since 2014, so that's every self-hosted GitLab for twelve years, and then LiteLLM 1.107.0 got hijacked and shipped a credential stealer and a remote access trojan in every single wheel and the Docker images, including latest, and you didn't even have to import it, just installing it was enough, and it's the second time this year, and then Railway paused every deployment on the entire platform because someone got into the environment variables, so now everyone has to rotate every secret they've ever stored there, and TiDB Cloud said someone was walking around inside with stolen credentials for basically a month and an extortion group says they took 10.6 terabytes, and Zeabur got breached for the second time in two months and is just shutting down, like the whole company, and Node.js patched remote code execution and a TLS bypass, and CISA says Plex is being actively exploited, and someone took over 300 Tor exit relays to steal SSH passwords, and SafePay ransomware has hit over 600 critical infrastructure orgs, and India's biggest bank filed a data loss incident, and Japan has been in an official state of emergency in cyberspace since October 9, which honestly explains the 5:55 AM post. Oh, and eMudhra, a certificate authority that's issued over 60 million certificates, whose entire job is proving websites are who they say they are, was supposed to be using private keys that are random numbers over a hundred digits long, and one of them was 4. Just 4. And the others were like 66 and 237. Anyway, it's Wednesday.
Ξdo retweeted
For the uninitiated
- eMudhra is an Indian digital cert provider
- it’s how your browser can tell for sure the website it’s visiting belongs to the person it’s supposed
- they used relationships (bribery may have been involved) to become the provider to Indian government bodies
- same method + social proof to become provider to Indian state owned banks and companies
- ditto to South Asian and Middle Eastern banks and institutions
- that social proof to become one of the trusted authorities to the global system built into every browser
- they were supposed to passwords 116 digits long, ie hard to guess.
- they used passwords of up to 3 digits long (one was simply “4”)
- the certs which were compromised have been around for 18 months
- why?
- incompetence
- these kinds of companies are usually conduits to channel political money from state owned companies into the hands of political parties
- they rely on the security provided by the state, the ability to arrest people, rather than cryptography
- expect this to be true OF ALL internet infrastructure in any part of the developing world
- anything not run by big tech in those countries is suspect
Ξdo retweeted
To make this more clear: Microsoft says a China-aligned group used an open-source agent framework to hit 2,250+ Microsoft 365 tenants at 2,900 sign-in attempts a minute after the ConnectWise breach. In some cases it got privileged access in under 3 hours.
This is one of the first publicly documented cases in which a state actor has scaled up attacks using AI agents at machine speed.
Whats happening right now is probably way worse than the Hugging Face incident.
AI-powered attacks are hitting real organizations while major platforms disclose breaches and critical flaws.
- Microsoft reports AI agents targeting hundreds of organizations, reaching privileged cloud access in under three hours in multiple cases. It attributes the ConnectWise compromise to the same group.
- CrowdStrike documented four operators running successful AI-agent campaigns. One compromised at least 15 Argentine healthcare organizations.
- PHP2Shell: AI helped turn longstanding PHP flaws into working exploits. Cloudflare’s CEO reports millions of exploitation attempts. Their AI involvement is unknown.
- Railway disclosed possible access to customer secrets. LiteLLM shipped a backdoored release. Zeabur confirmed another breach and is shutting down.
- GitLab patched a maximum-severity flaw affecting 12 years of releases. Node.js patched a serious code-execution vulnerability, with Vercel deploying firewall protections.
Feels like a turningpoint.
Ξdo retweeted
We are all in concordance. It has begun.
It seems like we're in a pretty hot moment cybersecurity wise 😬 If you're reading this website, you probably know more than most of the people in your life about what's happening! they're not talking about any of this stuff on the news, it's too arcane and weird and sudden. It is on us.
Good time to call or text your family and friends, have some cash on hand, have a meetup point in your neighborhood for if the Internet goes down entirely, etc.
The full prepper mode for shit hitting the fan is probably something like what Andreas posted here but you can get 80% of the way with 20% of the effort. Think about what that would mean for you in your situation, and the people you care about, and talk to them about it sooner than later.
And as always, the most important part of prepping is having a strong support network and caring for each other. "Going off grid" isn't the move, it just makes you isolated and you have to do everything yourself. We are social animals. Community is our superpower 🫡🫡🫡
Ξdo retweeted
WHAT 1,730 CRYSTAL PULLERS TELL US ABOUT MUSK’S 20 GW PLAN:
Musk says SpaceX has a “highly proprietary” plan to add 20 GW of power by end-2027, beyond just gas turbines.
Solar is a part of it and things are moving. China shipped 1,730 crystal pullers to the US in Jul–Sep 2026, vs. 15 in the prior 18 months. Pullers grow the silicon ingots that are sliced into wafers for solar panels. (1/3)🧵
xitter.cf/WOLF_Financial/status/…
ELON MUSK SAYS SPACEX CAN BRING POWER ONLINE 12 TO 18 MONTHS FASTER THAN ANYONE ELSE
And he has a plan to add 20 gigawatts next year
On the earnings call, Musk said SpaceX $SPCX is turning on about 220,000 Nvidia $NVDA GB300 chips every month, and that pace will speed up next year. He expects to reach close to 3 gigawatts of compute in the next few months.
He says he's highly confident SpaceX adds another 10 gigawatts next year, for about 13 total. The bigger plan would add 20 gigawatts, and he says the odds of getting there are "rising rapidly."
He kept the details of that plan private, calling it "highly proprietary" because if he spelled it out, others would try to do the same thing.
One advantage he did share comes from rocket engines. Turbine blades and vanes are one of the biggest bottlenecks in the industry, running 12 to 18 months behind the rest of the turbine. SpaceX is now casting its own, using what Musk calls the most advanced casting capability on Earth.
"That means that we can bring power online 12 to 18 months faster than anyone else."
Ξdo retweeted
Holy shit, DeepSeek just released V4.1-Flash-1017, and it’s competitive with Claude Opus 5 on several agentic benchmarks.
It scores 77% on DeepSWE compared to Opus 5’s 74%, 60.5% on AutomationBench against 50.3%, and 72.1% on Apex Bench against 65.8%.
Opus 5 still leads on several other benchmarks, but this is a pretty massive improvement over the previous V4.1 Flash.
And yes, DeepSeek has already released the model weights under the MIT license!!
Ξdo retweeted
Quoting from Anthropic's Michael Sellitto at the IMF Artificial Intelligence and Escalating Cyber Risks panel today. This is the first time Anthropic has given a projection for what percentage of frontier model training will be done by Claude in 2027. In March this number was 1%. By next year they are projecting 80-90%.
'Last year, about zero percent of our code was written by our model Claude. By August of that year, about 50% of the code inside the company was written by the model. That's because we released a new model in August of last year, and the engineers said, ‘Actually, this is the first time that Claude is writing code at my level.’ Anthropic only hires the best software engineers in the world, and it was at that point that Claude finally got to their level. In August we were at 50%. By the end of last year we were at 80–90% of the code in the company being written by the model.
What percentage of training the next-generation models is Claude leading today? This is following a similar step change. At the beginning of the year it was zero percent. In April it was 3%. In August, 26% of the process of building the next generation of models is being led by Claude. And we can project out - and we had a blog post about this not too long ago - that sometime next year it could be 80–90%.'
Ξdo retweeted
TrendForce sees CapEx from the world’s nine leading CSPs to surge 106% YoY to $957 billion in 2026. In 2027, this figure is expected to surpass $1.5 trillion, representing a further 60% YoY increase.
Total server market revenue to surpass $1 trillion for the first time in 2027, while AI server revenue is projected to surge by more than 90% YoY to nearly $920 billion.
$DELL $HPE $SMCI $GOOGL $AMZN $META $MSFT
Ξdo retweeted
TLDR; we will probably never get another ARR number from Anthropic, which is healthy. Should force the market to move away from extreme focus on Anthropic/OpenAI ARR numbers to hyperscale growth rates, which are a much better metric for AI at this point given they capture Muse, Grok, Gemini and Open-Source.
Anthropic FCF positive in Q3 and reaccelerating in October on Opus 5.5 per third party data. Roadshow in several weeks will happen after this has been widely confirmed. Unit economics much better than expected given positive FCF with 75% of their compute going to training. All per public reporting.
OpenAI continuing to grow at the same pace per Sarah Friar interview after they took share vs. Anthropic in Q3. Means the sum of Anthropic/OpenAI growth is accelerating from the Q3 pace. OpenAI probably hits FCF positive in the next few months.
Open-source growing much faster than either Anthropic or OpenAI. Modal tripled since May and is 15x YoY per yesterday’s announcement. Open-source tokens generate more revenue and profit for the hyperscalers/neoclouds than frontier tokens. *Every* open source inference cloud I am aware of is growing faster both sequentially and YoY than either Anthropic or OpenAI. And their combined compute spend is becoming material.
Third party data pointing to hyperscalers continuing to accelerate in Q3. All report in the next two weeks. Acceleration should continue in Q4 and Q1 as installed base of compute slowly reprices higher closer to spot and new capacity comes online at higher prices. Continued acceleration in hyperscalers should help address external funding concerns.
10 year yield down in a straight line over the last 24 hours.
Some risk of escalation in Iran next few days, but earnings and mid-terms probably outweigh taking an ultra long-term view and looking out 30 days.
Biggest risk imo remains cyber and OpenAI/Anthropic dominating the model layer. Fragmentation, competition and lower margins at the model layer are good for everyone else in the ecosystem and for America.
Slower for longer is much better than an overbuild and an actual bubble.
Ξdo retweeted
The Information reports that Tesla managers are targeting an automated production line capable of producing more than 1,000 robots per week by the end of 2026.
Everyone has been wondering where is Optimus v3. Jason Calacanis - weeks ago said Elon has been sending him videos of the new robot, that he’s “not showing publicly” but would win “half of these things” (referring to the Chinese humanoid Olympics)
According to The Information, Tesla increased Optimus production at its Fremont, California, factory from a few dozen robots weekly during the second quarter of 2026 to several hundred in August.
If this true that would mean Tesla has thousands of humanoid robots currently.
