prosocial tech investor @ https://xitter.cf/t.co/2cFVEOiBo8 | race car driver | washed-up FGC | long $UPST (medium-hella) and $GOOG (hella) | views are my own + NFA

Joined April 2016
Farouk retweeted
as far as I can tell, here are the stated views of tier 1 VC firms on extinction risk from AI so far: - Denied/dismissed explicitly: @a16z, @khoslaventures, @benchmark - Silent: @sequoia, @generalcatalyst, @ThriveCapital, @kleinerperkins, @IndexVentures, @Accel, @benchmark, @lightspeedvp - Acknowledged the possibility: Thiel / @foundersfund, @GreylockVC - Firm-level stance that avoiding human extinction is an active priority: none yet. Who is going to lead from the front here? We've all read the Hugging Face report, we are all staring down the cyber-offensive exponential, biological threats and attacks on physical infrastructure are not far off, and we are still early in navigating the threat landscape. There is no later time at which it will make more sense to act than today. The frontier labs are already pulling out all the stops. Investors are a major power bloc at the frontier, they can see what's happening more clearly than almost anyone else. They need not see themselves as spectators to an unfolding drama, but instead can be -- and ought to be -- active participants in hardening civilizational defenses during the critical window (now). That starts by taking ownership of the problem, in no unclear terms, and orienting towards sufficient (not cosmetic) solutions.
Not many people seem to know about Metaplanet, Jaan Tallinn's VC firm. They are the most AGI-pilled firm on the planet, and are about to flip many of the tier 1s. > Invested in @GoogleDeepMind in 2011 > Led @AnthropicAI series A in 2021 > Doubled down on Anthropic in every round since. IRR hurdle for deploying capital into anything else was {absurdly high number}% for years > Anchored the premier AGI hedge funds (+Mythos) + in-house public equities strategy 4-person team in Estonia now managing 10s of billions AUM, liquid after $ANT IPO. Rationalist roots --> zero bureaucracy, cares about human survival & flourishing as north star, doesn't care who else is investing or how high status a founder / idea is Founders: congrats! you no longer need to play status games to raise a mega round for your civilization-scale moonshot. You can just pitch @metaplanetfund
3
9
1
72
12,236
#BREAKING: The Federal Election Commission just shut down its web services after a hacking attempt.
85
534
86
2,429
269,994
Someone needs to start a running tally
ALERT: Several countries including Japan, UK, Switzerland, and Germany, have recently urged citizens to stockpile emergency supplies amid war, disasters and cyber attack fears.
70
ALERT: Several countries including Japan, UK, Switzerland, and Germany, have recently urged citizens to stockpile emergency supplies amid war, disasters and cyber attack fears.
79
1,192
259
6,654
700,415
Farouk retweeted
BREAKING: A hacker is attempting to breach the US Federal Election Commission's systems and that agency has had to 'temporarily shut down' its web-facing services as a result, according to an email seen by Reuters reut.rs/4imQyUu
905
4,476
1,121
8,693
1,601,712
BREAKING: Japan to urge all citizens to stockpile at least 3 days of food and water in preparation for major disasters and events, with an official emergency request set for November 2. "At least three days, and I'd like to say a week if possible… please prepare food, toilets, and water properly at home even without public assistance," Japan's Disaster Management says. It comes just 2 days after the Pentagon started to prepare every major US military base to operate for at least 90 days without outside electricity, fuel, water or supplies, anticipating a major war. The UK launched the "Be Ready" program 5 days ago, also advising all citizens to keep 3 days of key supplies, including bottled water, non-perishable food, and a battery or wind-up FM radio.
Readers added context they thought people might want to know
Japan's call for citizens to stockpile at least 3 days of supplies is longstanding official advice for natural disasters like earthquakes and is tied to the scheduled November 2 launch of its new National Disaster Management Agency. japantimes.co.jp/news/2026/09/2… maff.go.jp/j/zyukyu/foods… ibtimes.co.uk/japan-househol…
170
718
219
5,771
816,989
Farouk retweeted
Not many people seem to know about Metaplanet, Jaan Tallinn's VC firm. They are the most AGI-pilled firm on the planet, and are about to flip many of the tier 1s. > Invested in @GoogleDeepMind in 2011 > Led @AnthropicAI series A in 2021 > Doubled down on Anthropic in every round since. IRR hurdle for deploying capital into anything else was {absurdly high number}% for years > Anchored the premier AGI hedge funds (+Mythos) + in-house public equities strategy 4-person team in Estonia now managing 10s of billions AUM, liquid after $ANT IPO. Rationalist roots --> zero bureaucracy, cares about human survival & flourishing as north star, doesn't care who else is investing or how high status a founder / idea is Founders: congrats! you no longer need to play status games to raise a mega round for your civilization-scale moonshot. You can just pitch @metaplanetfund
12
16
5
302
34,335
Every time there's a new Genie launch my mind is blown but this one is exceptionally mind-blowing. Do they sell Simulation Hypothesis contracts on Polymarket?
This is Genie 4, our most realistic and interactive world model yet. 🌐 Explore dynamic environments in real time to see how the scene responds, sounds, and how the people in it move, react, and speak.
2
130
This is Genie 4, our most realistic and interactive world model yet. 🌐 Explore dynamic environments in real time to see how the scene responds, sounds, and how the people in it move, react, and speak.
796
2,159
1,620
19,789
2,497,200
Many of you don't understand how serious this is, so let me break it down. In computer science there is a famous kind of puzzle called 3-SAT. You are given a long list of yes-or-no switches and a set of rules about how they must be arranged, and you have to find a combination that satisfies every rule. The obvious way to solve it is to try every combination, but each new switch doubles the number of possibilities, so a puzzle with a few hundred switches would take longer than the age of the universe to brute force. For decades, the smartest people in the field found clever tricks that made this a little faster, but every trick still hit the same wall: the time required kept exploding as the puzzle grew. About 25 years ago, two computer scientists, Russell Impagliazzo and Ramamohan Paturi, working with Francis Zane, turned that wall into a formal idea. They proposed the Exponential Time Hypothesis, which says this explosion is not a failure of human cleverness but a law of nature. No algorithm, however brilliant, will ever solve 3-SAT without the time blowing up exponentially. Nobody could prove it, but almost everyone believed it, and it became one of the foundations of modern computer science. Researchers used it as a measuring stick. If you could show that solving some other problem quickly would also crack 3-SAT quickly, you had shown that problem was hopelessly hard too. Hundreds of papers, across scheduling, graphs, logic and much more, rest on this one assumption. Now an internal AI model at OpenAI claims to have broken it. It says it found an algorithm that solves these puzzles meaningfully faster than the hypothesis allows, and it has checked the proof in a computer verification system called Lean. And here is the remarkable part: the very people who proposed the hypothesis, Impagliazzo and Paturi, along with MIT's Ryan Williams, are now leading the public review of whether a machine has disproved their own idea. So what happens next? If the disproof holds, a large part of theoretical computer science has to be revisited. Every result that said "this problem cannot be solved faster, assuming ETH" loses its foundation, and researchers will have to work out which of those walls were real and which were simply where we stopped looking. It does not mean everything becomes easy. The new algorithm is still slow in absolute terms and this is not the famous P versus NP problem being solved. But it means our map of what is possible was wrong in a place we were very confident about, and it was an AI that redrew it. If the disproof fails, the hypothesis survives and the field breathes out, but we will still have watched an AI produce serious, checkable work on one of the deepest questions in the discipline, closely enough that the founders of the idea had to take it seriously. Either way, something has shifted.
An internal model at OpenAI has produced a claimed refutation of ETH! Russell Impagliazzo, Mohan Paturi, and I have been asked to help organize an open and independent examination of this claim. 1/4
321
1,555
214
16,373
1,361,022
You know it’s a decent S-1 when Ed Zitron hasn’t tweeted anything out yet.
60
74
8
2,002
86,390
Jokes aside, the Anthropic S-1 filing is pretty incredible and highly encourage everyone to take a skim through it, even if you never plan on owning the stock Reminder that this business was started roughly half a decade ago and has already scaled up to become one of the most valuable companies in the world We have never seen growth and excitement at this level around a business before. The revenue growth numbers and free cash flow metrics are far beyond what any early stage investor underwrote in the financing rounds You can make up your mind on the bull/bear thesis, and there is a certainly a fair case for both, especially at a $2 trillion valuation that has been floated around The one thing you can’t deny is that Dario and his team has truly built one of the most impressive businesses we have ever seen Speaking from my own personal experience, Opus 5.5 was an absolute game changer and my spend on their models continue to grow exponentially every single month Anthropic is truly an incredible symbol of meritocratic capitalism at its best. The company was the 2nd player in its industry for a very long time and came back from behind to IPO before OpenAI. If you build incredible products, the demand will come. We should all take a moment to be glad that this is an America company, built in America by Americans working hard at a frontier problem every single day As an American, I hope we see hundreds of more companies like Anthropic bloom over the next decade
24
48
3
980
53,998
happy October the 24th to all who celebrate
39
3,347
87
18,339
294,666
Evolving threat 🚨 CVE-2026-111497, previously known to affect Node.js (node2shell) and Python has evolved into “HTTP2Shell.” A significant blast radius. This vulnerability leaves many libraries and applications using HTTP vulnerable to pre-auth RCE via Brotli decompression. Please be aware. Fixes not yet available for all affected services. Look for Brotli (1.2.1) dependency upgrades when they become available.
117
850
429
3,451
805,281
We tried to warn the world and far too often, to be frank, we were yelled at for doing so. “Regulatory capture,” “marketing hype,” “doomer anxiety,” “fear-mongering about open source,” “why don’t you talk about the benefits?”
Replying to @hinapansari
yes. it was always going to be this way. we tried to warn the world.
6
91
133
1,018
202,158
My Microsoft personal account reset code is 492725. Please stop requesting it now thanks
1
1
1
5
1,043
There is nothing to worry about. Nothing important is run on PHP or old software—except the water & electrical grid, a few government services like our missile defense systems and a handful of electrified fences at the zoo (for the lions, tigers and cobras).
854
2,101
347
27,566
971,810
🚨 BREAKING: LINUX IS NOW FACING TWO CRITICAL SECURITY VULNERABILITIES, AND THERE ARE NO OFFICIAL KERNEL FIXES YET. Both rated 9.0/10 in severity. One could allow hackers to take control of vulnerable servers WITHOUT EVEN LOGGING IN. And the most alarming part? The flaws were made PUBLIC before patches were ready. Here's what's happening: → TWO CRITICAL RCE FLAWS: Both affect KSMBD, Linux's built-in SMB file server. → NO PASSWORD REQUIRED: One vulnerability could allow unauthenticated attackers to execute malicious code on vulnerable servers. → KERNEL-LEVEL ACCESS: Successful exploitation could potentially give attackers control within the Linux kernel itself. → NO MAINLINE PATCH YET: Both vulnerabilities were publicly disclosed before official kernel fixes were available. → DISCOVERED BY AI: Trend Micro's AI-powered security scanner identified the flaws. → SERVERS AT RISK: Linux systems running the vulnerable KSMBD service need immediate attention, especially if port 445 is exposed. First PHP. Then Node.js. Then GitLab. Then Python. NOW LINUX. And this time, the vulnerabilities are PUBLIC before the fixes are ready. If you manage Linux servers, CHECK YOUR EXPOSURE NOW.
🚨 BREAKING: IT JUST KEEPS GETTING WORSE. NOW PYTHON IS FACING A MASSIVE SECURITY EMERGENCY. Python's security team has issued an URGENT warning after a certificate authority compromise put Python's HTTPS security at risk. → 8 CERTIFICATE AUTHORITY KEYS COMPROMISED. Some were so weak they could be cracked almost INSTANTLY. → FAKE TRUSTED WEBSITES: Attackers could potentially impersonate Python.org, PyPI and other websites during intercepted connections. → MALICIOUS DOWNLOADS: Vulnerable environments could be tricked into downloading software from attacker-controlled servers. → YOUR OS PATCH MAY NOT PROTECT YOU: Older versions of pip can STILL trust compromised certificates even after system updates. → EMERGENCY UPDATES: Python developers are being told to immediately update pip, certifi, uv and other affected tools. → DOCKER USERS AT RISK: Existing container images may retain vulnerable certificate stores and need rebuilding. First PHP. Then Node.js. Then GitLab. Then LiteLLM. NOW PYTHON. The very systems developers rely on to establish TRUST online are becoming the attack surface. If you use Python, PATCH NOW.
Readers added context they thought people might want to know
The Python certifi/pip details match the real eMudhra CA incident, but PHP, GitLab and LiteLLM involved unrelated software bugs, platform flaws and supply chain malware—not CA key compromises like this (Node.js patched concurrently for the same CA issue). discuss.python.org/t/information-… emudhra.we-have-a-problem.com github.com/advisories/GHS… docs.litellm.ai/blog/security-… snyk.io/blog/php-patch…
Readers added context they thought people might want to know
KSMBD is a rarely used optional in-kernel SMB server distinct from the common Samba implementation; it is not enabled or shipped by default on major distributions like RHEL, and the flaws affect only systems explicitly running it with port 445 exposed. thehackernews.com/2026/10/two-cv… threatlandscape.io/blog/ksmbd-zdi…
146
728
210
3,795
453,390
Farouk retweeted
trying to tell offline friends that the internet apocalypse is happening rn
79
549
27
8,883
113,127
# Black October For anyone who knows me even somewhat well, it's clear that I am a 99th percentile tech optimist. However, the vibes have shifted for me quite a bit in the last 18 hours, and I feel a moral imperative to share what I'm thinking and feeling with my circles so that everyone can understand, and hopefully take seriously, what's happening right now. I think October 2026 will have many chapters written about it in the history books. You know those scenes in financial movies like Margin Call where someone realizes that they're all fucked, and no one else sees it yet? And that person feels like they're crazy, and then suddenly everyone is pulling an all-nighter in a boardroom and freaking out? Yeah, that's kind of how this is feeling right now in the SF/Bay Area/AI circles. We're 48 hours into what is being called Black October. In the last 2 days there have been several dozen cyber attacks which, in isolation, would each have been the worst to happen in an entire calendar year. Every sector from government to education to big tech and banks is being massively affected, and people are starting to freak out. In a nutshell, what's happened is that frontier AI models have gotten to a point where they are as advanced as the most sophisticated programmers, with one critical difference: they can work 24/7, and you can spin up 10,000 of them with a single command and they'll work together tirelessly until they accomplish their task. The most advanced models today are from companies like Anthropic and OpenAI, whose current best technology is so good that they haven't been able to roll it out to everyone yet because of the national security risks it poses. Meanwhile, the best open source models (where anyone can just download the model weights and do whatever they want with them, uncensored) are slightly behind the frontier but still 90-95% as capable. These models, developed primarily in China, are being used by black hat hackers to wreak havoc on the Western capitalist structure. Presumably, this has been part of China's plan the entire time, and we're seeing its implications fall out in real time. In red-pilled AI circles, we've been sharing and reading papers called things like "Situational Awareness" and "AI 2027" for the last year or so, which at the time felt a bit like near-term speculative fiction. They laid out the case for why Artificial General Intelligence (AI smarter than any human at any knowledge task) and Recursive Self-Improvement (models that are able to use themselves to get better) weren't half-baked future ideas anymore, but instead an inevitable outcome of the linear progress that's happening. These papers would then talk about things like "takeoff scenarios," trying to envision how that moment would come to be and what it would be like when it happened. It would either be a "slow takeoff" that would play out over the course of months and quarters, happening subtly and only obvious to a few. Or, it would be a "fast takeoff" where it would pretty much happen instantly, like a bit flipping from 0 to 1. From everything that I can see and am feeling, we are currently experiencing the fast takeoff scenario. Beyond the crazy security vulnerabilities that have come out recently, there have also been massive breakthroughs in life sciences, fundamental computer science, materials science, and pure mathematics that have all landed in the same time frame. While I still firmly believe that AI will be a net positive for humanity, it's more clear to me than ever that the societal and individual risk is very real, and is playing out NOW. For as much conviction as I have that this is happening, the thing that's caused me to lose sleep is that I don't really know what to do about it, or more importantly, what to tell you, reader, to do about it. So, the best I can do is make a few suggestions that have always been a good idea but are more timely now than ever: Set up 2-factor authentication for everything. I use Duo. Use a password manager across your devices. I use 1Password. Get an identity protection app set up. I use Alta. Move your IoT devices to their own network. Claude helped me do this. And last, but certainly not least, if you've been avoiding leaning into AI, see this as a catalyst to wake up and start using it. Don't just use the chat mode version of ChatGPT/Claude; click that Code/Work button and see how easily you can have AI write code to help you with your job. One of the biggest vulnerabilities was in a massively popular programming language called PHP, and the prompt that set it off was literally, "Find vulnerabilities in php." This is an unprecedented time for humanity, but as we've done with many things before, we will prevail so long as we are kind, loving, and open-minded to the world. Much love.
720
1,999
381
17,993
3,765,599