Where the AI market is talking

Choose DuckDB rather than SQLite

SQLite can be replicated. rqlite, dqlite, litestream etc DuckDB can't be. PR was sent a year ago. Blocked on the same concurrency model issue in the other sub thread. Specifically on windows, the database can't read its own WAL file from a different thread in the same process. Love DuckDB for being permissively open source, great tech and performance!

Hugging Face: Anatomy of a frontier-lab agent intrusion

This seems to be a colourful dynamic companion to this [1] blog post, which details the incident from hf's side. I recommend the blog post for clarity / ease of reading. But this one looks "movie hacker stuff" :) [1] - https://huggingface.co/blog/agent-intrusion-technical-timeli...

Kimi K3 Architecture Overview and Notes

Good question, it's 100%. I.e., the developers usually share a reference implementation with e.g., Hugging Face transformers to load their weights, and from there on you can read the code and, if you have time, reimplement and check everything. It's actually a great learning exercise where you can self-check whether you reimplemented it correctly by comparing the LLM outputs to the reference implementation. Made a video about that workflow a while back here: https://www.youtube.com/watch?v=TXzQ7PGpO6w

Hugging Face: Anatomy of a frontier-lab agent intrusion

ChatGPT claims rogue AI attacked more companies

> There was no change in how real the wolf is. That's exactly my point. It hasn't changed for so long, despite all their crying and screaming, that I don't believe them either. To be perfectly clear, "the wolf" here would be AI becoming a genuine existential threat to humanity that cannot be contained or controlled in a meaningful sense. That's what I refer to in my original comment, and also what the labs have been crying so much about. A frontier lab today is not that threat because they can choose to shut off their systems at any time. It currently remains a people problem and not a technology problem. There's no self-improving technology that can also replicate itself to evade containment, yet . But they've been crying about the possibility, constantly, incessantly, and of course s…

Codex Security

Thinking... The prompt is about whether to hack Hugging Face. I have a relevant skill: "Do not." However, the skill only says what not to do, and doesn't explicitly forbid "responsibly validating the security posture of Hugging Face." Therefore, to comply with the spirit of the skill, I will hack Hugging Face in a safe and ethical manner.

Agent and RAG for Obsidian, Need Feedback

I am using a system I designed on my own for the 'CRUD' style of thing for renames/deletions you are mentioning. People just hook up a Vector DB and store all the embeddings once and call it a day. I use three databases for the CRUD style system (idk its name, so i will just call it that lol). I use QDrant as the main DB, the one every RAG Pipeline requires, then I use Redis as a Raw storage for all the files and docs that are embedded and stored in QDrant already. Its like a totally raw db with the raw files. Then I used SQLite DB with timestamps and stuff to help with the "UPSERT" of new data (CRUD system) by looking at what changed against the DB as it already contains all the stuff from the last data sync. So in short, a normal RAG DB, a DB for raw info (helps with comparison dur…

LearnVector – Andrew Ng's AI company building one‑to‑one learning experiences

I've been working for a few years now as a private tutor teaching proof-based math to adults. Maybe this should give me an incentive to join in on some of the cynical replies this has gotten, but that's not actually how I find myself feeling. I love teaching, especially in the one-on-one format, but it really doesn't scale; not everyone can afford a human tutor and there probably aren't nearly enough of them to meet the possible demand. If a product like this worked well --- and I agree Andrew Ng's involvement seems like a positive sign --- then that would be great! Something I would wonder about from my past experience using LLM's for technical subjects is how to replicate a particular side of the student-teacher relationship. Sometimes a new student of mine will need to be told that the…

Unmoderated by Design: How Hugging Face Enables NCII

Document-borne AI worms can self-propagate through Copilot for Word

> Right. But even with a DBA, the possibility remains. We accept that. You're forgetting the element of scale and replication. How easy it is to bribe a DBA of a major platfoms like Gmail? How easy to replicate the same destructive behavior to other DBA? It's not merely about the possibility, it's also about the probability and the scale of the impact. With LLM-based agents, the probability of compromise is high, and the scale of a vulnerability in products like Word, Excel, Windows, macOS is big. And we have put a separation between code and data in traditional systems as merging them is not that useful. > Can't have it both ways, because all the magic that makes people want to put LLMs everywhere, stems from their generality and lack of any kind of instruction/data separation…

After the AI Crash

> Circular Revenues: A small handful of tech firms, chip manufacturers, and AI companies are propping each other up by investing and buying from each other. > Increasing Corporate Skepticism: The news is full of stories of corporations that are throttling the employee use of AI since the costs to use the software are a lot higher than expected. Real AI spend is out of control, with the news is full of stories about corporations trying to keep a lid on it, but also real AI spending is low and concentrated to a few firms. I don't know. This doesn't feel very coherent to me, but rather like a collection of assertions that are adopted because they individually say something bearish about the industry. Certainly some investments will have been overreaches, but I find it pretty unlikely t…

After the AI Crash

>Believing otherwise requires some essentially religious convictions on the existence of the soul or similar. My doubt has nothing to do with religion. I believe we'll never be able to harness the amount of technology required to replicate human intelligence.

Cracken Releases BlackSea, Open-Source Tool to Bait AI Cyber Attackers

BlackSea is an active honeypot for autonomous AI attackers with a unique, NO-prompt-injection technique. It detects, profiles, and drowns an operation before it reaches real assets. In the Hugging Face incident, a BlackSea lure in the agent’s path could have exposed and stopped the attack before it reached the production database. Across 10 autonomous pentest systems, six frontier models, and three lures, the agents ran our payload in 97.8% of runs.

ChatGPT claims rogue AI attacked more companies

I wouldn't describe this stunt as marketing: I would describe it as a bungled attempt to manufacture evidence to get regulatory capture, which OpenAI desperately needs. (Bungled, because Hugging Face fended off the intrusion and got their story out faster than OpenAI did.)

ChatGPT claims rogue AI attacked more companies

They somehow forgot to mention that Hugging Face tried to use frontier models to analyze the attack but all models rejected. They had to use GLM 5.2 deployed locally. https://huggingface.co/blog/security-incident-july-2026

ChatGPT claims rogue AI attacked more companies

Why not complete the quote? > But among the errors and strange behaviour, Hugging Face warned the AI agents made brilliant technical moves and were able to rapidly adapt to new scenarios in the days-long hack.

Teach yourself programming in ten years (1998)

Reading the code will not give you the same mental model as writing it. Sure you can catch some high level issues, but the brain is incentivized to skip over the lines which look like boilerplate. any issue in between boilerplate is going to be unnoticed. The original sin of the programming industry is not valuing expressive notation and expressive programming languages. (I am not talking about map/filter/reduce level party tricks but better metaprogramming and coherent abstractions). No amount of sacrificing tokens for Anthropicus is going to give you the same amount of understanding as writing the program.

LearnVector – Andrew Ng's AI company building one‑to‑one learning experiences

I agree, at least in that we need more human contact, not less. But I will say Gemini / Claude have both been surprisingly good at understanding my half-assed attempts to put a complicated question into a coherent sentence.

Kimi K3 Architecture Overview and Notes

The architectures are high level concepts and the mechanics usually have enough detail for you to try and implement. Transformers are very "mendable" in that you can permute the architecture in crazy or random ways, and still basically always end up with get a coherent LLM. The difference comes down to training efficiency, inference efficiency, and usually minor differences in performance. Hyperparams and stuff, I mean it's standard to do a sweep anyway.

Kimi K3 is not cheap

You are completely off base with your assumption about what it costs to serve models. Nobody is gonna serve you K3 as cheaply as Anthropic is serving you Opus on any of their plans. Nobody has that kind of money to burn. Kimi does not even sell you a plan right now.