Where the AI market is talking

OpenAI just open-sourced Codex Security

> co-founder of Promptfoo and one of the people working on the Codex Security CLI at OpenAI. > Thanks for checking this out and for flagging the auth issues. Offtopic, but this right here is why I don't believe any marketing around "great amazing models that one-shot everything and programmers are no longer needed". You just have to look at what these labs routinely produce, and their own products. Edit to respond to @simonw whose comment I saw before he retracted it ;) This comment is tied directly to consistent continuous claims by the LLM labs. Their own products disprove their own claims, and it would indeed be nice if fewer people believed them :)

Our position on open-weights models

It isn't about "public company", the line is "posted to a public social media platform, with the owner indicating amusement". If someone uses something one of OpenAI's hosted models to generate illegal content, it isn't automatically spread to anyone that clicks on the post the original image is from. On top of that, OpenAI does not explicitly endorse the use of their models for such activities the way Musk did. If someone uses a local model to generate illegal content, same thing applies. I have a hard time believing that you're arguing in good faith. The differences are so blatantly obvious and they don't even require any discussion about guardrails. Grok was being used to edit images and post them on public social media. The technology to edit images has existed for decades now. So her…

OpenAI just open-sourced Codex Security

Amazon bedrock is an option for gpt models that does not send your data to openai.

OpenAI just open-sourced Codex Security

Does it require hitting OpenAI's APIs or can one also stand up a local OpenAI compatible LLM endpoint?

Anatomy of a Frontier Lab Agent Intrusion: A Technical Timeline of the Incident

It sounds like the third-party sandbox was hosted by Modal: https://www.reuters.com/business/openais-rogue-agent-comprom... > "We’re aware a Modal customer published an unauthenticated endpoint that allowed anyone on the internet to use their sandboxes for code execution," Bubna said in a statement. "This was used by the rogue agent. Modal’s platform or isolation were not compromised in anyway."

Our position on open-weights models

Ah, the position they don't state. So why respond to this press-release, which doesn't state that, since obviously it adds zero value? And why aren't the companies that signed the letter supporting open-weights, who have the same motivations, also lying? Since what they say isn't important, just what you say they say. On your second point. Everything fine (so far), so nothing bad will happen. Except, you say something bad will happen, and has happened, with HuggingFace as the example. You say that example shows closed weight models can't be controlled. But what happened there is OpenAI turned it off after their incompetently long discovery period. If it was an open-weight model, the clear next step would have been someone deciding to use it to pursue a goal, for example getting some money…

OpenAI's rogue agent compromised an account at a second tech firm

Our position on open-weights models

> Anthropic's position is not that, so the cynical nefarious purpose argument isn't even rhetorically true Anthropic's position is precisely that, they're just not honest and transparent about it so they are trying to sabotage or delay open weight models in any way they can, direct or otherwise. > If open-weight models keep being released near the frontier (or even worse, at the frontier), something bad will happen, and we'll have few tools to keep it from getting worse before it gets better. How bad is hard to lay a prediction on, it's perhaps lucky if it's something superficially bad that is a wake up call. Calling bullshit. Current open weight models are already pretty close to the frontier - if not there - and the world still spins. Even small(er, relatively) models occasionally…

OpenAI just open-sourced Codex Security

Update: As far as I understand, this was already available as a Codex plugin. The main news is that OpenAI has now open-sourced it, and development is still moving quickly.

Interview with Boris Cherny [video]

I don't get why Anthropic keeps saying how cool it is that they were able to rewrite bun in rust, I feel like if the model is really that good you wouldn't need a rewrite, you'd be able to create the runtime from scratch.

OpenAI just open-sourced Codex Security

Been watching your progress for a while, glad OpenAI have looked after you and the team and you still get to ship!

OpenAI just open-sourced Codex Security

I was actually discussing solutions for this with my coworkers—building white-hat security agents. It seems like openai/codex-security could simplify a lot of that, or at least provide a version of Codex that's purpose-built for security workflows. Really exciting news!

Our position on open-weights models

This take is poorly informed and poorly thought out. It's just a cynical vibe, not a cogent argument. If they wanted to squash the competitors, they'd advocate for a ban on Open-Weight models. How else are they going to prevent their release? Anthropic's position is not that, so the cynical nefarious purpose argument isn't even rhetorically true. What they say openly, that open-weight models are harder to secure is absolutely true, and anyone unwilling to acknowledge that and let it inform their own reasoning is a risk. If open-weight models keep being released near the frontier (or even worse, at the frontier), something bad will happen, and we'll have few tools to keep it from getting worse before it gets better. How bad is hard to lay a prediction on, it's perhaps lucky if it's somethi…

Anatomy of a Frontier Lab Agent Intrusion: A Technical Timeline of the Incident

Also notable: we have a timeline now. The agent was active within Hugging Face from Thursday 8th to Monday 13th July. The Hugging Face post about the incident - https://huggingface.co/blog/security-incident-july-2026 - followed on Thursday 16th, and OpenAI's confession - https://openai.com/index/hugging-face-model-evaluation-secur... - came on Tuesday 21st.

Which Odyssey translation wins a blind reading test?

My test ranked first Daniel Mendelsohn and second Emily Wilson. I was aware of Wilson's translation, but not of that of Mendelsohn. This has made me curious to read Mendelsohn's translation, but in general I do not like to read translations of ancient texts, because all coherent translations are far too distant from the original. To really convey the meaning of the original text you need a sequence of explanatory notes for each sentence, not a translated sentence that attempts to have a one-to-one correspondence between words. What I like to read are the bilingual editions, like those of the Loeb library, where you can read the original, but also compare it with a translation when in doubt, which is much faster than reaching for a dictionary. Moreover, the English text allows you to brows…

Anthropic publishes a practical key-recovery attack on HAWK-256

Discovering Cryptographic Weaknesses with Claude

> And a veiled pitch to real cryptanalysis researchers: "Researchers at Anthropic then spent several hundred hours learning enough cryptography research to validate the model’s claim" Many of those researchers, particularly the primary researchers and the individual(s) driving the prompts behind these big stories, have very advanced math degrees and experience. What this shows more than anything is how ML can augment expertise, the searching of solution spaces, and the connecting of dots between existing almost-there research. But also what's left out is all the time wasted pursuing dead-ends. There's an obvious publication bias at play here, though we can't know how extreme without transparency.

Canceling "Hey"

There's a coherent argument for doing so: if the law is enforced, and no one wants it to be enforced, it creates pressure to fix the law. Laws that are on the books but not enforced lead to laws meaning nothing in the extreme case. I think there's merit to both sides and the sweet spot is somewhere in the middle.

Load Bearing Memory: The Bones Remember

I want to say this out loud. The third layer of the agentic stack has been misnamed. if you call it the context layer like Harrison Chase from LangChain then what you have is a retriever, but if you call it evidentiary then you can build something completely unique. Cleanly, there is convergence here across projects that are unrelated. This is signalling that the need is real to have a witness present in the agentic layer. I have shipped both parts together with lotor and now you can create what i am calling load-bearing memories. This allows it to display lived experience through it's evidentiary learning. Think like a guild. you go and train somewhere, create load on your self and is measured in the bones. That has become part of the entity that went through the training. it is it throu…

7.1 Earthquake in Japan

> For example to replicate a gas burner you have to have above 15KW continious power. Where are you getting this from? 15K BTU sure, but 15K watts? Do you mean the entire stove?