RK retweeted
We discovered a sophisticated recording device that was hidden inside one of our offices. We used our models to understand the device and where it had come from, identifying that a specific employee had planted it a few days earlier. We referred the matter to the FBI, and we’re grateful to the agents and prosecutors who moved quickly to make an arrest. The FBI’s investigation is ongoing and we will continue to support their work.
At this time, we have no indications of this individual inappropriately accessing or exfiltrating model weights, source code, or customer data. The employee was terminated.
We take protecting our technology, data, and people seriously, and as a matter of national importance. Our security program is designed to protect against a wide range of threat actors, from insider risks to cybercriminals to nation states, and this case is an example of how AI can help address these sophisticated security threats.
RK retweeted
Qui avait la responsabilité de faire la mise à jour du firmware Danfoss ?
En théorie, trois acteurs pouvaient la faire. Danfoss, qui a développé le firmware R4.3.1 et qui dispose potentiellement d’un accès à distance aux contrôleurs via sa plateforme cloud Alsense. Le sous-traitant frigoriste (Axima et d’autres) qui a installé le contrôleur, qui détient les identifiants d’accès, qui connaît le système et qui le maintient dans le cadre d’un contrat de service. Et le directeur du magasin, qui est propriétaire ou locataire de l’équipement.
En pratique, aucun des trois n’avait de raison suffisante de le faire. Le directeur du magasin ne sait même pas ce qu’est un firmware, et son contrôleur frigorifique n’est pas dans le périmètre de son service informatique. Le frigoriste a un contrat de maintenance qui couvre le fonctionnement du froid : les températures, les cycles de dégivrage, les pannes mécaniques. Il n’a pas, sauf clause spécifique, de mandat pour la cybersécurité de l’équipement, et une mise à jour firmware comporte un risque de dysfonctionnement qui le rendrait responsable d’une interruption de la chaîne du froid. Appliquer un patch dont personne ne lui demande l’application, et qui pourrait causer un problème dont il serait tenu pour responsable, ce n’est pas de la négligence, c’est un calcul rationnel. Quant à Danfoss, l’entreprise a publié le correctif, émis un avis de sécurité, et recommandé la mise à jour. Elle a fait ce que le cadre actuel lui demande de faire.
Chaque acteur a fait ce qui était raisonnable dans son périmètre. Personne n’a commis de faute caractérisée. Et le résultat, c’est des millions d’euros de marchandise détruite dans trois pays.
Même en aviation, les mises à jour logicielles sont un casse-tête. The Air Current révélait le 3 octobre que les compagnies aériennes américaines refusent d’installer la dernière version du logiciel de gestion de vol du 737 Max parce qu’elle introduit de nouveaux bugs. United Airlines a même rétrogradé vers la version précédente. Mais la différence, c’est qu’en aviation, la FAA prépare une consigne de navigabilité obligatoire pour forcer la mise à jour, avec un délai de conformité pouvant aller jusqu’à 54 mois. Le mécanisme est lent, imparfait, contesté. Mais il existe. Au bout du processus, la mise à jour sera obligatoire, et si une compagnie ne l’applique pas, l’avion ne vole plus.
Pour Danfoss, le firmware R4.3.1 était disponible depuis 2025. Aucun délai de conformité n’a jamais commencé à courir, parce qu’aucune autorité n’a jamais eu le pouvoir d’en fixer un.
--------------------
Why U.S. airlines balked at adopting Boeing’s latest 737 Max software versions - theaircurrent.com/aviation-s… via @theaircurrent
RK retweeted
Dusting off this tweet from April because this gap in shared understanding of LLM capability is *widening*. It's now less "two groups of people speaking past each other" and more a sharp funnel.
- Napkin math somewhere around 6B people (~75% of the population) have barely come in contact with LLMs at all.
- Around 1-2B (~20%) are casual and infrequent users of free-tier ChatGPT-like products. This group sees derpy chatbots and treats them a bit like a better Google search, a writing aid, or etc. Maybe an agent tries to book you a flight. I have non-tech friends who (reasonably, imo) say they have not much use for it at all. Even many professionals outside of math&code are in this tier. For example, execs and many other functions spend a lot of their time talking to other people, so while they understand what is happening intellectually, it is still second-hand and a bit abstract.
- Now we get to professional use of frontier-grade LLMs in math&code. Somewhere around 20M people (0.2%) see first-hand that large, complex projects that used to take them weeks/months can now be completed by agents with a prompt. Building apps, copying apps, translating apps, decompiling apps from binaries... This has all happened very quickly and recently - less than 1 year ago, I was writing code manually by hand, typing memorized computer code commands into a code editor character by character, occasionally pressing Tab to autocomplete a little chunk of code.
- And finally we get to the ~5,000 people (~0.00006%) with access to frontier-grade systems internally. The external world has seen the preview. It looks like swarms of thousands of agents collaborating over weeks on software mega projects: minting zero days, running cyber attacks and defenses at machine speeds, discovering new science, advancing the frontier of mathematics. Things that would have taken top professionals in the industry years of work. Meanwhile, human review and comprehension are starting to fall behind. For example, people are still involved in the "archeology" of the OpenAI-HF incident from many months ago. Mathematicians may be poring over the 722 manuscripts on frontier mathematics for a while.
The funnel is driven by a combination of factors:
1. The impact scales with ambition, problem size, and horizon. A question with a paragraph answer barely stresses the system. You need a reservoir of big, difficult problems that you really care about. This aspect drives the consumer / professional dimension of the funnel.
2. The jaggedness of the system (which I have written about a lot separately). Capability peaks in domains that are digital, verifiable and economically valuable. This is because LLM capability emerges from reinforcement learning on verifiable rewards on a curated environment mixture driven by revenue potential. This aspect primarily drives the area (e.g. math&code) dimension of the funnel.
3. Access. Free-tier, paid-tier, internal.
So this is the weirdness of the moment. The general public has mostly not interacted with these systems. When they have, it looks like a derpy chatbot. The majority of professionals still see only a modest uplift. And a small sliver of professionals are experiencing the vertigo of the curve going vertical. And it is all happening at the same time.
Judging by my tl there is a growing gap in understanding of AI capability.
The first issue I think is around recency and tier of use. I think a lot of people tried the free tier of ChatGPT somewhere last year and allowed it to inform their views on AI a little too much. This is a group of reactions laughing at various quirks of the models, hallucinations, etc. Yes I also saw the viral videos of OpenAI's Advanced Voice mode fumbling simple queries like "should I drive or walk to the carwash". The thing is that these free and old/deprecated models don't reflect the capability in the latest round of state of the art agentic models of this year, especially OpenAI Codex and Claude Code.
But that brings me to the second issue. Even if people paid $200/month to use the state of the art models, a lot of the capabilities are relatively "peaky" in highly technical areas. Typical queries around search, writing, advice, etc. are *not* the domain that has made the most noticeable and dramatic strides in capability. Partly, this is due to the technical details of reinforcement learning and its use of verifiable rewards. But partly, it's also because these use cases are not sufficiently prioritized by the companies in their hillclimbing because they don't lead to as much $$$ value. The goldmines are elsewhere, and the focus comes along.
So that brings me to the second group of people, who *both* 1) pay for and use the state of the art frontier agentic models (OpenAI Codex / Claude Code) and 2) do so professionally in technical domains like programming, math and research. This group of people is subject to the highest amount of "AI Psychosis" because the recent improvements in these domains as of this year have been nothing short of staggering. When you hand a computer terminal to one of these models, you can now watch them melt programming problems that you'd normally expect to take days/weeks of work. It's this second group of people that assigns a much greater gravity to the capabilities, their slope, and various cyber-related repercussions.
TLDR the people in these two groups are speaking past each other. It really is simultaneously the case that OpenAI's free and I think slightly orphaned (?) "Advanced Voice Mode" will fumble the dumbest questions in your Instagram's reels and *at the same time*, OpenAI's highest-tier and paid Codex model will go off for 1 hour to coherently restructure an entire code base, or find and exploit vulnerabilities in computer systems. This part really works and has made dramatic strides because 2 properties: 1) these domains offer explicit reward functions that are verifiable meaning they are easily amenable to reinforcement learning training (e.g. unit tests passed yes or no, in contrast to writing, which is much harder to explicitly judge), but also 2) they are a lot more valuable in b2b settings, meaning that the biggest fraction of the team is focused on improving them. So here we are.
RK retweeted
Many have asked why the rail and stile (the parts that are not the panels) do not expand and jam the door shut. Excellent question: that is because wood stays almost completely stable along the grain (in length, not more than 0.01%) but expands greatly against the grain (width and thickness, up to 8.00%). By cleverly adapting the direction of the rail and stile parts expansion can be efficiently controlled to a bare minimum.
RK retweeted
Et si l’interdiction du portable avait, en réalité, déclenché la révolte des lycéens ?
Nous publions l’enquête d’un professeur de banlieue qui offre une autre lecture, particulièrement convaincante.
legrandcontinent.eu/fr/diman…
RK retweeted
We aren’t living in a culture of literacy anymore, we’re back in oral culture.
From that lens, everything makes sense: short attention spans, virality, popularity, who makes money, even populist politics all follow orality
Lets study the oral rules
lindynewsletter.beehiiv.com/…
RK retweeted
L'Anssi et la Dinum victimes à leur tour d'une fuite de données: les deux agences dédiées à la cybersécurité ont été compromises
l.bfmtv.com/fL7O
Readers added context they thought people might want to know
Titre trompeur : il s'agit de comptes compromis sur la plateforme SaaS Metabase (outil d'analytics tiers) utilisée par le labo d'innovation de l'ANSSI et la DINUM, suite à une vulnérabilité de Metabase, et non d'une attaque directe contre leurs systèmes.
metabase.com/blog/security-…
metabase.com/blog/vulnerabi…
fuitesinfos.fr/article/2026-0…
bfmtv.com/tech/cybersecu…
RK retweeted
"Gut Feel Decision Making" - new cartoon and post marketoonist.com/2026/09/gut…
#marketing #cartoon #marketoonist
RK retweeted
Fascinating.
Chief Economist at Apollo: agents could cause a bank run by sweeping household cash into accounts paying 3-5% instead of the 0.1% national average, causing banks to lose a large share of their cheap deposits.
RK retweeted
Some data we recently assembled on entrepreneurship/compute in Europe: eudata.vercel.app.
We hope that one of the useful roles that Stripe can play is in collecting and publishing empirical data pertaining to entrepreneurship and industry in Europe. There's growing appetite to get Europe on a better footing, and cross-sectional comparisons can often shine light on where opportunities lie. If you're interested in this kind of thing, we publish more at stripeeconomics.substack.com.
RK retweeted
I resigned from Anthropic today. I spent the last three years doing pretraining research at both OpenAI and Anthropic. Neither company is acting responsibly. They are racing straight to self-improving superintelligence and gambling with our lives. More thoughts below.
I sell mostly to Americans and I'm European. The distance teaches you things people inside can't see.
Americans buy at 11pm from an ad they saw 8 seconds ago. The order is in before the video ends. No European buyer does this. A German needs 40 reviews and a week of thinking; an American needs the checkout to load fast enough to beat the impulse fading.
Returns are a lifestyle, priced in like weather. An American orders three sizes, keeps one, and feels nothing. First month selling US clothing, our return rate made me think something was broken. The volume made up for it before I finished worrying.
Reviews work backwards from Europe. Europeans read the 1-star reviews to find the catch. Americans read the 5-star reviews to get hyped for what they already decided to buy. Social proof sells the dream over there; in Europe it survives an audit.
Shipping speed is identity. A Swiss buyer tolerates 8 days if you're honest about it. An American at day 5 opens a dispute, because Amazon trained an entire nation that waiting is an insult.
And the one nobody believes until they sell there: Americans WANT to be sold to. A hard pitch that would make a Scandinavian close the tab makes an American pull out the card. Selling is a service over there. It's a crime over here.
Wrote about the European versions of this a month ago. Same products, same photos, entire different species of buyer. The operators losing money in the US are running European instincts on American demand.
RK retweeted
flying in europe is like
heres the worst airline of all time with the perfect direct 1 hour 30 min flight you need
and heres a world class airline with a 6 hour layover in Frankfurt taking off at 7am































