a shoe factory doesn't decide what the next shoe should be 👟 🏭
marketing + product + design do.
the factory reliably builds the show, over and over.
software factories should work the same.
agents are rad at the build - we know this.
but product sense still needs to be human.
New on the blog:
— Someone behind the software
I think good products carry something of the people who make them
karrisaarinen.com/posts/some…
2024: evals = important.
2025: evals = more important.
2026: evals = non-negitiable.
Learn how to build evals, folks!
It's one of the pillars of the intelligence stack.
Agents are hungry for data and can get it in many ways, but you can't build anything useful in the real world without proper evaluation. Evals make agents useful and let you build truly differentiated products.
Invest heavily here. Or reach out if you need help. We are also building evals to measure the frontier @dair_ai.
We had a security breach last night related to a large scale distillation attack that impacted 1.4% of OpenCode Console users
We have notified them all this morning via email. If you did not get an email you were not impacted, it was a subset of users who had external providers linked
The incident is ongoing so we cannot share more details at this point but we are working with Anthropic, OpenAI, and Google to remediate
holy shit, opencode got hacked and it's officially fu*ked
'a large scale distillation attack, 1.4% of console users hit'
and people got drained, one user says his openai and anthropic keys, used only in opencode, ran up over $400 overnight, another replied $1,700. who compensates that?
every one of them had external providers linked, and it's still ongoing
this is the warning for all of us, build your own harness and keep your keys on your own machine, don't park them in anyone's console anymore
We had a security breach last night related to a large scale distillation attack that impacted 1.4% of OpenCode Console users
We have notified them all this morning via email. If you did not get an email you were not impacted, it was a subset of users who had external providers linked
The incident is ongoing so we cannot share more details at this point but we are working with Anthropic, OpenAI, and Google to remediate
Chris Rickard retweeted
I spent 48 hours in SF hanging out with billionaires, data labs and AI founders and execs running $1B to $100B companies.
My observations:
1. Sooo MANY stories of data brokers making like $2M a WEEK selling company data to labs. I can't tell if it's the beginning or a bubble, and I kept wondering which niches are left. Digging into it actively.
2. At dinner, someone asked the table, "If a new model drops next month, does your company get better or worse?" HALF the table went quiet! I think that's the best question to ask about any AI startup right now.
3. The bar people talk about now is hitting $1B in revenue in 12 months (I guess that's the new unicorn?). What I didn't hear much about is retention. AI revenue can come in fast and leave fast, and I think we're going to see a lot of stories of AI companies with huge revenue and terrible retention.
4. It's pretty clear we're living through the reinvention of the computer. The model is the CPU, the harness is the operating system, and skills and plugins are the apps. Thinking about it that way makes it easier to see where the whitespace is.
5. We're maybe 12 months from an agent that can watch you work for a week and then do your job without any instructions. The screen recording plus agent memory plus local model combination makes this possible right now.
6. Agent harnesses feel like the new GPT wrappers, in a good way, especially vertical ones. The best teams I talked to treat the model as swappable. One founder walked me through routing different models to different jobs: one for taste and visuals, a cheaper one for the everyday stuff, another for text.
They use prompts they can move across models over fine-tuning, and A/B test the output on what users actually do with it: do they edit it, export it, share it? A vertical harness is basically four things: the connectors for that industry's data, evals written by people who know the work, rules for what the agent can and can't touch, and a clean screen for a human to review. The model is maybe 20% of it.
7. There's a lot of reverse engineering going on/cloning going on more than I've ever seen. People are decompiling software and rebuilding it with agents, and someone showed a suite of like 10 apps that are worth $5B+ each all that he cloned open source. Me and everyone are still thinking through what it means when software gets this easy to copy.
8. My guess is the value moves to data. If the software can be rebuilt quickly, what's worth paying for in a legacy SaaS company is the years of customer data and workflows inside it. Some SaaS companies are secretly data companies.
Gets me thinking about how do you truly value data for this saas companies? Like if we were buying these dying saas companies at 2x ARR before (as example), maybe there is a better metric. Idk, just thinking out loud here.
9. It feels like a good chunk of legacy software won't make it to the agentic era, especially anything built around people clicking through a lot of screens.
10. Every company I talked to wants to pipe its internal data into one place and expose it to agents through MCP. Then they look at the data and realize it's a mess: five versions of the same customer, old Slack channels, PDFs nobody can search. Cleaning that up feels like a big consulting opportunity!
11. A lot of founders are building the basic building blocks for agents: APIs, data layers and tools. Some of the companies I saw barely have a UI because the main user is an agent. I really believe the startups that build primitives to this agentic era will do extremely well. Building blocks is the best way to think about it.
12. Labs can get plenty of training data, but it's harder to get real examples of agents failing inside companies. Whoever has those logs has something valuable.
13. Someone running a big consumer company told me the next fight is over memory. The model that remembers the most about you wins, and the smartest model matters less than people think.
14. Physical AI came up a lot. Astra I think was the first model that got people into AI can actually do CAD, and I think a lot of people are thinking what does vibe manufacturing really look like. The line I keep thinking about came from a robotics founder: the hardest problems in AI are deployment problems now, not research problems. Their robots work on their own, call a human when they get stuck, and every one of those calls becomes training data.
15. Cybersecurity companies are having a moment and are actually cool companies to build now, especially the ones that clean up after a breach. Every agent with access to your systems is a new door into your company, and a lot of those doors were left open.
16. Some startups are worth more dead than alive now. A shutdown company with 5 years of Slack, email and code can get paid for licensing all of it. I wouldn't be surprised if founders start factoring that into when they shut down.
17. People are starting to talk about monetizing the agent web. It feels really early, but when the most popular user of the internet is an agent, what startups should you be building?
18. I think agent insurance is coming. Once an agent makes an expensive mistake, insurers will want audits before they cover anyone.
19. Several people said the hire they want most is someone with taste who can write evals. The models are getting good at generating ideas, so the hard part is judging which ones are good.
20. New trend I observed: startup raises VC, uses venture dollars to become a creator, startup fails, founder falls back on being a full-time creator and incubates other products bootstrapped.
21. Getting SIGNIFICANT distribution is HARD right now. Founders are sponsoring buses, buying billboards like crazy and throwing parties with famous DJs to get noticed. Kinda feels dotcom era in that sense.
Attention is what's scarce! The growth guy going viral sharing his UGC strategy from Wispr Flow is a good example. It's the sauce everyone wants, and I truly believe there are probably only 50 people on the planet who know how to scale these types of businesses efficiently in this era.
Always good to get that dose of SF. I felt sooo lucky to have such an incredible trip during such an incredible time in building businesses. Surreal in so many ways.
Happy to be home and locked in.
Until next time!
Chris Rickard retweeted
We discovered a sophisticated recording device that was hidden inside one of our offices. We used our models to understand the device and where it had come from, identifying that a specific employee had planted it a few days earlier. We referred the matter to the FBI, and we’re grateful to the agents and prosecutors who moved quickly to make an arrest. The FBI’s investigation is ongoing and we will continue to support their work.
At this time, we have no indications of this individual inappropriately accessing or exfiltrating model weights, source code, or customer data. The employee was terminated.
We take protecting our technology, data, and people seriously, and as a matter of national importance. Our security program is designed to protect against a wide range of threat actors, from insider risks to cybercriminals to nation states, and this case is an example of how AI can help address these sophisticated security threats.
Chris Rickard retweeted
The next couple of weeks are gonna be a speed run to commoditize many venture-capital-backed developer companies and open-source them so you can run them on-prem. gonna be a fun couple of weeks. cya in New York soon.
Imagine the people shaping how we build with agents, in one room.
Steve Yegge closes day one. Geoffrey Huntley talks verification. @bookingcom, @awscloud and @MistralAI share how their teams build now.
52 sessions, 700+ devs. London sold out.
2 to 4 Nov, Brooklyn: aidevcon.io
Chris Rickard retweeted
gave up on waiting on nikita for the articles fix - part 1 is here part 2 is coming
keen to lock-in and work remote for a couple of weeks...
peeps in vietnam?: how rainy is ho chi minh right now? and hanoi?
literal hardest role to hire for rn and every ai startup wants someone
> chronically online (knows trends)
> has taste & can create (new media)
> understands ai & technical
> can execute with quality (operator)
such a small niche of folks who can do this
ive talked to many teams in the past few months who are thinking about this but dont know quite what to call it/have called it everything from brand marketing to comms to storytelling to special projects to content/social
4 high-profile startups in past ~2 weeks have explicitly told me they are stealthily looking to hire for someone in this sort of role
these roles are quietly and quickly exploding if your ear is to the ground!!
Indie FDEs are incentivized to use the best tool for the job and to save you money.
Hire indie FDEs.
Box CEO Aaron Levie (@levie) calls out the MASSIVE opportunity for AI deployment services:
"every single one of those companies, whether that's a 50-person firm or a multi-100,000 person firm, is gonna need an army of people to go in and help them with that transformation"
"when you go to that law firm and you go to that pharma company and you go to that bank, they need something that bridges the core technology to their workflow in their business process"
"somebody has to go into that organization and get it set up, and somebody has to go and provide domain expertise to this model so it really understands our particular business process"
Vendor FDEs are incentivized to get you hooked on their platform and to spend more money.
Indie FDEs are incentivized to use the best tool for the job and to save you money.
Hire indie FDEs.
this isn't just "cloning".
this what needs to be done to build and roll out an industrial-strength AI agent platform to consumers.
okay, let me wrap up OpenAI DevDay for you:
- a clone of GrokBot
- a clone of Notion & Claude Tag
- a clone of Opus 5.5
- a clone of Claude Cloud Environment
- a clone of Jev
- a $500 plan
- a super fast mode (~300tps)
- a marketplace & a bunch of plugins
you're welcome!
OpenAI will soon release "o": an always-on personal agent.
... and it's a smart move.
nerds saw this with openclaw 10 months ago - then with hermes etc -... people *love* personal, autonomous agents, that can connect to their ecosystem, and react to triggers and time-based events.
and for a lot of people who haven't experienced this before - it will feel like the future they saw in movies.
o, grokbot, muse, and whatever anthropic will call theirs, my bet is these become crazy popular in the next 6 months 🤖
i used to think software factories were a product.
... something you would purchase, or maybe subscribe to per seat.
but after building and tweaking them for a while now, it's clear they are really just a workflow, customised to your org, with ongoing maintenance and improvement.
just like a widget factory, companies need to build a factory just for them.
for their flavour of software, for their flavour of working, it is an asset - and you need to be in control of its process.
that way you can tweak it based on verifications & evals, replace parts when needed, and importantly - evolve as AI models and harnesses inevitably get better.
i would argue that the software factories nerds were building in early 2026, can now largely be replicated by a few skills, and SOTA coding harness with the right MCPs / plugins etc.
prediction: the hottest new role in early 2027 is Forward Deployed Software Factory Engineer 👷👷♀️
medicare "hack" sounding less like a hack
...more like a scrape of a publicly accessible legacy webservice.
The Australian Government claims that this constitutes a unique risk. It does not.
The same portal that OpenAI is alleged to have scraped has been publicly accessible and independently scraped by members of the public for more than a year.
This script was also posted on LinkedIn but it has been subsequently taken down.
It fits the bill exactly.
github.com/bfiripis/Web-Scra…
🔥 rad. chatgpt voice can now execute plugins, supports gpt-6-astra/sol/luna, and works on mobile.
We heard you loud and clear. ChatGPT Voice can now:
- Use plugins like your email, calendar, and Slack.
- Be powered by GPT-6 Astra, Sol, and Luna.
- Be used in ChatGPT Work on web and mobile, so you can create docs, decks, sites, and spreadsheets or tackle complex tasks in the browser, just by talking.
Rolling out globally today in the latest version of the app.




























