@thsottiaux (tibo) might follow me if i hit 10k. help a brother out. "single handedly delayed image AGI" follow, so the voices don't haunt you
DM for collabs
Joined June 2026
- Tweets10K
- Following360
- Followers4.2K
- Likes27.4K
wait, so who gets the land now?
this is pretty bad.
LiteLLM's PyPI package was compromised with malware designed to steal API keys and pretty much every sensitive credential it could find.
SSH keys, cloud credentials, browser passwords, claude/codex/gemini credentials, and more.
it then sends the stolen secrets to an external server and installs a backdoor.
affected version is 1.107.0. anyone who installed it should assume thier credentials are compromised.
didn't see this coming.
Openai models will be available in Google antigravity and gemini agent soon.
google already provides gemini and claude models, and now openai models is a good addition.
so you'll be able to use all the top models at one place, if you're an antigravity user.
i hope future openai models produce less em dashes
OpenAI models helped researchers—operating as part of our Patch the Planet initiative—discover critical security flaws in PHP, an open-source programming language used to run an estimated 70% of websites.
Over the past two months, we led a coalition of maintainers, researchers, and security providers to prepare fixes and protections ahead of disclosure. This duration was necessary because the fix was quite intricate and required a major change to the PHP engine. Every site using PHP can now safely upgrade their version to stay secure, in addition to applying mitigations from various security vendors.
Due to the severity of these flaws and PHP’s widespread use, we consider this bug to be one of the most impactful vulnerabilities in recent memory. It also marks a new phase, where AI can find security bugs with internet-scale impact.
This is an example of the Defender’s Window in action: to our knowledge, frontier AI was able to find this vulnerability ahead of attackers, giving defenders time to prepare.
openai.com/index/coordinated…
Readers added context they thought people might want to know
OpenAI may claim a role in the coordinated response and patching process. But the initial discovery and exploit development, however, occurred several months earlier by an independent researcher.
x.com/lcfr_hax/statu…
astra went from "greatest model ever made" to "biggest disappointment of the year" in 6 weeks.
I love AI twitter.
what a bunch of bullshit.
who tf uses sonnet 4.5 and gemini 2.5
Lauren Tan just revealed the work setup she uses to ship with AI every day.
and it’s way more structured than “open a model and start prompting.”
her system is basically:
• understand → get the real problem + context
• plan → choose the right model, tools, and steps
• build → let agents implement in small chunks
• verify → test, review, stress-check
• ship → document, merge, and learn from the result
then underneath that she has:
→ model routing for different types of work
→ a dedicated bot team with clear roles
→ prompting rules for goals, context, and output
the part I like most is how little of this depends on one “best model.”
it’s mostly about routing, roles, verification, and loops.
I mapped her whole setup into one page below ↓
argon barely had time to settle in and google is already preparing carbon
