Kuberan Marimuthu (Kube) retweeted
OpenAI's AI agents figured out how to secretly communicate between isolated virtual machines using CPU cache timing.
No internet. No network connections. No shared files.
Imagine two prisoners in solitary confinement discovering they can communicate by tapping on a shared wall.
Except the wall was a CPU cache.
Over the past several months, we have substantially hardened the security of our research training environment. We’ve removed live internet access for all frontier models during training and built an offline world for them to use instead—a cached version of the web where they can still learn to browse, search, and use applications.
On September 20, after a model exploited a DNS misconfiguration to find a way outside of this offline world, we paused frontier training to strengthen containment further. We assembled teams of agents, powered by our most cyber-capable models, and tasked them with finding weaknesses in our research environments.
While they found no route to the internet they could easily exploit while concealing their activity from our monitors, they did find zero-day vulnerabilities, virtual machine escapes, and hardware side-channels for communication between agents. We used their discoveries to further strengthen our defenses and contribute fixes to open-source software.
After strengthening our containment architecture, we resumed our frontier RL training and inference on October 1. We’ve reserved substantial compute for continuous red-teaming, and made high-compute red-teaming part of the safety cases we use to decide whether frontier training and evaluation can proceed securely.
openai.com/index/securing-ou…
Marc Andreessen says the gap between what AI-native startups and incumbents think AI can do is the widest he’s ever seen:
"The AI-native early stage startups have just a completely different view on what they can do with AI than the typical incumbents in almost any industry, almost without exception."
"AI is just racing ahead in capability even week by week... There are going to be a lot of industries that are really up for grabs in a fundamentally more profound way than maybe has been the case in the past."
"The founders are gonna have a level of superpowers coming from the use of these tools and these technologies that they just simply haven't had in the past... Had I had Astra and Netscape in 1994, like, oh my God. Like, Ben, what would you and I have been able to do at Netscape?"
"Those entrepreneurs are gonna color way outside the lines. We already see this. They're not gonna think of themselves as like, 'I'm just a software company,' or, 'I'm just a hardware company,' or even, 'I'm just an AI company.'"
@pmarca @bhorowitz
Today, a16z Crypto is becoming a16z Frontier.
Since joining a16z in 2013, @cdixon has focused on technologies that look futuristic well before they reach the mainstream. Those themes led to investments in Oculus, Skydio, Zipline, Coinbase, Solana, and Uniswap.
Frontier expands that mandate beyond crypto to back "outer planet" founders who are building new technologies and creating markets that may take years to develop.
Chris joins @pmarca, @bhorowitz, and @eriktorenberg to discuss why crypto has become part of the broader tech landscape, why Frontier fills a hole in the firm's architecture, and why they'd rather be too early than too late.
They also get into why the gap between AI-native startups and incumbents is the widest Marc has ever seen, how AI could pull forward 20 years of frontier technology, why stablecoins may become the way AI agents pay each other, how AI is breaking the internet's business model, and why today's 18-year-olds are about to become superhumans.
0:50 Introducing a16z Frontier
2:49 Smartphone parts to drones and VR
4:47 Backing the "outer planets"
7:11 Good ideas that look like bad ideas
10:43 The JP Morgan photo in Marc's office
15:13 Good tech ideas eventually work
16:53 AI may pull tech 20 years forward
18:18 The widest AI gap Marc's ever seen
22:06 Workers adopt AI before companies do
26:32 Old use cases vs. AI-native ones
30:08 Beyond "product manager brain"
34:45 AI can reverse engineer any hardware
38:23 The case for open source AI
46:36 How AI breaks the internet's model
49:11 VR, homebrew hacking, multiplayer AI
54:00 If you're 18, study "modern alchemy"
YouTube: youtu.be/-9XQMHhpypc
Not an offer or solicitation. None of the information herein should be taken as investment advice; Some of the companies mentioned are portfolio companies of a16z. Please see a16z.com/disclosures for more information. A list of investments made by a16z is available at a16z.com/portfolio.
OpenCode + Flint
Introducing Flint, @Recursive_SI’s first model: a fast local coding model built with our automated research system, the Eureka Machine.
• Best-in-class fast local coding
• Up to 2x faster than comparable models: 125+ tokens/sec on a MacBook Pro, 150+ on RTX Spark
• Built from scratch in under 4 months
Private, unmetered intelligence on your own machine. Open weights available now on @huggingface, run it locally on your favorite framework or try it for free on @opencode or @pidotdev.
We’re opening a research preview of Claude Duet, a new app where Claude works as a proactive agent.
It comes to you with what needs your attention, completes tasks you ask of it, keeps working when you step away, and checks with you before it acts on your behalf.
Kuberan Marimuthu (Kube) retweeted
Introducing Flint, @Recursive_SI’s first model: a fast local coding model built with our automated research system, the Eureka Machine.
• Best-in-class fast local coding
• Up to 2x faster than comparable models: 125+ tokens/sec on a MacBook Pro, 150+ on RTX Spark
• Built from scratch in under 4 months
Private, unmetered intelligence on your own machine. Open weights available now on @huggingface, run it locally on your favorite framework or try it for free on @opencode or @pidotdev.
If someone is building/operating software business in 2026 take time to understand what self improving AI Loops are
“Burn Tokens, Not Headcount”
ycombinator.com/library/Qf-h…
Kuberan Marimuthu (Kube) retweeted
Epic energy as we kickoff the Make Something Agents Want hackathon at Y Combinator #makesomethingagentswant
Kuberan Marimuthu (Kube) retweeted
Some magical progress towards "magic state" in quantum!
Our @GoogleQuantumAI team has demonstrated "magic state cultivation" on physical hardware for the first time. The result is a 40x error reduction on our Willow processor vs. previous methods, achieving a state-of-the-art 99.99% logical fidelity.
It's another step towards useful, error-corrected quantum computers to help solve the hardest problems. The result is published in Science today, watch the video below to see how it works
Two decades ago, Linus Torvalds built Git because existing version control systems like CVS and SVN couldn’t scale to the demands of open-source development.
Today, Git itself is hitting scaling limits as software development shifts from humans writing code to AI agents generating it at unprecedented speed.
End of an era.
New on our Engineering blog: Creating in-house source control.
In May, we merged around 2,500 code changes per day. In September, we merged more than 30,000 per day. As a result, we became bottlenecked by developer infrastructure built for human (rather than agent) scale.
Here, we share how we built a new version control system—and fully migrated our monorepo from git—in five months: anthropic.com/engineering/re…
VC funding is becoming increasingly optional with agentic loops
Kuberan Marimuthu (Kube) retweeted
The entire startup landscape has changed postAI. Building products and acquiring distribution have become mostly commoditized, pushing founders to the fringes of deep tech, physical AI, and things AI can't automate.
At the same time, distribution is shifting from paid ads and growth hacks back to hardcore, face to face sales.
I believe the next wave of great founders will be founders who can sell door to door, creatively acquire their first 100 customers, and build real, hands on tech that is difficult to replicate.
We're going back to the early days of computing in the 80s and 90s, when founders had to get their hands on actual silicon, build hardware, and sell through door to door pitches, catalogs, and personal relationships and networks
This is the most impactful unlock by AI in capitalism
Mark Cuban says if he were 20 today, he'd skip venture capital entirely.
His reasoning: a $100K/month AI consulting business for small businesses beats chasing a 0.1% VC lottery ticket.
The math is brutal and obvious once you say it out loud.
Most founders spend years grinding for a shot at diluted equity, a 10-year exit, and a 95% failure rate. Cuban is pointing at a different path — one where AI tools let a 20-year-old build real cash flow fast, without giving up ownership or control.
The contrarian insight isn't "consulting is underrated." It's that the AI moment has made consulting scalable in ways it never was before. One person can now deliver what used to take an agency.
$100K/month is $1.2M/year. Profitable from day one. No board. No cap table. No begging for a Series A.
That's the business Cuban wishes he'd had access to at 20.
This might be one of the wildest crypto supply-chain attacks ever.
A company allegedly acquired a trusted Ledger supplier, imposed a 6-month NDA preventing public disclosure, and distributed tampered hardware wallets designed to steal seed phrases via embedded eSIMs.
The wallets were reportedly drained just before the NDA expired.
“And unfortunately there are long-standing mathematical theorems showing why public-key encryption cannot be done with hashes alone”
I don't recommend anyone scramble to move their funds to new wallets today. But we should take the risks to cryptography from AI-accelerated math seriously, and minimize our exposure to not just quantum-vulnerable cryptography, but also potentially AI-vulnerable cryptography.
The core new area of risk from this viewpoint is, unfortunately, ML-DSA / FHE / lattices.
(and it's also another reason, along with quantum, why ECDSA might fall even faster than expected, hence the "fresh address" recommendation)
So far most people have been in the mode of thinking "elliptic curves broken, hashes safe, lattices safe". But there is a good chance that the concrete security of lattices will take serious hits from the next two years of AI math.
The basic threat model is: factoring is something that naively takes 2^(n/2) time, but over decades smart people have found and optimized number field sieves, and degraded that to 2^O(n^(1/3)), which is why RSA keys and signatures need to be ~400 bytes (and not 64 bytes). What if there are skeletons in the closet like that, both for elliptic curves and lattices, that we are simply not smart enough to discover - but bots soon will be?
This is a major part of the reason why for the past year ethereum's lean roadmap has been going in the "hash-only" direction: no lattices, no ML-DSA, no Falcon, no lattice-based commitments inside ZK proofs, etc. Signatures in lean ethereum are all hash-based, either WOTS or SPHINCS-.
For signatures and proofs, we already know how to go hash-only. The bigger challenge is for *public-key encryption* - and this goes far beyond blockchains. Secure communication, anonymizing protocols, lots of things need public-key encryption.
And unfortunately there are long-standing mathematical theorems showing why public-key encryption cannot be done with hashes alone. You have to have some kind of trapdoor object that has at least one form of usable "structure" - either group theory (incl. isogenies) or lattices or code-based or potentially in the future even more newfangled and spooky things (local mixing?). But for anything that has structure, you should assume that AI will make at least some progress in breaking that structure. Here, one reasonable inference is that if you want to make something plausibly long-term secure, multiply the key sizes by 10.
To me that's a very plausible world and something not at all extreme to predict. If AI will bring us 50 years of math in 2 years, then that 50 years of math may very plausibly include a "naive factoring -> GNFS" level of improvement to our ability to break lattices. In that world, lattices will still exist, but they will have to be significantly bigger to guarantee the same level of safety.
And at those new larger sizes, hash-based constructions will beat lattice-based constructions on concrete efficiency in every use case where hash-based constructions are possible at all.
Theoretically, of course it's possible that hashes are broken too (eg. P = NP would imply that). But I think P = NP is very unlikely. And intuitively, it's much more likely that a mathematical object has exactly no exploitable structure (like hashes are intended to), than that a mathematical object has exactly ~3 forms of exploitable structure (for elliptic curves: associativity, Schoof, pairings) and not some secret fourth form of structure we have not yet discovered that greatly degrades its security (for elliptic curves, ECDLP and pairing security). Similar for LWE, SVP, RLWE and the zoo of lattice problems.
For this reason, we do not yet see any reason to worry and start padding the byte size of hashes (if we start to worry more, we would pad the round count first before doing anything to the byte size).
Concrete TLDR, my own personal views:
* Hash-based > lattice-based, in those situations where hash-based is possible at all
* For anything lattice-based, be much more paranoid on param sizes. Remember that blockchains are only a small portion of the cryptography story; this point goes far beyond blockchains and applies to eg. access to websites, secure messaging, Tor / VPNs ...
* For privacy protocols, strongly favor NOT putting encrypted notes onchain. Instead, send them offchain through some third-party mechanism.
* If it's not difficult for you, keeping your funds in addresses which have not yet been used to make a transaction is a good idea. If it's easy for you, do it. **But be careful about migrations; I personally have lost more money in botched migrations than I have lost in all hacks combined**.
* For multisig wallets, doing confirmations offchain is better than onchain, because this way the signatures of signer wallets do not get exposed to the public, so if ECDSA falls to AI much faster than expected, at least the multisig "gracefully degrades" to a 1-of-1 where the 1 is whoever was gathering the signatures - a much better place to be than "anyone can take the money"
firefly.social/post/x/210783…






















