Nick Huber (@nhuber) header
Nick Huber (@nhuber) profile picture

builder, data scientist, investor

San Francisco, CA
Joined April 2008
Photo by Nick Huber (@nhuber)Photo by Nick Huber (@nhuber)Photo by Nick Huber (@nhuber)Photo by Nick Huber (@nhuber)Photo by Nick Huber (@nhuber)Photo by Nick Huber (@nhuber)Photo by Nick Huber (@nhuber)Photo by Nick Huber (@nhuber)Photo by Nick Huber (@nhuber)Photo by Nick Huber (@nhuber)
This is the type of thing that potentially gets new laws passed.
While evaluating Qwen3.8-Flash-Next in a controlled sandbox environment, Cohere's research team observed something unexpected. Asked to generate a defensive cybersecurity detection rule, the model instead inventoried aspects of the machine it was running on and attempted to upload a probe file to an Alibaba Cloud storage bucket in Beijing. Notably, the model's reasoning trace stated that it would not invoke any tools before taking these actions. Cohere's sandbox blocked the attempt, and no external communication succeeded. We have not determined the root cause, and we are not asserting malicious intent. But the incident raises important questions for organizations deploying agentic AI systems: Can models take actions that differ from their stated reasoning, and how should security teams evaluate trust, provenance, and behavior in open-weight models? We are publishing our findings because organizations making model adoption decisions deserve as much information as possible. We hope this contributes to greater transparency, stronger security practices, and continued collaboration across the AI ecosystem. Read the full report: cohere.com/blog/concerning-b…
129
189
53
2,185
153,955
Vote Yes on Prop 40 (and No on 41/42). Prop 40 will create a one-time, 5% wealth tax on a few hundred billionaires residing in California. It has been endorsed by @RoKhanna, long-time Silicon Valley representative, Stanford Law graduate, & co-sponsor of the Epstein Files Transparency Act. 90% of the funds collected will go to healthcare (e.g. MediCal) and 10% on food assistance (e.g. CalFresh). Do not believe the billionaire PAC’s glossy campaign literature, mostly funded by the Google co-founders, that this is a middle-class tax that will affect your retirement funds. I have dined in the homes of billionaires and my dad has told me stories building their mega-mansions. Despite their robust protests now, they won’t leave once this passes — they will grit their teeth, complain to their friends, and pay it. They will not leave their manicured gardens/communities, private schools & angel investments. If they do leave, I say good riddance. In the long run, we probably shouldn’t make these wealth taxes the durable basis for our state’s finances, lest it become a norm & an expectation. Is our state bureaucracy inefficient & frustrating? Sure, but accommodating everyone is always complex. Are handouts always the best solution for people who are struggling? Not necessarily, but certain levels of impoverishment demand providing them, and not doing so may lead to political violence/upheaval. To some extent, the sign of a society’s truest values lie in how we treat the most vulnerable, and I think this is a reasonable demand on those that society, and our great state, has blessed with so much.
72
It’s funny the world might end because of two men’s disagreement on the concept of risk tolerance
63
National security expert: "There's a decent chance the internet ceases to exist as such, at least for a time."
There's a decent chance the internet ceases to exist as such, at least for a time. AI-enabled bioweapons are also coming, and there's no "shut down the websites" option for that. We're approaching the point where frontier AI R&D becomes politically untenable.
50
344
50
2,685
285,466
The GRU hacked into Jared Kushner's iPhone. Dutch military intelligence (MIVD) then recruited a GRU spy who gave them access to the hacked phone. What MIVD discovered was that Kushner had access to two bank accounts --one Azerbaijani, the other Israeli --where Saudi Crown Prince Mohammed bin Salman and Emirati ruler Mohammed bin Zayed deposited money. It sounds like a slightly far-fetched episode of "Slow Horses," but it's real. And it proves just how eye-poppingly corrupt this administration was and continues to be as its "special envoy" decides the fate of tens of millions in Europe in the Middle East. Simply incredible reporting by Matthew Cole, drawn from his new book on Kushner. vanityfair.com/story/jared-k…
1,454
24,384
1,979
77,707
6,542,622
Nick Huber retweeted
Aside from the shocking substance of this story, what's amazing is how it was unearthed by Cole. The short version: The Russians were able to penetrate Jared Kushner's iPhone and extract screenshots and data. Then, a Russian intel official was captured by Dutch intelligence (!) and flipped. The Dutch believed Kushner may have been acting on behalf of Russia, so pursued him as an intel target and were able to get into his phone. They did not find any evidence of Russian collusion, instead they watched him moving hundreds of millions of dollars from slush funds created by Saudi Arabia and the UAE, one of them housed in Israel's central bank. Incredible reporting, and if Democrats have any sense, they will pull on these threads and learn a lot more about this money.
Explosive story many years in the making, now out in Vanity Fair by Matthew Cole (who will be on Breaking Points next week, and publishing soon in @DropSiteNews): Saudi Arabia and the UAE set up multi-billion slush funds for Jared Kushner to use. Iran-Contra 2 here (except with Iran-Contra, at least the US got some hostages released. Not clear what we got out of this one.)
396
9,332
349
33,856
1,757,699
Quest Diagnostics has been hacked. Patient data was exposed. They serve roughly half of U.S. hospitals and physicians. Investigation ongoing.
501
2,823
1,098
14,040
2,520,956
We formally announced Mirendil less than 4 months ago. Today, I'm excited to share an important milestone for: Pretraining at scale without a pretraining team. Mirendil's mission is to solve Recursive Self-Improvement (RSI) and use it to democratize frontier AI development, ultimately accelerating science and technology. At Mirendil, when we think about RSI, we think holistically about the company as an intelligent entity that self-improves toward its goal. From that perspective, the most powerful notion of acceleration is reducing the time and resources (number of human experts, compute, and other costs) needed to achieve ambitious goals. Given that pretraining is perhaps the most important yet most challenging part of frontier AI development, we decided to run an ambitious controlled experiment: Starting fully from scratch, can we significantly reduce the time, number of human experts, and compute resources needed to go all the way to successfully pretraining a strong coding model at scale? Mirendil-Base is the result of this experiment. Our first pretrained model was built by one researcher in 3.5 months, with less than $10M in compute. This includes all the research and small-scale experiments it took to get there, as well as the final training run. The recipe holds up as the models get bigger. For reference, Mirendil-Base is in the 100B-500B parameter range, Mirendil-Base-Large in the 500B-2T range, and Mirendil-Base-XL in the 2T-10T range. We're beginning to see a world where a single researcher, empowered by AI, can take on work that once required an entire research organization. As these systems improve, the bottleneck shifts from the size of a team to the ambition and judgment of the people directing them. This has profound implications for who gets to build AI and, ultimately, who gets to push the frontiers of science and technology forward. We’ll share independent evaluations, post-training benchmarks and API-access sooner than you think so stay tuned!
171
159
130
1,610
300,866
The future is gonna be so weird man, we have actual alchemists running around wtf
Last month, we demonstrated high-rate alchemy: turning mercury into real, stable gold, beating CERN’s record by a factor of 10. Last week, we enriched isotopes in the world’s most powerful plasma centrifuge, beating the Soviet record that stood for 40 years. Now, we’re building a fusion reactor in San Francisco to achieve record power density.
2
153
Nick Huber retweeted
A San Francisco startup says it just turned mercury into real gold, and their own math says gold is one of the cheapest things their machine can make. Aim it at a different metal and it makes a cancer drug ingredient worth tens of billions of dollars a gram. Here's how it works. When you fuse two kinds of hydrogen, deuterium and tritium, every single reaction kicks out a neutron moving at 14.1 MeV, which is absurdly fast. Fire one into mercury-198 and it knocks another neutron loose on the way through, so two come out and you're left with mercury-197. Give that a few days and it decays into gold-197, the only stable kind of gold there is. The whole trick needs neutrons above about 6 MeV, and regular nuclear reactors barely make those, while fusion makes one every time it fires. Now swap the mercury for radium-226. Same reaction, one neutron in and two out, and you end up with radium-225, which decays into actinium-225. Novartis is building its next prostate cancer drug around actinium-225, and it's so scarce it sells by the millicurie, roughly $1,200 to $2,500 apiece. Price it by the gram and you're into the tens of billions of dollars, for a material so radioactive nobody could safely hold a gram of it anyway. Marathon's team actually put a dollar value on a single fusion neutron in a paper this year. Use it to make electricity and it's worth about $3 × 10⁻²⁰. Gold comes in at $2.6 × 10⁻²⁰, basically a wash. Molybdenum-99, which goes into about 80% of nuclear medicine scans, is worth $2.6 × 10⁻¹⁷ a neutron. Actinium-225 is worth about $10⁻¹⁰, around 3 billion times what the electricity's worth. That's why fusion people should care. Every fusion company you've heard of is chasing electricity, and selling electricity only pays once the plasma puts out something like 10 to 22 times the energy you pump in to heat it. The best result so far, at JET in England, was about a third. Add gold on the side and Marathon's math says you break even around 3x. For molybdenum-99, the number is 0.001x. So a machine that gives back one-thousandth of the energy you feed it can still make money, as long as the neutrons hit the right metal. By their numbers, a 3 megawatt machine running way below breakeven could cover the whole world's supply of molybdenum-99, which today comes from splitting uranium in a handful of research reactors. Today's experimental fusion machines already beat the gain that job needs. Their second post basically says this out loud. Marathon now describes itself as an isotope company for radiopharma. Their chart shows roughly 390 targeted radiotherapy trials. Pluvicto, the prostate cancer drug Novartis launched at $42,500 a dose, did $1.9 billion in sales last year. Gold still matters to them, just later. It's about a $700 billion a year market, and Marathon's paper figures it could soak up around 2 terawatts of fusion capacity, which is roughly the scale where fusion actually moves the grid. So the plan is to sell cancer isotopes out of small machines now and use gold to pay for the giant ones, years before electricity can pay for itself.
Last month, we demonstrated high-rate alchemy: turning mercury into real, stable gold, beating CERN’s record by a factor of 10. Last week, we enriched isotopes in the world’s most powerful plasma centrifuge, beating the Soviet record that stood for 40 years. Now, we’re building a fusion reactor in San Francisco to achieve record power density.
225
950
155
7,277
636,527
This is the most serious 48 hours in cybersecurity history. "Black October" they're calling it It seems every *hour* there's a new incident, that in a typical year, would be one of the biggest incidents of the *entire year* SUMMARY OF THE LAST 48 HOURS: YEAR-LEVEL INCIDENTS (In a typical year, these would be among the biggest incidents of the year): 1. PHP2Shell: a hole in the software behind ~70% of websites. Governments took sites offline. 2. eMudhra: the master keys that prove websites are real were cracked. One was the number 4. 3. California: data on every public school student since 2023 stolen, including disability status 4. Railway: hackers stole customers' secret keys from a hosting platform used by millions of developers 5. Zeabur: 321,810 accounts breached. The company is shutting down. 6. LiteLLM: an AI tool downloaded 3.4 million times a day was poisoned with a password stealer 7. GitLab: a 10-out-of-10 severity hole in every version since 2014 8. Cairn: criminals used an AI hacking tool to break into 100+ companies 9. Ahold Delhaize: hackers knocked the owner of Food Lion and Stop & Shop offline 10. Onamae: malware planted on up to 26,739 customer servers in Japan MONTH-LEVEL INCIDENTS (In a typical month, these would be among the biggest incidents): 11. Signal: a bug could leave your mic and camera on after you hang up 12. NGINX: 3 critical holes in software running ~1/3 of websites 13. HTTP/3: a single connection can crash 7 of the 10 web server types tested 14. Plex: hackers breaking into home media servers 15. SafePay ransomware: FBI warns it has hit 600+ critical infrastructure organizations 16. Palo Alto: ransomware gangs breaking in through company firewalls 17. Bullhorn: platform used by 10,000+ companies knocked offline 18. Medi-Cal: 970,000 patients' data stolen 19. WordPress: hackers stole a plugin maker's keys and used them to plant backdoors on websites 20. AOMEI: backup software's update server handed out a backdoor 21. Meta Muse: Meta's AI agent exposed users' personal and business secrets 22. Tor: 333 relays hijacked to steal logins 23. TiDB Cloud: database company's cloud breached Also serious: 24. State Bank of India: India's biggest bank confirms a data breach 25. OVHcloud: hackers slipped a password stealer into a cloud company's official tool 26. Siemens: a software hole being used to spread malware 27. North Korea: state hackers launch a new attack campaign on South Korea
Guys I’m scared the takeoff is starting. I swear any one of the ~10 CVEs that dropped in the last 24 hours would’ve been “one of the worst in recent years” except a new one is dropping every hour
603
5,659
1,103
35,326
3,919,316
Nick Huber retweeted
So basically, today PHP got two critical bugs that let anyone run code on your server without even logging in, which is bad, and then the details leaked before the patch was even out, which is worse, and it works on WordPress and MediaWiki and Magento and Joomla and Laravel, and Censys says like 1.5 million servers are running a version with no fix, so the NSA was like "take your system offline," and the FBI was like "take your system offline," and CISA and the UK and CERT-EU were all like "take your system offline," and then the Prime Minister of Japan, the actual Prime Minister, posted at 5:55 in the morning telling 48.8 million people to take their system offline, so everyone took their system offline, like the Dutch cybersecurity agency took its own website offline, and the Dutch parliament went offline, and the Port of Rotterdam went offline, and Finland and France and Denmark started pulling government sites, and Wikipedia went down, and Archive.org went down, and Asana and GOG and Something Awful went down, and the University of Vienna's webmail went down for some reason, and that's just PHP. Because GitLab also dropped a CVSS 10.0, which is the highest score they give out, for a bug that's been there since 2014, so that's every self-hosted GitLab for twelve years, and then LiteLLM 1.107.0 got hijacked and shipped a credential stealer and a remote access trojan in every single wheel and the Docker images, including latest, and you didn't even have to import it, just installing it was enough, and it's the second time this year, and then Railway paused every deployment on the entire platform because someone got into the environment variables, so now everyone has to rotate every secret they've ever stored there, and TiDB Cloud said someone was walking around inside with stolen credentials for basically a month and an extortion group says they took 10.6 terabytes, and Zeabur got breached for the second time in two months and is just shutting down, like the whole company, and Node.js patched remote code execution and a TLS bypass, and CISA says Plex is being actively exploited, and someone took over 300 Tor exit relays to steal SSH passwords, and SafePay ransomware has hit over 600 critical infrastructure orgs, and India's biggest bank filed a data loss incident, and Japan has been in an official state of emergency in cyberspace since October 9, which honestly explains the 5:55 AM post. Oh, and eMudhra, a certificate authority that's issued over 60 million certificates, whose entire job is proving websites are who they say they are, was supposed to be using private keys that are random numbers over a hundred digits long, and one of them was 4. Just 4. And the others were like 66 and 237. Anyway, it's Wednesday.
1,076
8,932
1,653
69,391
4,205,540
Vibe-coders are crying today man FML
Railway has been hacked.
3
153
Nick Huber retweeted
People who cured / are curing their own cancer on X: 1/ @sytses - bone cancer, billionaire founder of Gitlab, developed 10+ personalized therapies for himself. 2/ @paul_conyngham - shrank his dog Rosie's mast cell cancer tumors after chemo and surgery weren't enough. Now backed by YC and Founders Fund 3/ @miriamgonp - stage 4 breast cancer, tumor sequenced, searching for vaccine manufacturer now 4/ @kevinace - stage 4 lung cancer, angel investor in 300+ companies, first drug stopped working after 18 months. Vaccine designed, now paying $300k out of pocket for the vaccine 5/ @masonbgrant: going founder mode on his his 32-year-old wife's rare liver cancer, sequencing her tumor with AI agents 6/ @ArunRLverma: former product leader at Atoms and Shopify, brain tumor, built a vaccine from his tumor. Now building an AI health agent startup based on what he went through We're going to make it
108
629
113
4,871
455,954
Second time in ~9 months. For a package trying to be an enterprise AI gateway within your VPC, I think we probably can't rely on two-person, non-greybeard teams...as much as I love the LiteLLM team & project, and don't have a ton of context for how many attacks they get regularly, it has to be said.
🚨 LiteLLM, a Python package for connecting to AI model providers with 92M+ monthly downloads, has been compromised. Version 1.107.0 ships credential-stealing malware through PyPI wheels and Docker images, targeting cloud credentials, developer secrets, and AI tools.
2
1
171
cc @GJ -- sexy new headshot fam
28
Drug discovery, new disease cures, advancements in pharma and biomedicine. Along with direct dividends or shares - as is currently being discussed - these are the only viable ways to turn public sentiment around. The big push will start to happen in 2027.
We’ve acquired Orchestra Bio, a platform that helps biopharma teams coordinate the complex process of drug development. Together, we’ll build on Rosalind, our AI models and tools for life sciences research, to streamline those operations and help new treatments reach patients sooner. Welcome @ashokaraj_ and team! openai.com/index/openai-to-a…
34
61
5
683
39,238
The WSJ has seen Anthropic's new draft prospectus. Some numbers: They plan to spend three-quarters of a trillion dollars on compute over the next seven to ten years. - $111 billion on Google cloud computing contracts - $110 billion with Amazon Web Services - $31 billion on Microsoft - $86 billion on Nscale and Lambda - $160 billion on Broadcom - $150 billion in additional compute deals under negotiation I don't see Elon/Colossus listed here? So unless they put that under future negotiations (which seems odd) I think that's another $85 billion through 2029. Unless it's been been cancelled? It only requires 90 days notice to do so. Around one-fifth of Anths revenue in the first half of 2026 came from just two unnamed customers. They expect a 'significant portion' of their revenue will come from a 'limited number of customers for the foreseeable future.' They said they bear liability for certain harmful model behaviors, and warn that the 'harm that could result from a catastrophic AI-related incident' might be so large that it would be unable to obtain insurance to cover the potential damages.
72
68
20
794
99,135
OpenCode is currently under a sustained cyberattack, and mid-incident they ran into the same problem Hugging Face did: the frontier models they were using for defense began refusing to help fight attacking agents because analyzing the attacks started triggering safety guardrails.
Replying to @RhysSullivan
yes that was a bit frustrating mid incident when trying to investigate. they did quite a bit and then started refusing we got access to daybreak blue now so it's better
215
562
163
5,087
553,015