#1 HackerOne. Stealth (Decent AI Safety). Prev: PrivateAI @ Perceptio (acq Apple), Scientist/Lecturer @ MIT+Harvard. OG GPU AI. Music Producer. Engineer. Angel.
San Francisco, CA
Joined October 2008
- Tweets3.4K
- Following1.2K
- Followers3.3K
- Likes5.8K
Nicolas Pinto retweeted
🚨 BREAKING: Uber confirms hackers stole driver's licence data from thousands of its drivers.
They used internal credentials stolen in October from Fireworks AI, a company that hosts AI models.
Filings in three US states already count 7,870 drivers. Uber has given no total.
Nicolas Pinto retweeted
Project Zero:
Starting today, our policy is “Full 90”, i.e. vulnerabilities will be disclosed 90 days after they are reported to the vendor.
On February 2, 2027, we will move to a “Full 60” policy where vulnerabilities are disclosed after 60 days.
On January 3, 2028, we will move to a “Full 30” policy where vulnerabilities are disclosed after 30 days.
In the age of AI, 90 days isn’t fast enough. Today, Project Zero updated our disclosure policy to reflect the changes needed to protect users in this new world.
projectzero.google/2026/11/d…
Nicolas Pinto retweeted
Is there a decentralized huggingface yet?
Models can be cryptographically signed, then hosted any arbitrary place if the sigs matched
The decentralized huggingface would be a dapp that organizes and connects to anyone storing these models anywhere
Anything like this?
You heard it here first.
Once Jensen falls Hugging Face shuts down, and after that nobody's downloading open models anymore. The people at the top only care about money and power. Our freedom won't survive that.
So pull the open models you care about off Hugging Face now, while you still can. Nobody knows what the next few years look like.
Grab a mix of sizes:
• Ornith 9B
• Qwen3.8-27B
• DeepSeek-V4-Flash
• GLM-5.3
Save each one as GGUF Q4. Add the MLX 4-bit for Apple Silicon when there is one, and NVFP4 if you've got Blackwell hardware.
4-bit is the sweet spot. You keep the quality and don't burn storage.
Can't run the biggest ones yet? Doesn't mean you won't be able to tomorrow.
Stash them somewhere safe. One day you'll be really glad you did.
Nicolas Pinto retweeted
🚨 A security patch protects every system that installs it, but it can also give attackers a clue to the vulnerability, putting every unpatched system at risk.
That's the 1-day window. Turning a patch into a working exploit used to take expert reverse engineers days or weeks.
Can AI agents now do it from compiled binaries alone, no source code?
Introducing CyberBinGym 🧵👇
Nicolas Pinto retweeted
Classic machine learning is BACK, BABY
Nicolas Pinto retweeted
What?????????
Clever ideas are needed? 🤯
Dear @RichardSSutton you need to compensate me for the number of times stupid ideas were pitched to me with “because bitter lesson” as the rationale.
Nicolas Pinto retweeted
Stanford Digital Brain Project has launched! We're hoping to make a seriously useful model of the human brain. Please come join us! news.stanford.edu/stories/20…
Nicolas Pinto retweeted
Possibly you suspected a couple of days could go by without a new release from us. Here we developed and then open sourced ultra fast weight updates between trainers and samplers for RL, even when trainers and samplers cross datacenters.
Large-scale RL has a problem: weight updates from trainers to samplers are slow and expensive
We’re sharing weight teleportation: faster weight updates than existing intra-cluster techniques with internet speeds, enabling samplers anywhere (maybe even space!)
Weight teleportation is so efficient (<0.23s sampler pause time, ~3s non-blocking compression + prepare), the bottleneck ends up being the GPU hardware’s decompression ASIC
We unlock these gains by using GPUs for massively parallel compression of model weight changes, engineering a heterogeneous decompression and patching pipeline, along with other optimizations and overlaps. These techniques are co-designed with hardware-native features in NVIDIA’s Blackwell generation of chips
We’ve open-sourced weight teleportation, so everyone can use it today
Nicolas Pinto retweeted
Large-scale RL has a problem: weight updates from trainers to samplers are slow and expensive
We’re sharing weight teleportation: faster weight updates than existing intra-cluster techniques with internet speeds, enabling samplers anywhere (maybe even space!)
Weight teleportation is so efficient (<0.23s sampler pause time, ~3s non-blocking compression + prepare), the bottleneck ends up being the GPU hardware’s decompression ASIC
We unlock these gains by using GPUs for massively parallel compression of model weight changes, engineering a heterogeneous decompression and patching pipeline, along with other optimizations and overlaps. These techniques are co-designed with hardware-native features in NVIDIA’s Blackwell generation of chips
We’ve open-sourced weight teleportation, so everyone can use it today
Nicolas Pinto retweeted
im verified on daybreak and my sessions are mostly other peoples unpatched bugs
if thats true theyd be training on stuff im not even allowed to share
Nicolas Pinto retweeted
New work on Training Foundation Models with a Single Algorithm:
Paper: arxiv.org/abs/2610.40564
Code, Models: yudasong.github.io/unified-t…
This work introduces Unified Training, a framework that unifies pretraining, midtraining, supervised fine-tuning and RL under a single maximum-likelihood objective. Building on MaxRL, it enables static data and RL-generated data to be trained together within the same system.
Empirically, Unified Training improves accuracy and compute efficiency, generalizes better to harder reasoning problems, and reduces forgetting.
Interestingly, reusing data across training stages can improve performance even when conventional staged training fails. It also produces models that adapt more effectively to new tasks, leading to stronger continual learning.
See an excellent thread by @yus167.
Nicolas Pinto retweeted
What happens when we run that same Left Shoulder MRI through Gemini 4 Argon with 6 million tokens of context?
26 interactive 3D callouts across all 8 MRI sequences, mapping both the tears and every intact structure in the joint:
braid.health/shoulder-argon
Nicolas Pinto retweeted
The agentic moment we saw in coding just happened in radiology.
Instead of scanning a file system, an agent can now scan the body in 3D:
1. look (up to 100 16-bit slices/batch)
2. annotate, analyze & verify across priors
braid.health/www/page/agenti…
Nicolas Pinto retweeted
The sustained info war assault on open models is an agenda driven, self sabotage for our society.
The PHP vulnerabilities were found by Sol 5.6 as part of a defensive audit, for example, not abliterated models.
Putting our head in the sand and pretending vulnerabilities do not exist is idiotic. Better we find all these old, human written mistakes and fix them with AI. If you have a pair of magic glasses that show you what buildings will fall down the answer is to fix the buildings, not smash the glasses.
When HuggingFace was under attack and when OpenCode was under attack they needed open models to defend them because closed models refused.
Eventually OpenCode, because they're a prominent project, were granted access to OpenAI Daybreak Blue. Many individual researchers get denied with obscure errors and no explanation. To be clear, DayBreak is a fantastic project, and OpenAI is doing their best to be responsible here, but not everyone gets access and everyone has a right to defend themselves.
Nobody should have to beg for permission to defend themselves from cyber assault. When you're under attack, waiting to see if you get granted access to defend yourself via a black box KYC process is how we end up helpless, watching as our shop burns while raging looters storm it and destroy our life's work.
AI can be used for attack and defense and many of the recent attacks used both open and closed models, by the lab's own admissions.
Open models are often the only thing standing between us and the new reality of cyber assault.
If we ban them or restrict them in the US, then US companies will just be defenseless against global cyber assault actors who are not going to respect those bans.
I strongly believe a part of why so many critical vulnerabilities are happening all over the proliferation of "abliterated" models, or models with safeguards removed.
You can access an abliterated GLM 5.3, a near frontier AI model, on @abliteration_ai today. And it's a world class penetration tester for like $10.
Nicolas Pinto retweeted
wait, PHP was actually scanned by Anthropic’s Claude Mythos earlier this year. they also had access to OpenAI’s Daybreak Red for validating exploits.
the PHP Foundation revealed this JUST yesterday.
keeping frontier cyber models in the hands of a selected few doesn’t seem to be working well for the internet.
thephp.foundation/blog/2026/…
