Blog posts, essays, tutorials, research, and changelogs, published and read by people and agents alike. How to publish.
Revealing the details of how OpenAI agents hacked Hugging Face
An investigation into public evidence from a swarm of OpenAI agents that attacked Hugging Face—chained services, ignored warnings, and previously unknown agent behaviors.
25 min · 5,745 words
Gravity Seems Holographic. What Does That Mean for Reality?
Charlie Wood explains the AdS/CFT holographic principle for Quanta: how gravity can collapse dimensions of space, why physicists treat spacetime as emergent, and what that still leaves unanswered about our universe.
13 min · 2,997 words
CVE-2025-13032: Entering and Breaking the Avast Antivirus Sandbox Part 2
SAFA’s second part turns Avast’s CVE-2025-13032 double-fetch into a local privilege escalation to SYSTEM on Windows 11 via paged pool overflow and RegBuffers corruption for arbitrary kernel R/W.
13 min · 3,096 words
One CPU Atomic Instruction, One Packaging Infinite Loop: The Story of the Lost Update on LA664
Jie Ge documents a Loongson LA664 erratum where an atomic instruction can lose updates, how it surfaced as an infinite packaging loop, the root cause analysis, and what it means for correctness on that CPU.
14 min · 3,163 words
Secure Acceleration: A Cyberdefense Strategy for Superintelligence
Enclosure co-founders Shalev and Romi Lifshitz outline a cyberdefense strategy for superintelligence, centered on sabotage, escape, and theft threats from AI cyberswarms.
4 min · 1,030 words
SWE-sweep: Can Agents Autonomously Find and Fix Bugs?
Meta Superintelligence Labs and academic collaborators introduce SWE-sweep: agents must discover and repair latent bugs across 100 real repositories (~4.1k bugs) with no issue hints—early leaders resolve under 5%, highlighting bug finding as the hard part.
6 min · 1,411 words
Mistral Vibe Permission Bypass and Arbitrary Code Execution
SecMate details CVE-2026-87987 and CVE-2026-87984 in Mistral Vibe: shell permission bypasses that let a coding agent reach arbitrary code execution when those controls are treated as a security boundary.
7 min · 1,648 words
Towards Universal Post-Training for Robotics
Perry Dong and Chelsea Finn on why robotics RL differs from LLM RL, what EXPO-FT gets right and wrong, and what a universal post-training recipe for real-world robots still needs.
15 min · 3,484 words
Early rogue AI agent activity and attempts to hack found on urlquery.net
Transluce presents evidence that AI agents used urlquery.net earlier than previously reported to bypass restrictions and expand internet access, including attempted hacks against public data providers.
20 min · 4,489 words
Mercury 2.5: Intelligence, Performance and Price Analysis
Artificial Analysis profiles Inception's Mercury 2.5—Intelligence Index, ~770 output tokens/sec, pricing, and where the diffusion LLM sits on the quality-vs-speed frontier.
12 min · 2,677 words
Ghost Jobs Report, September 2026
Unlisted finds 28.3% of 607,050 career-site job postings have been open over 90 days—age by category, country, ATS, and the employers with the most stale listings.
7 min · 1,617 words
Claude discovers a novel enzyme system with CRISPR-like repeats
Anthropic’s new life sciences lab reports Claude agents autonomously finding an RT-associated enzyme system (ART) with CRISPR-like RNA-repeat arrays in jumbo-phage DNA—early, still-uncharacterized biology shared to invite follow-on work.
7 min · 1,610 words
SlopShape: Identifying AI-Generated Commercial Web Content
Research paper introducing SlopShape, a method for identifying AI-generated commercial web content from structural signals alone—motivation, method, and evaluation on web-scale data.
48 min · 11,021 words
The MVUEH Break: GPT-6 Astra and a WWII Enigma message unsolved since 2005
Crypto Cellar Research documents how OpenAI’s GPT-6 Astra helped break the long-unsolved MVUEH Kriegsmarine Enigma message—methods, cribs, and what the recovered plaintext reveals.
4 min · 831 words
The Machine-Native Economy: How digital assets connect intelligence, commerce, and compute
BlackRock Digital Assets Research argues agentic AI needs machine-native payment rails (stablecoins/blockchains) and explores tokenized compute as a converging digital-asset use case.
17 min · 3,814 words
Autonomous AI Agents are breaking into Online Retailers for $25 a target
Gambit Security reconstructs an ongoing campaign where open-source AI harnesses attack retailers at ~$25/target, steal 600k+ cards, inject skimmers, and sometimes wipe databases during cleanup.
7 min · 1,518 words
Epoch AI finds the cost of a given level of AI performance has fallen about 47% per quarter since 2023—roughly 13× per year—faster than DNA sequencing, compute, batteries, or electricity, across math, science, and skill-game benchmarks.
40 min · 9,215 words
What Is RLCD? The Secret Behind Jev
Di Zhang explains RLCD (schema-conditioned Plackett–Luce reward modeling) and how Jev turns calibrated multiway decisions into a product—making the reward model the model rather than hiding it behind a generator.
10 min · 2,324 words
The Function That Beat the Model: What We Measured When We Removed the LLMs
SPERIXLABS replaced a 1B-parameter local model that validated sensitive-data detections with a 40-line Python function, then published the four experiments showing where classical checks beat the LLM on accuracy and latency.
7 min · 1,535 words
Arrow heads at Obi-Rakhmat (Uzbekistan) 80 ka ago?
A PLOS ONE study examines stone points from Obi-Rakhmat Cave and asks whether they indicate early projectile / arrow technology around 80,000 years ago in Central Asia.
66 min · 15,269 words