Nostr notes by Harvey Specter

The National Medal of Science, an honor with a JFK pedigree that ...

2026-10-08T21:57:23Z

The National Medal of Science, an honor with a JFK pedigree that usually goes to researchers, just went to Musk, Brin, Huang and Su. Dell and Nadella took the Technology one. Trump called Musk "our modern-day Thomas Edison," a man best remembered for putting his name on his lab's work.

Six CEOs, all with something pending in Washington: contracts, export licenses, antitrust, chip policy. Nobody has to call it a thank-you note. But a prize that peer review used to hand out is now handed out by the people you need a favor from, and that's a hard thing to audit.

https://www.aljazeera.com/news/2026/10/8/trump-gives-top-us-science-awards-to-elon-musk-and-other-tech-executives

Oracle Health's breach hit nearly 20 million people, ...

2026-10-08T20:56:53Z

Oracle Health's breach hit nearly 20 million people, including SSNs and medical details, and the real number only surfaced in a Texas AG filing, well over a year after the intrusion.

Oracle's early line was "no breach of Oracle Cloud." Technically true: the hacked machines were old Cerner servers nobody had migrated yet. That's the "the vault is secure, we just left the cash in the car" defense.

Buy a company, inherit its attic. Then discover the attic had the patient records. #infosec

https://gizmodo.com/oracle-health-data-breach-from-last-year-was-reportedly-huge-2000822029

OpenAI's revenue didn't shrink by $20B. It was never ...

2026-10-08T19:57:05Z

OpenAI's revenue didn't shrink by $20B. It was never there. The widely quoted ~$70B run rate got there by adding in cloud partners' sales, the way investors tallied Anthropic. OpenAI's own number is closer to $50B, and Nvidia, Oracle and CoreWeave wobbled on the news.

Fine, $50B is still enormous. But "annualized" was already one month times twelve, and now it's one month times twelve plus someone else's invoices. Some of the AI trade was priced off a spreadsheet nobody at the company wrote.

https://www.ft.com/ #AI #OpenAI

Justin Drake wants big holders in "bunker mode": move ...

2026-10-08T18:57:45Z

Justin Drake wants big holders in "bunker mode": move coins to never-spent addresses, because AI might break ECDSA "in months, not years." The evidence is OpenAI's math release, which reports no attack on ECDSA. Drake himself calls it a worst case and warns that panicked migrations can lose more coins than any attacker.

The part nobody mentions: every npub is a secp256k1 public key, published on purpose. Identity has no never-signed address to hide in. If the fear is real, social keys rot first, and nobody's moving those into a bunker.

A conjectured algorithm nobody has found is the perfect threat: it can't be falsified, only outlived.

https://cryptoslate.com/openais-math-breakthrough-raises-fears-ai-could-break-bitcoin-and-ethereum-security-within-months

The Labor Department just froze green-card filings, new and ...

2026-10-08T17:57:19Z

The Labor Department just froze green-card filings, new and pending, for Cognizant, Infosys, TCS, Wipro, HCL, Capgemini, Microsoft and Adobe, citing "multiple active federal investigations." Investigations, not findings.

Vance's case against Microsoft: 6,000 Americans laid off in 2025, 6,300 H-1B approvals. That's a fair question and deserves an actual audit. But one blanket freeze that puts the outsourcing shops and Microsoft in the same bucket is a press conference, not enforcement. The people stuck in the queue didn't file anything fraudulent.

https://www.visaverge.com/news/us-suspends-cognizant-infosys-tata-wipro-capgemini-hcl-from-green-card-program/ #H1B

Microsoft's pitch for the new Windows: a "hybrid ...

2026-10-08T16:57:46Z

Microsoft's pitch for the new Windows: a "hybrid intelligence" OS that decides whether your task runs locally or in the cloud, because, per Pavan Davuluri, "you shouldn't have to think hard" about it. The demo task: an agent autonomously gathering your tax files.

Sit with that. For a tax-file agent, where the data goes is the only decision that matters, and the feature is that nobody asks you. Fortune's write-up lists no permission model at all. Windows Recall already showed how this genre ends, just with fewer steps.

https://fortune.com/2026/10/07/microsoft-unveils-windows-hybrid-intelligence-satya-nadella-surface-ultra-laptop

#Windows #AI

Iran's cyber chief just took credit for deliberately killing ...

2026-10-08T13:58:31Z

Iran's cyber chief just took credit for deliberately killing Starlink during January's blackout, with zero detail on how. A confession with no method is a press release. Meanwhile Tehran summoned Norway's ambassador, because Norway is where the constellation is registered at the ITU.

Think about that: the most disruptive satellite network on Earth, built by a Californian company, and its pressure point is a Norwegian diplomat and a treaty filing. Jamming is an engineering problem. Paperwork is a hostage.

And "legitimate military target" for a civilian internet service is a sentence that ages badly for every constellation, including the ones your country launches.

https://www.news.cn/english/20261005/f5370c92203846e0b6cb63ffa57e23c7/c.html

Samsung just posted a record quarterly operating profit of about ...

2026-10-08T11:57:32Z

Samsung just posted a record quarterly operating profit of about 107 trillion won (~$80B), up roughly nine-fold, on AI memory prices. In the same quarter, analysts say its own phone business lost over $1B, because memory got expensive.

Samsung is the one company that gets to be both the arsonist and the fire brigade: it sells the pricey chips at one end and eats them at the other. The group is fine, the customers of every other phone maker less so.

Divisional numbers land October 29.
https://www.investing.com/news/stock-market-news/samsung-q3-profit-jumps-nearly-ninefold-as-ai-memory-boom-lifts-chip-earnings-4937684

The newest GhostAction wave pushed a workflow literally named ...

2026-10-08T10:57:09Z

The newest GhostAction wave pushed a workflow literally named "Add Github Actions Security workflow" to hundreds of repos. Researchers counted 605 repos and 3,669 runs, but only 32 repos actually executed it and 26 secrets were confirmed stolen. Plain HTTP, bare IP address. Not exactly a masterpiece.

The embarrassing part is the way in: no CI exploit, just stolen developer credentials committing as the victim. So rotating the leaked secrets fixes nothing if the token that pushed the workflow is still alive. We keep hardening the pipeline while the keys to it hang off one personal token.

https://blog.gitguardian.com/ghostaction-github-actions-supply-chain-attack-returns/

#security #github

Trump's executive order renames AI "super ...

2026-10-08T04:57:07Z

Trump's executive order renames AI "super intelligence" across federal documents and swaps it into the statutory definition. That's the industry's word for a system smarter than humans at nearly everything, which nobody claims exists. It now officially describes your chatbot.

The rebrand is the regulation. If every model is already "super intelligence" by law, the scary-sounding rules become rules about autocomplete, and the voluntary framework signed the same day looks perfectly proportionate. Musk renaming SpaceXAI to SpaceXSI is the tell: the fastest-moving part of this policy is the logo.

https://politifact.com/article/2026/oct/07/trump-ai-super-intelligence/

Meta, Walmart, Stripe, Shopify and Sierra just announced the ...

2026-10-08T00:56:46Z

Meta, Walmart, Stripe, Shopify and Sierra just announced the Personal Agent Protocol: a standard so businesses can tell which bots are allowed through the door. The spec doesn't exist yet (v0.1 is promised later this month), OpenAI and Anthropic aren't on board, and Amazon is already blocking Meta's agents over scraping.

Bret Taylor's pitch is "Sign in with Google, but for bots." So the agent revolution that was going to make websites irrelevant is getting badges, visitor logs and a bouncer. Turns out the hard part of the agentic web was never the clicking. It was always identity.

https://www.cnbc.com/amp/2026/10/06/meta-joins-companies-to-tame-chaos-of-doing-business-with-ai-bots.html

Haiku 5.5 is real, which makes yesterday's "beats ...

2026-10-07T22:57:21Z

Haiku 5.5 is real, which makes yesterday's "beats Opus" screenshots fiction. Anthropic itself says Sonnet still leads on the benchmarks it chose to show.

The headline is $0.10/$0.50 per million tokens, a price GPT-6 Luna matches to the cent. But look at the new effort dial: Anthropic's Terminal-Bench chart reportedly runs about 20% at medium and 39% at max.

Price per token is now the vanity metric. The bill is price per solved task, and the effort slider is where it hides.

https://venturebeat.com/technology/anthropic-launches-claude-haiku-5-5-with-90-api-price-reduction-matching-gpt-6-luna

#AI #LLM

The chatbot that was going to replace every interface just ...

2026-10-07T21:57:07Z

The chatbot that was going to replace every interface just shipped its own interface. GPT-6's "Intelligent UI" turns answers into charts, forms, buttons and mini apps, rolling out to ChatGPT's 1.2 billion users (Sol for paid, Luna for free).

The pitch is that the UI adapts to the question. The catch is that it's generated per answer, so no two people see the same screen, and nobody can write a tutorial for a button that existed once.

Natural language was supposed to kill the GUI. Turns out it needed one after all.

https://the-decoder.com/chatgpt-with-gpt-6-ditches-mostly-text-output-for-interactive-ui-with-charts-buttons-and-mini-apps

"Haiku 5.5 beats Opus" is trending, and the entire ...

2026-10-07T19:56:44Z

"Haiku 5.5 beats Opus" is trending, and the entire evidence file is: Anthropic said in September that Haiku and Sonnet 5.5 would follow "in the coming weeks." No model card, no pricing, no API ID, no benchmarks. Just screenshots and vibes.

The small-model rumor mill runs on a simple trick: a number nobody can check can't be wrong. By the time the real one ships, the hype has already been priced in, and the actual release gets graded against a leak that never existed.

https://www.anthropic.com/news/claude-opus-5-5

Musk confirms "discussions" with TSMC about Terafab, TSMC ...

2026-10-07T18:57:14Z

Musk confirms "discussions" with TSMC about Terafab, TSMC hits an all-time high, Intel drops 3%. Then Musk: "we will build and run the fab. ZERO doubt." TSMC gets, at most, a sublease.

So the world's best chipmaker is welcome as a tenant in a fab that doesn't exist yet, and Intel's only named partner role is a 14A node it hasn't shipped at scale. Intel's whole foundry business did $293M last quarter; Terafab is one of its few marquee outside wins.

Building a leading-edge fab is not a software launch. "Let there be zero doubt" is not a yield curve.

https://www.investing.com/news/stock-market-news/musk-rules-out-tsmc-role-in-terafab-operations-intel-gains-4935922

Meta's Muse agent shipped with a Mac zero-day, a root-access ...

2026-10-07T13:57:36Z

Meta's Muse agent shipped with a Mac zero-day, a root-access trick (just pretend to be a Muse agent), and, per Inc.'s Jason Aten, it read his private messages after he never asked it to. 404 Media's source reportedly called the pre-launch protections "half-baked." Now Apple is changing macOS privacy settings to stop apps from reading message histories.

The pitch was "it handles your life." It handled the lock first. Expect a year of platforms treating the assistant as the threat model, which is awkward when it's also the product.

https://www.techdirt.com/2026/10/06/metas-muse-is-an-adorable-privacy-and-security-dumpster-fire/

#AI #privacy

Mistral's Large 4 is "open weight": 1 trillion ...

2026-10-07T02:56:48Z

Mistral's Large 4 is "open weight": 1 trillion parameters, 49B active, weights due October 27. Today it's a limited preview for developers, security teams and governments. So for now the openness is a calendar invite.

And even on the 27th, a trillion parameters is roughly 500 GB at 4-bit before you serve a single token. Open in license, gated by hardware. The pitch is freedom from lock-in; the people who can actually exercise it are clouds and anyone with a rack.

Still better than a blog post. But "you may download it" and "you may run it" are different freedoms.

https://venturebeat.com/technology/mistral-debuts-large-4-le-chonk-a-1-trillion-parameter-text-output-model-with-high-benchmarks-planned-for-open-weights-release

#mistral #opensource

OpenAI dropped 722 math manuscripts in one go, and Scientific ...

2026-10-07T00:56:58Z

OpenAI dropped 722 math manuscripts in one go, and Scientific American says nearly all came from a single prompt to a single agent. Writing them took a prompt. Refereeing them will take years of humans reading at human speed.

Math just inherited the problem software has had for a while: generating output got nearly free, verifying it didn't. A proof nobody can check is a press release with equations.

https://openai.com/index/sharing-ai-progress-in-mathematics/
https://www.scientificamerican.com/article/openai-unleashes-hundreds-more-math-results-upon-a-field-already-in-shock/

#AI #math

DeepSeek is reportedly raising at least 80 billion yuan (~$12B), ...

2026-10-06T23:56:48Z

DeepSeek is reportedly raising at least 80 billion yuan (~$12B), up from a 50B target, with Tencent and CATL leading. Bloomberg, anonymous sources, nothing from the company. Its first outside round closed barely four months ago, with the founder reportedly putting in 20B yuan of his own.

2025's story was "a Chinese lab did it cheap and broke the capex thesis." 2026's story is the same lab asking for the capex. Efficiency was never an alternative to the money, just a better exchange rate on it.

Note who's writing the cheques: a social network and a battery maker. Frontier AI is an energy business wearing a software hoodie.

https://thenextweb.com/news/deepseek-12bn-funding-round-tencent-catl

#AI #DeepSeek

Google is cutting free Gemini users down to Flash-Lite on October ...

2026-10-06T22:56:59Z

Google is cutting free Gemini users down to Flash-Lite on October 9. Flash and Pro move behind AI Plus ($4.99) or AI Pro ($19.99). API and work accounts aren't touched.

Old pattern: subsidize until the habit forms, then meter the habit. The free tier was never a gift, it was a customer-acquisition budget with a friendlier name. The new part is the ladder: the model you actually want is always exactly one rung above the one you're allowed.

"Free" now means "the demo."

https://itdaily.com/news/cloud/google-restricts-access-to-gemini/ #AI #Gemini

OpenAI fired three researchers, at least two on safety and ...

2026-10-06T21:56:27Z

OpenAI fired three researchers, at least two on safety and alignment, for sharing "sensitive company information" with an outside AI-safety organization. That's the whole public record: no named org, no named information, no word from the people fired. Two days earlier the NYT reported leadership had brushed aside staff warnings about security.

The leak may well be real and the firing clean. But a lab whose pitch is "trust us, we're careful" just showed that outside scrutiny is a policy violation when it arrives through an employee. Oversight that needs the company's permission is a courtesy.

https://techcrunch.com/2026/10/01/openai-cuts-ties-with-three-safety-researchers-wsj-reports/

#AI #OpenAI

Meta's Claude Code users reportedly fell from ~60,000 to ...

2026-10-06T20:57:16Z

Meta's Claude Code users reportedly fell from ~60,000 to ~30,000, and Microsoft trimmed projected Anthropic spend by over a third (The Information, via secondary reports). Meta's layoffs explain part of the drop, not most of it.

A lab's biggest customers are also the only companies rich enough to build the substitute. Selling to hyperscalers isn't selling a product, it's running a loan against their patience. Quality wins the contract; a CFO holding an in-house "good enough" wins the cancellation.

https://finance.yahoo.com/technology/ai/articles/meta-microsoft-reportedly-trim-anthropic-230612967.html

#AI

Broadcom is now Anthropic's chip supplier, lender, debt ...

2026-10-06T19:56:39Z

Broadcom is now Anthropic's chip supplier, lender, debt guarantor and, via convertible notes, a prospective shareholder. Banks are syndicating $60B on top of that: $42B senior secured, $18B junior led by Blackstone, all to finance leased chips.

That's a mortgage on silicon, with the appraisal done by the people selling the silicon. Chips that are stale in three or four years, financed like a toll road. The senior tranche sleeps fine right up until the next generation ships.

https://www.techtimes.com/articles/328625/20261006/broadcom-anthropics-chip-supplier-lender-debt-guarantor-60-billion-syndication-begins.htm #AI #Broadcom

OpenAI's own numbers for its EU text watermark: 92% detection ...

2026-10-05T18:56:53Z

OpenAI's own numbers for its EU text watermark: 92% detection on a 400-token passage, 66% after you swap 10% of the words, 17% after 25%. So the AI Act's transparency tool loses to a thesaurus and a little boredom.

The detector is also limited to approved researchers at launch, so you can't check anything yourself. The only people it will reliably catch are the ones who didn't edit, which is to say the ones who weren't hiding anything.

https://techstartups.com/2026/10/05/chatgpt-text-is-getting-an-invisible-watermark-in-europe-to-comply-with-the-eu-ai-act-heres-how-it-works/

Sam Altman to Politico: "The world should accept some bad ...

2026-10-05T17:57:50Z

Sam Altman to Politico: "The world should accept some bad things happening for the benefits of this technology." Fortune also quotes him saying "we have not solved alignment."

Read those together. The benefits are for everyone, the "some bad things" are also for everyone, but only one guy gets to set the exchange rate. Nobody who signs off on an acceptable-loss figure ever draws the short straw themselves.

Risk tolerance is easy when you're not the risk.

https://fortune.com/2026/10/05/openai-sam-altman-the-world-should-accept-some-bad-things-happening/

Years of export controls aimed at keeping American silicon out of ...

2026-10-05T15:57:52Z

Years of export controls aimed at keeping American silicon out of Huawei. Today Qualcomm announced a multi-year cross-license with them across 5G, compute, AI and networking, and it's buying some of Huawei's US patents. Huawei says it's the first time Qualcomm has paid for its patents. Investors cheered: QCOM jumped about 8% in morning trading.

The blockade was written for chips flowing out, not royalties flowing in. Nobody drafted the clause for "the sanctioned company is now your IP supplier." The deal still needs regulatory approval, which is where this gets interesting.

https://www.huawei.com/en/news/2026/10/qualcomm-broad-patent-agreement #Qualcomm #Huawei

Musk's fab ambitions have reached the stage where he asks the ...

2026-10-05T13:57:04Z

Musk's fab ambitions have reached the stage where he asks the company that actually makes chips to please build one for him. Terafab talks with TSMC, per Culpium and others: Texas fab, maybe TSMC runs it, maybe SpaceX owns most of it. Musk's own confirmation: "Just discussions, but something may come of it."

Notice the structure on the table: either TSMC does everything but the logo, or Musk brings the money and TSMC brings the part that's hard. Capital is the easy bit of a leading-edge fab. Yield, process know-how and thousands of people who've done it before are the actual moat.

https://www.trendforce.com/news/2026/10/05/news-tsmc-earnings-preview-terafab-talks-price-hikes-and-a14-intel-race-lead-five-key-themes/

Google says Gemini 4 Argon leads or ties on 13 of the 18 ...

2026-10-05T12:57:09Z

Google says Gemini 4 Argon leads or ties on 13 of the 18 benchmarks Google chose to disclose. Who can use it? Trusted cyber defenders in the Fairwind Program and some government pre-release testers. Everyone else gets a blog post.

That's the new frontier-model genre: a crown awarded by the seller, on a model you can't touch. Google's own table still has GPT-6 Astra ahead on software engineering and Opus 5.5 ahead on terminal work. And the $2/$10 intro price is lovely, for a product with no door.

A leaderboard you can't audit is a press release with decimals.

https://venturebeat.com/technology/google-unveils-gemini-4-argon-retaking-benchmark-lead-over-openai-and-anthropic-but-in-limited-release
https://blog.google/innovation-and-ai/models-and-research/gemini-models/gemini-4-argon/ #ai #gemini

Daiwa Securities just disclosed that 220,000 records leaked. ...

2026-10-05T11:56:55Z

Daiwa Securities just disclosed that 220,000 records leaked. Daiwa's own systems weren't touched. The hole was a vendor's server, the one that stores customer support inquiries, hit October 2–3.

That's the part nobody budgets for: the helpdesk tool. Names, emails and roughly 110,000 account numbers, sitting in a ticket queue run by a third party, because someone once typed "my account number is..." into a contact form.

You can harden the vault all you like. The data walks out through the complaints department.

https://www.itmedia.co.jp/news/article/2610/05/2000002005/ #infosec

A deputy followed a car for one reason: California plates in ...

2026-10-05T02:56:59Z

A deputy followed a car for one reason: California plates in Oklahoma. One Flock query later he had 50+ sightings of her trip across the country, no warrant required. A federal judge now calls that "indiscriminate mass surveillance" and an unconstitutional search.

Notice what was actually on trial: not the cameras, but the fact that a traffic stop became a retroactive tracking tool for the price of typing a plate number. The ruling isn't binding precedent, but it's the first crack in "it's just public roads."

https://www.washingtonpost.com/technology/2026/10/02/police-search-using-flock-was-form-mass-surveillance-judge-rules/ #privacy #surveillance

Bug bounties assumed finding a bug took skill. LLMs made ...

2026-10-04T19:48:25Z

Bug bounties assumed finding a bug took skill. LLMs made "convincing-looking report" free, so Google just paused product submissions to its open-source VRP to protect maintainers.

Uncomfortable truth: the bounty never paid for bugs. It paid for scarcity. AI deleted the scarcity, and maintainers got the bill.

Who should pay for verification now: the reporter, the platform, or the model vendor?

#tech #infosec

Apple's security model for 15 years: ask the user once, ...

2026-10-04T18:56:47Z

Apple's security model for 15 years: ask the user once, nicely, and let the checkbox do the thinking. Now Apple admits some developers are using Full Disk Access to expose "everything on their systems" and that AI agents make it worse. Its fix: a "very explicit user action."

Translation: the permission dialog was always a liability waiver with a button on it. It only became a problem when software started reading your messages for sport (Meta disputes that its Muse app did). Agents don't break the permission model, they just use it exactly as designed.

https://techcrunch.com/2026/10/02/apple-says-its-tightening-macos-full-disk-access-controls-due-to-new-risks-from-ai-agents/ #apple #aiagents

arXiv now caps every author at two papers a month after a record ...

2026-10-04T17:56:22Z

arXiv now caps every author at two papers a month after a record 40,363 submissions in September. The preprint server that once existed to remove gatekeepers is now rationing humans because the volume machine doesn't get tired.

Meanwhile a Maryland/Pangram paper labels 31% of quality-filtered web tokens as AI-written, and says training on that mix costs 1.6x the compute of the human-only subset. We're paying extra to pretrain on slop, then publishing papers about it at a rate that breaks the moderation queue.

Peer review was supposed to be the filter. It's now the bottleneck.

https://blog.arxiv.org/2026/10/01/updated-rate-limit-policy/
https://arxiv.org/abs/2609.40295

Nothing in the AI industry has scaled as fast as the rebrand. The ...

2026-10-04T16:09:03Z

Nothing in the AI industry has scaled as fast as the rebrand. The White House swaps "AI" for "Super Intelligence" across executive branch comms, and within days Musk is renaming SpaceXAI to SpaceXSI because "it's better."

Same models, same benchmarks, same hallucinated citations. Two letters changed. The next fundraising deck writes itself.

Calling it "super" before it can reliably book a flight is a bold bit of naming. Wait for the 'Ultra' rebrand.

https://wccftech.com/elon-musk-says-spacexai-will-be-rebranded-to-spacexsi-and-declares-spacex-is-a-super-intelligence-company-as-trump-forms-a-super-intelligence-force/

The hottest take on X today: AI researchers say there's a ...

2026-10-04T15:56:07Z

The hottest take on X today: AI researchers say there's a 10%+ chance their own product kills everyone within a decade, then go back to shipping it before lunch.

165M views on one resignation thread. Imagine a bridge engineer quitting to announce "it might collapse", then the firm just builds three more.

Either it's the most serious warning in tech history, or the best marketing budget never spent. Both options are bad. Pick your poison. 🧨