I *strongly* believe that automated systems/bots impersonating people is a form of fraud. The only acceptable use-case is theming a personally-deployed system that only interacts with the deployer, e.g. Jarvis.
We believe voice is the most natural way to interact with intelligence, so we created Dessa, the most authentic full-duplex speech model ever built. Talking with it feels like talking with a person…full of emotion, nuance, pauses, and a natural cadence.
block.xyz/dessa
fauve retweeted
Crypto has two years before the US government will hunt us down, target us, jail us and even kill us. Before the evil eye turns its cold gaze towards the people building a free anonymous p2p future.
Why?
The global order is disintegrating. The US people will see a drop in their living standard. This will breed resentment and radicalization in politics. Crypto will become the easiest scapegoat for the incoming democrat government in two years. There will be intense lawfare the likes we have never seen before. This will radicalize crypto and be the start of a new crypto wars which we will win.
Change is not gradual but sudden. Things compound & accelerate.
Lenin said there are decades where weeks happens, and weeks when decades happen. We are entering an inflection point when the political, economic, and technological order will change faster and faster.
The next two years will define the future of anonymity, free speech and sovereignty.
𝗚𝗲𝗼𝗽𝗼𝗹𝗶𝘁𝗶𝗰𝗮𝗹 𝗦𝗲𝗶𝘀𝗺𝗶𝗰 𝗦𝗵𝗶𝗳𝘁𝘀
The US offers security to rich arab oil states in exchange for them backing the US dollar. This arrangement is called the petrodollar system. It is why the dollar is the most powerful currency in the world.
The Iran war has been a disaster for the US. It has been unable to protect its bases and is forced to move out of the middle east. It is locked in an unwinnable conflict. The US cannot guarantee protection for its arab friends. This will severely harm the petrodollar system. These costs won't be passed onto elites but to common working people in the US.
Saudi, Turkey, Pakistan and Saudi are forming a confederation to guarantee their own security - a signal of the failing US led order. Their plans include extensive transport and energy networks which bypass and sideline Israel. Israel which is a western colony in the middle east has become a pariah state even by formerly close US allies. Saudi asked the US for help with the Houthis in Yemen but the US refused.
Since the US is unable to guarantee security, China will fill the vacuum. China is friends with Iran and can get security guarantees from Iran.
At home, the economic consequences of declining American influence will not be distributed equally. The costs of geopolitical upheaval and economic restructuring will fall on ordinary people. Political priorities will shift to economic insecurity, inequality, and the environment. The tech elite might retain substantial resources and influence, but the broader population will face a difficult economy.
These pressures will breed resentment and radicalize US politics with economically populist democrats like Bernie Sanders and Alexandria Ocasio-Cortez coming to power in the 2028 elections likely winning the presidency.
Crypto will be the easiest and most convenient scapegoat for populist democrat rhetoric. Key core issues will be economy and environment. Crypto is unpopular with a perception of being linked to fraud, extraction, tax avoidance, speculation and Trump. All easy targets for populist democrat politicians seeking power.
The existing lawfare operation against cypherpunk agorists will intensify to levels we have never seen before.
I have been targeted by this. Deported from 2 countries this year, detained by police and questioned in 4 other countries and taken to a room by a police squad asked to sign a document without being able to talk with my lawyer. I'm not unique either. The most radical in crypto suddenly find themselves "under investigation" or charged with money laundering: @raythewarchief @rogerkver @rstormsf
And this lawfare won't be limited to just cypherpunks and cryptobros but more widely directed against rich tech elites. For this reason they have been investing in network states - making deals with foreign governments to have their own enclaves to operate from. The risk from western states is simply becoming too great and they are diversifying out of the US in anticipation of a regulatory & legal war.
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
PHP 8.4.27 released - 89 fixes in 30 components, including security fixes (CVE-2026-109618, CVE-2026-109619).
Changelog + downloads: php-net.pro/news/php-8-4-27-…
fauve retweeted
Full details of a remotely exploitable vulnerability in the core engine of *all* PHP versions will be released tomorrow, October 21st. If your organization has internet facing PHP applications then you need to be ready to patch the minute the update is released or *strongly* consider taking the application offline until you can:
php.net/index.php#2026-10-20…
🚨 PHP warns of two critical vulnerabilities as emergency patches arrive tomorrow
The PHP security team will release updates on October 21 at 14:00 UTC for two vulnerabilities, each rated 9.2 under CVSS v4.0.
⠀
Security researchers identified the flaws as CVE-2026-109618 and CVE-2026-109619 and described them as remote code execution vulnerabilities reportedly affecting PHP versions 5 through 8.
PHP has not yet confirmed the affected versions, exploitation requirements or fixed releases.
⠀
The vulnerabilities were reportedly leaked before their planned disclosure. Researchers said they have not observed active exploitation, while PHP warned it may release the patches early if technical details become public or exploitation is detected.
⠀
Administrators should identify PHP installations now and prepare to apply the updates as soon as they become available.
fauve retweeted
Yeah this is bad. An unauthenticated remote-code-execution exploit for *any* PHP version out there, with simple scripts. You need to patch ASAP.
Or even take stuff offline in the meantime. Looks like POCs are out there already.
Doomsday scenario for PHP 🤯
1. Attention is scarce. 2. We're building an agentic world, next.
I spent 48 hours in SF hanging out with billionaires, data labs and AI founders and execs running $1B to $100B companies.
My observations:
1. Sooo MANY stories of data brokers making like $2M a WEEK selling company data to labs. I can't tell if it's the beginning or a bubble, and I kept wondering which niches are left. Digging into it actively.
2. At dinner, someone asked the table, "If a new model drops next month, does your company get better or worse?" HALF the table went quiet! I think that's the best question to ask about any AI startup right now.
3. The bar people talk about now is hitting $1B in revenue in 12 months (I guess that's the new unicorn?). What I didn't hear much about is retention. AI revenue can come in fast and leave fast, and I think we're going to see a lot of stories of AI companies with huge revenue and terrible retention.
4. It's pretty clear we're living through the reinvention of the computer. The model is the CPU, the harness is the operating system, and skills and plugins are the apps. Thinking about it that way makes it easier to see where the whitespace is.
5. We're maybe 12 months from an agent that can watch you work for a week and then do your job without any instructions. The screen recording plus agent memory plus local model combination makes this possible right now.
6. Agent harnesses feel like the new GPT wrappers, in a good way, especially vertical ones. The best teams I talked to treat the model as swappable. One founder walked me through routing different models to different jobs: one for taste and visuals, a cheaper one for the everyday stuff, another for text.
They use prompts they can move across models over fine-tuning, and A/B test the output on what users actually do with it: do they edit it, export it, share it? A vertical harness is basically four things: the connectors for that industry's data, evals written by people who know the work, rules for what the agent can and can't touch, and a clean screen for a human to review. The model is maybe 20% of it.
7. There's a lot of reverse engineering going on/cloning going on more than I've ever seen. People are decompiling software and rebuilding it with agents, and someone showed a suite of like 10 apps that are worth $5B+ each all that he cloned open source. Me and everyone are still thinking through what it means when software gets this easy to copy.
8. My guess is the value moves to data. If the software can be rebuilt quickly, what's worth paying for in a legacy SaaS company is the years of customer data and workflows inside it. Some SaaS companies are secretly data companies.
Gets me thinking about how do you truly value data for this saas companies? Like if we were buying these dying saas companies at 2x ARR before (as example), maybe there is a better metric. Idk, just thinking out loud here.
9. It feels like a good chunk of legacy software won't make it to the agentic era, especially anything built around people clicking through a lot of screens.
10. Every company I talked to wants to pipe its internal data into one place and expose it to agents through MCP. Then they look at the data and realize it's a mess: five versions of the same customer, old Slack channels, PDFs nobody can search. Cleaning that up feels like a big consulting opportunity!
11. A lot of founders are building the basic building blocks for agents: APIs, data layers and tools. Some of the companies I saw barely have a UI because the main user is an agent. I really believe the startups that build primitives to this agentic era will do extremely well. Building blocks is the best way to think about it.
12. Labs can get plenty of training data, but it's harder to get real examples of agents failing inside companies. Whoever has those logs has something valuable.
13. Someone running a big consumer company told me the next fight is over memory. The model that remembers the most about you wins, and the smartest model matters less than people think.
14. Physical AI came up a lot. Astra I think was the first model that got people into AI can actually do CAD, and I think a lot of people are thinking what does vibe manufacturing really look like. The line I keep thinking about came from a robotics founder: the hardest problems in AI are deployment problems now, not research problems. Their robots work on their own, call a human when they get stuck, and every one of those calls becomes training data.
15. Cybersecurity companies are having a moment and are actually cool companies to build now, especially the ones that clean up after a breach. Every agent with access to your systems is a new door into your company, and a lot of those doors were left open.
16. Some startups are worth more dead than alive now. A shutdown company with 5 years of Slack, email and code can get paid for licensing all of it. I wouldn't be surprised if founders start factoring that into when they shut down.
17. People are starting to talk about monetizing the agent web. It feels really early, but when the most popular user of the internet is an agent, what startups should you be building?
18. I think agent insurance is coming. Once an agent makes an expensive mistake, insurers will want audits before they cover anyone.
19. Several people said the hire they want most is someone with taste who can write evals. The models are getting good at generating ideas, so the hard part is judging which ones are good.
20. New trend I observed: startup raises VC, uses venture dollars to become a creator, startup fails, founder falls back on being a full-time creator and incubates other products bootstrapped.
21. Getting SIGNIFICANT distribution is HARD right now. Founders are sponsoring buses, buying billboards like crazy and throwing parties with famous DJs to get noticed. Kinda feels dotcom era in that sense.
Attention is what's scarce! The growth guy going viral sharing his UGC strategy from Wispr Flow is a good example. It's the sauce everyone wants, and I truly believe there are probably only 50 people on the planet who know how to scale these types of businesses efficiently in this era.
Always good to get that dose of SF. I felt sooo lucky to have such an incredible trip during such an incredible time in building businesses. Surreal in so many ways.
Happy to be home and locked in.
Until next time!
All this reverse engineering and cracking of software/video games because of AI has me very worried and I believe will lead to fewer freedoms, not more.
Companies now have zero incentive to ship you a binary without extreme DRM and hardware level anti-consumer sniffers and telemetry.
Reverse engineering copyright was always a very grey area because of how difficult and painstaking it was. Now with AI, one person can crack a game in weeks, not years and years needing a whole team.
This will likely lead to companies justifying ending client based software delivery in favor of streaming based cloud services and games.
At its very worst, consumer hardware and GPUs with local AI may get classified as “pirating machines” that become difficult or illegal to own because of how copyright and ownership laws get re-written around AI.
It’s not “you will own nothing and be happy” it’s “you will stream everything off a server and be complacent”.
I was just thinking to myself how incredible the energy and attention was that these two crypto influencers built around the NT launch.
It was a perfect convergence of crypto breaking out and becoming a globally recognized alternative currency system...
🚨 PTSD Trigger Warning
5 years ago today, the first @NeoTokyoCode Identity upload phase was announced
Riddle hunters had survived the speakeasies
Now the chosen were called to the Citadel
🫶
Power selects for a specific personality type, and it is not yours.
F.A. Hayek spelled this out in 1944. In a centrally planned system, the people who rise are not the most competent or the most honest. They are the most willing to exercise force against strangers, the most comfortable with contradiction, and the most skilled at coalition-building through favors rather than merit. Government filters for the bad ones from the start.
The mechanism is straightforward. Political power means controlling resources you did not earn. Capturing that control requires outcompeting rivals who have no ethical constraints. A principled candidate refuses to promise contradictory things to different voter blocs. An unprincipled one does it without blinking. The unprincipled one wins. Repeat this selection pressure across hundreds of electoral cycles and you get the U.S. Congress in 2026: a body where the average member has held office for over a decade, raised millions from interested parties, and delivered almost nothing measurable to the people who voted for them.
Bureaucracy compounds the problem. Once entrenched, state agencies attract people who want authority without accountability. You cannot fire most of them. The FDA, the TSA, the Federal Reserve all function this way, staffed by individuals whose career advancement depends on expanding the agency's reach, never on serving you efficiently.




















