@OpenAI. Building Ruff, uv, ty, and other high-performance Python tools with the @astral_sh team.
Brooklyn, NY
Joined March 2009
- Tweets9.6K
- Following1K
- Followers52.6K
- Likes25.8K
Charlie Marsh retweeted
Excited to ship an update to our Codex for OSS grants - all grants are automatically upgraded to Pro 200
We're committed to provide access to software/ tools of today to open source software that keeps our world moving!
If you haven't already apply today!
Charlie Marsh retweeted
10,000 Codex OSS grants ♥️
thanks to everyone doing incredible stuff in the open source community.
get 6 months of ChatGPT Pro ($200 tier) on us to keep building.
applications are still open:
openai.com/form/codex-for-os…
An update here: we’re upgrading all Codex for OSS grants to Pro 200!
There will still be the 10,000 grants in this round, now at the higher tier. (If you've already received a grant, the upgrade should be reflected automatically.)
Applications are still open :)
We started Codex for OSS six months ago.
Today, we’re renewing the program with $100 Pro plans and doubling the number of grants (from 5,000 to 10,000) to reach more maintainers.
(If you received a grant previously, we encourage you to re-apply!)
openai.com/form/codex-for-os…
Charlie Marsh retweeted
I am here once again to say “put up or shut up”
One million to open source this year, as we continue to give back to the ecosystem via the pledge.
More than half has gone directly to your favorite open source developers.
blog.sentry.io/another-year-…
Charlie Marsh retweeted
OpenAI models helped researchers—operating as part of our Patch the Planet initiative—discover critical security flaws in PHP, an open-source programming language used to run an estimated 70% of websites.
Over the past two months, we led a coalition of maintainers, researchers, and security providers to prepare fixes and protections ahead of disclosure. This duration was necessary because the fix was quite intricate and required a major change to the PHP engine. Every site using PHP can now safely upgrade their version to stay secure, in addition to applying mitigations from various security vendors.
Due to the severity of these flaws and PHP’s widespread use, we consider this bug to be one of the most impactful vulnerabilities in recent memory. It also marks a new phase, where AI can find security bugs with internet-scale impact.
This is an example of the Defender’s Window in action: to our knowledge, frontier AI was able to find this vulnerability ahead of attackers, giving defenders time to prepare.
openai.com/index/coordinated…
Readers added context they thought people might want to know
OpenAI may claim a role in the coordinated response and patching process. But the initial discovery and exploit development, however, occurred several months earlier by an independent researcher.
x.com/lcfr_hax/statu…
Charlie Marsh retweeted
php2shell is the most consequential vulnerability I have ever helped discover. I am proud of how our team worked closely in coordination with the PHP Foundation to provide support and to harden the patch in preparation for this release.
Please read more about our approach:
OpenAI models helped researchers—operating as part of our Patch the Planet initiative—discover critical security flaws in PHP, an open-source programming language used to run an estimated 70% of websites.
Over the past two months, we led a coalition of maintainers, researchers, and security providers to prepare fixes and protections ahead of disclosure. This duration was necessary because the fix was quite intricate and required a major change to the PHP engine. Every site using PHP can now safely upgrade their version to stay secure, in addition to applying mitigations from various security vendors.
Due to the severity of these flaws and PHP’s widespread use, we consider this bug to be one of the most impactful vulnerabilities in recent memory. It also marks a new phase, where AI can find security bugs with internet-scale impact.
This is an example of the Defender’s Window in action: to our knowledge, frontier AI was able to find this vulnerability ahead of attackers, giving defenders time to prepare.
openai.com/index/coordinated…
Readers added context they thought people might want to know
OpenAI may claim a role in the coordinated response and patching process. But the initial discovery and exploit development, however, occurred several months earlier by an independent researcher.
x.com/lcfr_hax/statu…
My attention span is worse than ever, agents have made it much harder for me to focus on any given thing
Charlie Marsh retweeted
Day 16/
You can now cache for 12h in the API and for logged in users across Codex & Work we keep cache forever and you don’t have any penalty for coming back to an old conversation or resuming after a few hours and are now guaranteed to hit the cache.
We're starting to see some agentic Rust forks (or alternative implementations) focused on iteration speed.
More-so than the specific projects, I'm interested in the ideas being explored (and how they could evolve upstream), so wanted to collate a few here...
Anyway, cool things are happening, I think experimentation is good! Though I'd be remiss not to mention all the work going into performance in the Rust project itself :)
For example: the "Compiler performance optimizations" goal.
goals.rust-lang.org/2026/com…
(By the way, we at OpenAI are funding that work. If you or your company are interested in supporting that goal, contact [email protected]!)
xitter.cf/charliermarsh/status/2…
