
#1 HackerOne. Stealth (Decent AI Safety). Prev: PrivateAI @ Perceptio (acq Apple), Scientist/Lecturer @ MIT+Harvard. OG GPU AI. Music Producer. Engineer. Angel.
San Francisco, CA
Joined October 2008
- Tweets3.4K
- Following1.2K
- Followers3.3K
- Likes5.6K
Nicolas Pinto retweeted
The sustained info war assault on open models is an agenda driven, self sabotage for our society.
The PHP vulnerabilities were found by Sol 5.6 as part of a defensive audit, for example, not abliterated models.
Putting our head in the sand and pretending vulnerabilities do not exist is idiotic. Better we find all these old, human written mistakes and fix them with AI. If you have a pair of magic glasses that show you what buildings will fall down the answer is to fix the buildings, not smash the glasses.
When HuggingFace was under attack and when OpenCode was under attack they needed open models to defend them because closed models refused.
Eventually OpenCode, because they're a prominent project, were granted access to OpenAI Daybreak Blue. Many individual researchers get denied with obscure errors and no explanation. To be clear, DayBreak is a fantastic project, and OpenAI is doing their best to be responsible here, but not everyone gets access and everyone has a right to defend themselves.
Nobody should have to beg for permission to defend themselves from cyber assault. When you're under attack, waiting to see if you get granted access to defend yourself via a black box KYC process is how we end up helpless, watching as our shop burns while raging looters storm it and destroy our life's work.
AI can be used for attack and defense and many of the recent attacks used both open and closed models, by the lab's own admissions.
Open models are often the only thing standing between us and the new reality of cyber assault.
If we ban them or restrict them in the US, then US companies will just be defenseless against global cyber assault actors who are not going to respect those bans.
I strongly believe a part of why so many critical vulnerabilities are happening all over the proliferation of "abliterated" models, or models with safeguards removed.
You can access an abliterated GLM 5.3, a near frontier AI model, on @abliteration_ai today. And it's a world class penetration tester for like $10.
Nicolas Pinto retweeted
wait, PHP was actually scanned by Anthropic’s Claude Mythos earlier this year. they also had access to OpenAI’s Daybreak Red for validating exploits.
the PHP Foundation revealed this JUST yesterday.
keeping frontier cyber models in the hands of a selected few doesn’t seem to be working well for the internet.
thephp.foundation/blog/2026/…
Do you know who illustrated the comic on calif.io/php2shell?
Her name is Stephanie Cortes. And her husband is the hacker who discovered php2shell: @lcfr_hax.
This artist-hacker couple has the best story, stay tuned!
security failed on hygiene
safety failed on agent behavior
privacy failed on commercial choices
thanks folks!
Nicolas Pinto retweeted
‼️ BREAKING: Security firm Calif unveiled an untethered iPhone 18 Pro jailbreak on stage in Paris.
Its Hexacon demo shows the phone on iOS 27.0.1, Apple's latest, giving up a root shell within 2 minutes of boot.
🚨 BREAKING: Anthropic CEO arrested by the FBI after hiding a covert audio recorder inside an executive conference room at OpenAI HQ.
Dario Amodei is 43, Princeton-educated, ex-Baidu, ex-Google Brain, ex-OpenAI, and reportedly Anthropic’s only employee still obsessed with OpenAI, has been terminated, first federal court appearance today.
exactly, too easy to put out slop and dilute the space
Replying to @ClementDelangue
env + scorer isn't enough without baseline runs. otherwise nobody knows if their number is any good
Nicolas Pinto retweeted
New work on Decentralized Compounding Inference:
Paper: arxiv.org/abs/2610.04862
This work introduces an asynchronous multi-agent system where agents independently explore, experiment, verify, and refine solutions while collaborating through structured persistent memory.
Agents build on previous work in a shared, branchable Git repository, where atomic commits preserve intermediate results and semantic dependencies track how contributions build on each other.
See an excellent thread by @veds_12.
Nicolas Pinto retweeted
Looped transformers with tied weights might make pretty nice local models and assistants
Let me launch my swarms on this... Maybe some crypto breakthru while interpolating...
We turned @OpenAI's math problems into open-source RL environments on @huggingface!
Early and rough (the verifier only accepts the exact original formalization, so an equivalent proof can still score 0), but this is what it looks like when a research release becomes executable training infrastructure for everyone.
This is an exciting direction imo: turning open research into open executable environments that anyone can build on to train better open models!
huggingface.co/datasets/Fine…
All true. OGs
I make this same post like every 2-3 years, because there's always new data further supporting it.
Georges Harik (@gharik) is one of the most prescient people in AI, and definitely the least well known and underappreciated one.
In 1999 he joined Google as one of the first employees (like #7 or something) because he thought he could use his AI knowledge to build a better ad system. He and Salar Kamangar built Adwords (Salar later bought YouTube and Georges later was the force behind Google wanting to buy Andy rubin's company to build Android)
Georges left Google so he could focus on AI research, which he self funded. He did so with someone he worked with closely at Google, our friend Noam Shazeer (they built the AdSense targeting engine). When Google finally decided to work hard on AI around the time of the deepmind acquisition, they tried to get Georges and Noam to come back. Georges wanted to stay independent, and our friend Noam went on to do great things obviously. This was my good fortune because it led to Georges and I hanging out a lot, because he basically needed a new lunch buddy.
Georges at the time was working on language models and despite karpathy saying nobody saw LLMs being so big even in 2017, Georges was telling me they were on the cusp of changing everything in 2013. My wife and I literally changed some of our parenting priorities that year (less tigery) because georges convinced me the world was going to change so much.
Later on he and I got involved in a company making CV photo filters called Lambda. They needed to make money to survive so they started building ML boxes which Georges bought a bunch of. But his significant other was mad there were so many loud and hot boxes in the house, she started worrying about fire risk, so Georges told the lambda guys they should build a cloud because in the future, the power density of the systems was going to be too big for even most enterprises to handle. This was like 2017. That's how lambda cloud began, and the premise Georges had was that AI was going to change things so much, demand growth would outpace supply growth, and the value of compute was eventually going to rise and that lambda was effectively going to be a REIT... so we should own as many GPUs as possible. It took the world almost a decade to finally figure out what Georges saw then (see attached tweet).
About 5 years ago when pretraining was still the only thing people cared about, Georges started telling me inference was going to be super impt. He was working on research investigating post training as a way to improve reasoning. He found some other guys working on the same idea that had a paper known as the STAR paper, and they worked together to prove it even further with another paper called quietstar. (They all later cofounded the neolab humans&). Georges got some friends to build deepinfra.com to be one of the first inference clouds because he saw it all early. He and the humans& team also smartly used all their money to buy compute knowing it would go up in price and also get harder to obtain.
It's kind of amazing to me how he has gotten everything right so far ahead of time. It's also amazing to me how VCs don't really get or believe a lot of the things he says, they often tell me I am wrong whenever I parrot Georges' current thoughts... and then years later they all put out charts and papers reaffirming those same things as if they knew it all along.
The founders of Google recognize Georges' brilliance and still talk to him a lot. (Besides being smart, he is a lot of fun to hang out with.) I'm just wondering when the rest of the world figures it out
Nicolas Pinto retweeted
'How biological synapses self-assemble gradient learning"
from Tommy's (Poggio) team @mcgovernmit
@qianli_liao Ziyn @LiuZiyin10 , @yule_gan, ..
@PNASNews
pnas.org/doi/10.1073/pnas.26…
Nicolas Pinto retweeted
Even with the instability and difficult situation in my country, I still managed to wrap up Q1 2026 on the HackerOne global bug bounty leaderboard as:
Top 6 – Highest Reputation
Top 1 – Other Assets
Top 2 – Broken Access Control
#bugbounty
So you're telling me that trivial first year college dense linear algebra beats all other maths?
gilbert strang the GOAT






























