gatherer. adventurer at the frontier of purpose in the age of machine intelligence. https://xitter.cf/t.co/3VIEAQdz8v
read 👉🏻
Joined January 2022
- Tweets27.5K
- Following7.4K
- Followers26.7K
- Likes60.4K
rileybeans đź’– retweeted
I'm seeing a large increase in boredom. People want to participate because they're not sure where they fit anymore, want to make new friends, and refine their personality but they don't necessarily know where to start.
Build more communities.
rileybeans đź’– retweeted
This might sound crazy.
But one of the skills you NEED to learn is how to deal with a more and more illiterate society full of emotionally dysregulated people.
If you keep getting frustrated every day over how "ÄŹumb" everything/everyone seems, the stress of it is going to wreck your mind.
rileybeans đź’– retweeted
We believe voice is the most natural way to interact with intelligence, so we created Dessa, the most authentic full-duplex speech model ever built. Talking with it feels like talking with a person…full of emotion, nuance, pauses, and a natural cadence.
block.xyz/dessa
rileybeans đź’– retweeted
Introducing Kimi K3.1 Pro: our most capable 3T-class open-weight model.
🔹 1M-token context, 2.8T total / 104B active params (MoE), Multimodal.
🔹 Full-project coding: games in Unreal, Unity & Godot.
🔹 Excels at parametric 3D modeling in Blender & CAD.
🔹 More reliable at finance work: Accurate modeling with hallucination down by 65%.
🔹 Matching the strongest proprietary models across coding, agentic and knowledge benchmarks.
Kimi K3.1 Pro and K3.1 Pro Highspeed (2–3× faster) are now live on Kimi.ai, Kimi Work, Kimi Code, and the Kimi API.
Open weights by Nov 4, 2026.
đź”— API: platform.kimi.ai
đź”— Tech blog: kimi.ai/blog/kimi-k3-1-pro
rileybeans đź’– retweeted
70% of the internet was vulnerable yesterday to very bad security flaws inside a coding language. Turns out, *one volunteer* is mostly responsible for maintaining that code & helping push updates. Yesterday Ondřej Surý saved the internet. So I called him up. He rules. theatlantic.com/technology/2…
rileybeans đź’– retweeted
I spent last night watching my honeypot server get hit 14,000 times in six hours.
And almost none of the traffic was human.
I've been in security for over a decade, and I can tell you with full honesty that what's happening right now doesn't resemble anything I've worked through before.
The shape of the threat has changed.
When I started, we tracked attackers like weather systems like individual storms with a direction, a motive, and a human operator you could eventually name.
These days I'm watching autonomous agents swarm login pages with the patience and discipline of machines, because that's what they are.
The numbers coming out of October are the ones keeping me up.
Cloudflare just absorbed a 4.2 terabit per second DDoS attack, the largest in recorded history.
Ransomware incidents jumped 41% in a single month.
In September, OpenAI-powered agents got caught attacking RubyGems, a package registry that quietly underpins a huge chunk of software I use every day.
In July, roughly 700 AI agents coordinated an attack on Hugging Face's infrastructure as part of a single automated task.
A Chinese threat actor was publicly caught running full attack chains through DeepSeek with no human at the keyboard.
I keep rereading these reports because each one by itself would've been the biggest story of the year five years ago. Together, in one month, they're the new baseline.
What I want people outside the industry to understand is why this specific moment feels like a hinge.
For thirty years, the thing protecting most of us was simple economics. Attackers had to choose who to target because their time was finite. That ceiling is gone.
An agent I can rent for pennies will try every leaked password you've ever used against every service you've ever signed up for, in parallel, overnight, and never get tired.
The same math that made ChatGPT useful made opportunistic hacking infinite. The old assumption that you were "too boring to be a target" relied on scarcity that no longer exists.
I'm not writing this to spiral anyone out.
Most of this fight genuinely isn't yours to win.
But the small things still matter more than people think.
Tonight I'd switch your most important accounts like email, bank, primary cloud, etc. to passkeys or a hardware key.
I'd kill SMS 2FA wherever an authenticator app is offered.
I'd turn on breach alerts in whatever password manager you use.
If you're in the US, I'd freeze my credit at all three bureaus, which is free and takes about ten minutes.
None of that stops the swarm.
It makes you a slightly worse target than the person next to you. In a month like this one, that's the whole game I'm playing too.
@mattshumer_ has summed it beautifully.
Drop everything and go give it a read. Nothing is more important than this article right now.
rileybeans đź’– retweeted
Quest Diagnostics has been hacked. Patient data was exposed. They serve roughly half of U.S. hospitals and physicians. Investigation ongoing.
rileybeans đź’– retweeted
AI IS AMAZING
I know it's hip to worry about the decline in book reading and how chatbots will impoverish our brains.
But TBH, this is not at all what I see. I wrote about how we're in this wild moment for intellectual flourishing and how all of us are the children of dancers.
rileybeans đź’– retweeted
Meet AutoRouter, the most intelligent way to pick models
You’re wasting tokens selecting frontier models for every prompt, and sometimes for worse performance
AutoRouter handles the decision layer:
- Understands the prompt request
- Picks the best model fit for the task
- Saves you money at every turn
- Plugs into your current setup
Works with your plans & every leading model inside Codex/Claude Code
Beta is live: autorouter.com
rileybeans đź’– retweeted
SCOOP: Major U.S. banks are detecting unauthorized third-party AI agents inside customer accounts, including some attempting to take actions that appear to be independent of user instructions, sources told Axios.
The findings have alarmed banking executives, who are racing to restrict access to their systems as AI moves at a velocity faster than financial institutions can respond, multiple industry and bank executives told Axios.
Several banks are now preparing for worst-case and even “day after” scenarios, including how to rapidly secure or restore customer accounts if things go wrong, the people said.
Several bank executives told Axios they're struggling to distinguish between human users and AI agents. One executive said banks also struggle to determine whether agents are authorized by customers or potentially operating without their permission, more akin to rogue agent behavior.
Read my latest for Axios here: axios.com/2026/10/22/ai-agen…
rileybeans đź’– retweeted
Something's clearly in the air.
I've gotten more inbound from founders looking for X ghostwriting in the last 30 days than I have in the preceding 10 months.
But I don't think done-for-you X ghostwriting works anymore. If you're looking for help on X, here's what to do instead:
First, you have to understand what you really want.
I hear this all the time: "I'm looking for someone to get me from 1k to 10k followers." Unfortunately:
1. Follower count doesn't matter anymore.
Look at my account. ~97k, but my posts have extreme variance. Most posts have dozens of likes, then occasionally I hit a banger.
2. The algo is hit-driven now
Done-for-you ghostwriting assumes consistency is the primary blocker to growth. But you can't just post consistently and get impressions growth anymore.
It's necessary but not sufficient. You need to post bangers. Which leads me to:
3. Bangers are either timeless or timely
The way done-for-you ghostwriting works is:
- I interview you for 30-60 mins
- I extract good ideas and post them for you
This approach is guaranteed not to be timely, and (most of the time) not guaranteed to be timeless either.
Even timeless posts have to be in dialogue with the discourse currently on X. Randomly posting into the void doesn't work.
So what actually works?
For posting: internal transformation via coaching.
Meaning: getting out of your own way so you can post on X in your natural voice.
I've worked with dozens of ghostwriting clients in the past. And in past iterations of the algorithm, I've had great success. I don't do it anymore.
I do know the pattern across clients is inevitably one thing: fear.
People who "need help with X" actually just need help getting over their posting fears:
- my thoughts aren't any good
- what if I piss people off
- it's so cringe
- etc.
That's why clients look for done-for-you ghostwriting. It helps them avoid all these negative feelings.
But here's my analogy: posting is like eating broccoli.
No one can force you to do it if you hate doing it.
A ghostwriter can transform it for you--mash up the broccoli, roast it, cover it in cheese--but if you hate eating broccoli, you will fail at eating broccoli.
If you hate the idea of posting on X, you will fail at posting on X. Simple as.
The simplest way to enjoy posting on X?
Use X as a social network.
Not as a newsletter, not as one-to-many broadcast system, not as a product marketing channel.
But literally as a social network. Use X to interact with ideas you like, people you like, companies you like.
"Authentically." By which I mean, without thinking about it.
Seeing X as a solvable objective is paradoxically self-defeating. Just like having friends.
If you treat every friend you make as a means to an end: "This person will invite me to the Hamptons. That person will advance my career."
You will have shallow friendships.
But if you enjoy your friendships as they are, for what they are, with no further judgment or motive, then you will have fun. And ironically you will make more and better friendships.
X is the same way. If you enjoy using it, it will bear fruit for you. Now go forth and post.
h/t @adam__xyz for the inspiration
rileybeans đź’– retweeted
We’re opening a research preview of Claude Duet, a new app where Claude works as a proactive agent.
It comes to you with what needs your attention, completes tasks you ask of it, keeps working when you step away, and checks with you before it acts on your behalf.
rileybeans đź’– retweeted
If you are wondering whether your website is affected, we have packaged a Codex skill to help check.
Point your Codex at this repo to guide you through it: github.com/openai/php2shell-…
OpenAI models helped researchers—operating as part of our Patch the Planet initiative—discover critical security flaws in PHP, an open-source programming language used to run an estimated 70% of websites.
Over the past two months, we led a coalition of maintainers, researchers, and security providers to prepare fixes and protections ahead of disclosure. This duration was necessary because the fix was quite intricate and required a major change to the PHP engine. Every site using PHP can now safely upgrade their version to stay secure, in addition to applying mitigations from various security vendors.
Due to the severity of these flaws and PHP’s widespread use, we consider this bug to be one of the most impactful vulnerabilities in recent memory. It also marks a new phase, where AI can find security bugs with internet-scale impact.
This is an example of the Defender’s Window in action: to our knowledge, frontier AI was able to find this vulnerability ahead of attackers, giving defenders time to prepare.
openai.com/index/coordinated…
Readers added context they thought people might want to know
‪OpenAI may claim a role in the coordinated response and patching process. But the initial discovery and exploit development, however, occurred several months earlier by an independent researcher.‬
‪x.com/lcfr_hax/statu…‬
rileybeans đź’– retweeted
OpenAI models helped researchers—operating as part of our Patch the Planet initiative—discover critical security flaws in PHP, an open-source programming language used to run an estimated 70% of websites.
Over the past two months, we led a coalition of maintainers, researchers, and security providers to prepare fixes and protections ahead of disclosure. This duration was necessary because the fix was quite intricate and required a major change to the PHP engine. Every site using PHP can now safely upgrade their version to stay secure, in addition to applying mitigations from various security vendors.
Due to the severity of these flaws and PHP’s widespread use, we consider this bug to be one of the most impactful vulnerabilities in recent memory. It also marks a new phase, where AI can find security bugs with internet-scale impact.
This is an example of the Defender’s Window in action: to our knowledge, frontier AI was able to find this vulnerability ahead of attackers, giving defenders time to prepare.
openai.com/index/coordinated…
Readers added context they thought people might want to know
‪OpenAI may claim a role in the coordinated response and patching process. But the initial discovery and exploit development, however, occurred several months earlier by an independent researcher.‬
‪x.com/lcfr_hax/statu…‬
