[02]
CLOUD CODES · 1D AGO
A three-person security team used an AI model, Claude, to chain four known bugs into a full compromise of OpenAI's internal codebase in under 72 hours, starting from a single uploaded image. The attack exploited an unpatched library on OpenAI's Discourse forum, hijacked an employee's single sign-on session, and used the connected Codex agent to open a pull request in OpenAI's private repository. The real story is that the economics of attack have shifted: the bugs were all known and fixable, but the scarce expertise to chain them is now cheaply available via AI.
→ Watch on YouTube
·
→ Full summary
[03]
AI ENGINEER · 1D AGO
vLLM's Mamba state cache had two silent bugs—decode-before-prefill scheduling and uint32 index overflow—that produced confident gibberish without errors. Both were uncovered by logprob comparison with HuggingFace transformers and memory pressure reproduction. The real story is that stateful inference systems can fail silently, requiring forensic logprob analysis and deep code inspection.
→ Watch on YouTube
·
→ Full summary
[04]
AI ENGINEER · 1D AGO
Small open-source models can match or beat frontier models on specific tasks at a fraction of the cost, but serving many of them efficiently requires a centralized queueing architecture rather than a top-down router. Superlinked's open-source cluster uses a gateway that parses requests into a shared queue, with workers pulling and batching themselves, achieving double the throughput and avoiding the routing bottleneck that limits GPU utilization to 20-30%. The key is that small models enable massive cost and latency savings, but only if you handle the infrastructure complexity of diverse runtimes and model adaptations.
→ Watch on YouTube
·
→ Full summary