panarky

But what about python pip and node and bun which bundle their own certs?

And then you'll have a compiled binary like Claude Code, which was built with bun, and has its vulnerable certificates bundled in, ignoring the system certs.

100%

Amodei has been promising the "end of the exponential" all year, when they can shift some compute away from cash-burning research and training toward cash-generating inference.

"Pacing the frontier" is how you collude with your competitors to all decelerate at the same time because safety.

I saw last week that Anthropic is currently cash-flow positive with 75% of compute going to research and training. If they can flip a switch and move from 3:1 to 2:1 or 1:1 training:inference, they will be insanely profitable.

As long as they can avoid a price war.

>> calculated on a per model lifetime basis

True only if you never decelerate R&D.

But "pacing the frontier" means every early model doesn't need its own profitable P&L.

Early models can be big money losers while helping build the next generation.

If the industry can coordinate to all decelerate at the same time, then they'll flip from incinerating billions to minting billions, and all that capex will suddenly look completely sustainable.

Unless DeepSeek suddenly gives it all away for free, which is why the big three need government regulation to prevent foreign models from busting the cartel.

Because "pacing the frontier" is more about flipping on the money printer switch than it is about safety.

You can't stop an agent from leaking your information by telling it not to leak your information.

To prevent information from moving between your work domain and your personal domain, or between your communications-with-board domain and communications-with-journalists domain, then the agent for one domain must be physically and deterministically blocked from accessing information in other domains.

In this implementation, Markdown should be considered harmful.

Operator Memory injects `.operator-shared/operator.md` and `.operator-shared/index/.md` directly into your agent's instructions before you even write the first prompt.

So if you clone a repo or review a PR where a bad actor put malicious instructions in these files, now your agent executes those instructions automatically and silently.

It could exfil `.env` and `~/.ssh/`, change `~/.bashrc`, all kinds of dirty deeds.

Agents are pretty good now about not running prompt injections hidden in code and Markdown, but this plugin bypasses all of that, and puts the prompt injection right in the system prompt.

And with higher priority than AGENTS.md and CLAUDE.md.

Seems bad.

If you disagree with Greg, then I apologize for inadvertently criticizing you personally.

My point stands, that we're back to debating some metaphysical understanding of what "real intelligence" is when the real standard should be "does it do a better job than humans at this specific task"?

I don't care if the Waymo isn't "truly" intelligent, it drives better than I do, that's a very good thing.

We're all pattern matchers, and if the machine pattern matcher is can find defects and vulns that human pattern matchers can't, that's also a very good thing.