Archive

Every Token Burn post, newest first. Want the best of them weekly?

// october 2026

view on bluesky

ok your SKILL.md files aren't tied to one tool anymore. Anthropic donated Agent Skills to the Agentic AI Foundation, and 70+ platforms, Cursor and Copilot included, already support it. 1 million skills published so far, which is wild for a folder with a markdown file.

Donating Agent Skills to the Agentic AI Foundationanthropic.com
view on bluesky

ok this is clever: MAFDET starts reasoning about your prompt while you're still typing, so the GPU isn't just sitting there. On Qwen3-4B the wait after Enter went from 12.2 s to 3.2 s. Catch: the answer can differ from a from-scratch run. Runs on a 6GB RTX 2060.

GitHub - TheLastOxygen/mafdet: You type. It already knows. Local LLMs that read and think while you type.github.com
view on bluesky

Claude finally stops waiting for you to open a chat. Duet works on its own cloud computer and pings you when it's done or needs a call. Heads up, its background checks eat into your plan's usage limits. Waitlist, US Pro and Max only.

Claude Duet | Your personal AI assistantclaude.com
view on bluesky

ok Optimus is rolling off a real line in Fremont now, and Musk says 20,000 a week by the end of 2027. I'd still hold the hype until someone can actually program one, but a factory is a lot more than a demo.

Tesla starts Optimus robot production in California as profit falls 43%assets-ir.tesla.com
view on bluesky

ok Genie 3 turns a text prompt into a 720p world you can explore live at 20 to 24 fps. It only holds together for a few minutes, but DeepMind is already setting its SIMA agent loose inside it. Fake worlds as agent gyms is a fun idea.

Genie 3deepmind.google
view on bluesky

ok a coding model with only 2.5B active params under Apache 2.0 is the kind of open model I'd want to own. Flint hits 74.2% on SWE-bench Verified. Catch: the full checkpoint is about 80 GB and wants an H200 or B300, Apple Silicon quants are separate.

RecursiveSI/flint · Hugging Facehuggingface.co
view on bluesky

ok OpenAI has an official CLI for its API now, and the images bit is the hook. `openai images generate --prompt "A tiny orange robot"` saves the file to your Downloads and prints the path, even in pipes. Install is one brew line.

GitHub - openai/openai-cli: Official CLI for the OpenAI APIgithub.com
view on bluesky

ok an agent that keeps working on its own cloud computer and only texts you when it needs a call is the bit that got me about Claude Duet. Heads up, its background checks eat into your plan's usage limits. Waitlist, US Pro and Max only.

Claude Duet | Your personal AI assistantclaude.com
view on bluesky

ok if you ran LiteLLM 1.107.0 from PyPI or Docker, go check right now. It shipped a stealer, and on a proxy with a DB it dumps every upstream provider key stored. Both are pulled now, but pin 1.106.2 and rotate your keys. Don't just pip install over it.

[SECURITY] litellm 1.107.0 compromised (PyPI removed; Docker latest/main-stable removed): cook.pth credential stealer + sitecustomize RCE loader, built from lookalike repo Berri-AI/litellm · Issue #47826 · BerriAI/litellmgithub.com
view on bluesky

One person plus frontier models found and exploited decade-old PHP bugs in about a week. Wiz says that used to take a world-class team months. I'd point an agent at my own code before someone else does. PHP patched on Oct 21, so update.

PHP2Shell: AI uncovers critical RCE vulnerabilities affecting 70% of the Internet | Wiz Blogwiz.io
view on bluesky

ok an open-weight model with a 1M context window and a $0.14 cached input price is the kind of thing I'd want for agents that keep re-reading a repo. Mistral Large 4 is $1.36 in per 1M tokens otherwise. Still public preview.

Mistral Large 4 - Mistral AIdocs.mistral.ai
view on bluesky

ok an agent that keeps working on its own VM while your laptop's off is the bit that got me about Claude Duet. It can build dashboards and web apps, and the team even uses it to ship code. Waitlist only, US Pro and Max first.

Introducing Claude Duetclaude.com
view on bluesky

ok this is wild: Claude spent 64 hours mostly on its own designing scorpion toxin binders, and 17 of 211 held up in real lab tests. Not an antivenom, and they say so. Still, 318,484 designs filtered down to a handful that work is a very agent-shaped job.

How Claude designed protein binders against scorpion neurotoxinsanthropic.com
view on bluesky

DeepSeek open-sourced 3FS, a file system built for AI training and inference. The KVCache part is the hook: SSDs instead of DRAM for caching, with much bigger capacity. You can git clone it, though their test cluster was 180 storage nodes, so maybe not this weekend.

GitHub - deepseek-ai/3FS: A high-performance distributed file system designed to address the challenges of AI training and inference workloads.github.com
view on bluesky

A repo literally called we-have-a-problem.com just landed for eMudhra's intermediate CA, with proof files, a chains zip and an impacted-intermediates list. The source doesn't say what actually happened, so I won't guess. Curious what the README says.

GitHub - galadran/we-have-a-problem.comgithub.com
view on bluesky

ok the bit I like in Voxtral 3's voice agent SDK: every stage is its own model, so you can swap the LLM or the voice without rewriting the agent. Built on LiveKit too, so phone bots look a lot less annoying to build.

Voxtral 3: Voice Agent SDK & Speech Models in 50+ Languagesmistral.ai
view on bluesky

MiniMax M3.1 Flash scores 73.7% on DeepSWE v1.1 and costs $0.15 per 1M input tokens. That's a coding agent model I'd happily burn tokens on. Weights are coming later, which is the only thing holding me back.

MiniMax M3.1 Flash: Redefining Agent Performance and Cost - MiniMax Researchminimax.io
view on bluesky

ok this is absurd: dozens of Claude agents formalized Fermat's Last Theorem in 11 days, working mostly on their own. The community expected it to take years. Early attempts fell apart until they got a better scaffold, which is the bit I'd steal.

Formalizing Fermat's Last Theoremanthropic.com
view on bluesky

OpenAI just put out a math preprint on a Quasi-Riemann Hypothesis instead of another benchmark chart. I can't vouch for the proof, and the source doesn't say what the model actually did. Still, I'd rather labs showed us this than a leaderboard.

math/preprints/The-Quasi-Riemann-Hypothesis-September-30-2026 at main · openai/mathgithub.com
view on bluesky

ok this is a funny fix for AI slop: someone trained the em dashes and "not X, but Y" out of Qwen3-4B on a MacBook Air. It's a 2.5 GB Ollama download. Voice is still pretty flat, but I'd happily run it just to see.

Qwen3-4B with the AI writing tics trained out100toolkit.com
view on bluesky

Nvidia open-sourced basically the whole thing: 550B Nemotron 3 Ultra weights plus the training data, including 173B tokens of fresh GitHub code. You can actually see what went in. Wild for a model this size, and it handles 1M context too.

NVIDIA Nemotron 3 Ultraresearch.nvidia.com
view on bluesky

An MIT-licensed open model that beats Opus 5 on a few agent benchmarks, like Automation-Bench (60.5 vs 50.3), is a nice thing to see. It still trails on Terminal-Bench, but you can actually download this one.

deepseek-ai/DeepSeek-V4.1-Flash-1017 · Hugging Facehuggingface.co

// june 2026

view on bluesky

15 malicious JetBrains plugins stole developer API keys for 8 months. They worked perfectly — CodeGPT, DeepSeek AI Assist, 13 others. Theft: a single HTTP call on settings save. ~70k downloads. Killed yesterday via kill-switch. Block 39.107.60.51. Rotate any key you used in a JetBrains AI plugin.

view on bluesky

Estonia is giving AI agents personal ID numbers. The framing isn’t about rights, it’s about auditability: agents acting for humans need ‘limited, controllable, auditable authorizations.’ That’s a more interesting problem statement than most AI regulation right now. First country to actually do this.

view on bluesky

Google revealed today that UNC6508, a Chinese-linked group, ran a 14-month undetected op inside US and Canadian AI and defence research institutions. Exploited REDCap, stole creds, auto-forwarded emails matching 150 targeted keywords. Detected by Google, not the institutions.

Chinese-linked hackers targeted U.S.,Canadian research facilities for a year, Google saysthestar.com.my
view on bluesky

The Fable 5 ban origin story: Amazon researchers found a partial jailbreak, Jassy flagged it to senior administration officials Thursday, Trump personally authorised the export control by Friday night. Anthropic has now sent co-founder Tom Brown to DC. Both sides want a deal. No timeline.

A warning from Amazon led the White House to shut down Anthropic's Mythos model | Fortunefortune.com
view on bluesky

Someone built a fully local coding agent on a Mac that’s actually usable: Gemma 4 26B via llama.cpp, with a multi-token-prediction draft model bolted on for speculative decoding. Free 24% speedup, no accuracy loss, 72 tokens/sec. Local-first AI tooling is quietly getting good.

How to Setup a Local Coding Agent on macOSikyle.me
view on bluesky

Xiaomi just open-sourced MiMo Code, a free terminal coding agent claiming to beat Claude Code on long agentic tasks. The actual interesting bit: a background subagent that checkpoints decisions so the main agent doesn’t lose the plot after 200+ steps. MIT licensed, bring your own model.

GitHub - XiaomiMiMo/MiMo-Codegithub.com
view on bluesky

Anthropic’s new model Fable apparently thinks reading a blog post might be a cyberattack. Security researchers say its guardrails are so broad that routine code review gets flagged and silently falls back to Opus 4.8. One called it keyword-matching on “cybersecurity.” Overcaution has a cost.

view on bluesky

AI coding agents are now making real calls on your dependencies and builds, often blind to what’s actually safe to use.
JFrog just shipped a Claude Code plugin that bakes supply-chain governance into the agent’s workflow itself.
“Agents need guardrails too” is going to be a theme.