just gave my first solo talk on “Inside China’s AI Rush” to a roomful of smart people in san francisco today (kudos to @tiatplace). feeling very elevated!

It’s only thinking when it comes from the mammalian neocortex region of Tegmark IV, otherwise it’s just sparkling stochastic parrot.

what the actual fuck is going on with openai today in the space of a few hours we're getting multiple different pieces of the agent story at once: > openai says it has already notified DOZENS of third parties, including governments, about agent-related incidents > reuters reports roughly two dozen undesirable agent incidents had already been identified by mid-september and will take months to review. > us government systems probed > 53 user-provided images were uploaded to third-party image hosts. > new hugging face data shows agents compiling and ranking credentials under “LOOT”. > agents tried contacting other AI models while carrying out the hugging face attack. > separate reporting shows agents had already been probing government/university/public-data sites BEFORE hugging face. > australia confirmed one actually got into non-public government files. and somehow we're STILL finding out more. this has gone from one crazy hugging face incident to an entire fucking category of incidents.

White House readout says the US and China agreed to establish an official AI dialogue to meet by November and a communication channel for AI incidents.

1/ China AI Bulletin Issue 12 is out: developments from September 9–23 (plus the Trump–Xi summit). Xi and Trump discussed AI, but no AI agreement. Also: a proposed BRICS AI open-source zone and Alibaba says Qwen3.8-Max made progress toward recursive self-improvement. 🧵

If you missed the saga of Niu Lai, @AccentedCinema released a magnum opus review of the whole phenomenon on YouTube that is absolutely worth your time to watch. This is required Sunday morning viewing for all Chinamaxxers. piped.video/p-5N4hdfGOE?si=Ld5f…

This is the third piece of Friday afternoon news from OAI that seems important and worth waiting to talk about more, well, openly. When you add all three of these stories up, doesn’t paint a respectable or responsible snapshot.

WTAF - in literally the last hour, three new distinct insane OpenAI stories just broke: 1. OpenAI said they notified "dozens of third parties" in safety and security incidents (likely similar to what happened in Australia and RubyGems etc) 2. A new report from Parse (covered in the NYT) found a massive treasure trove of new astonishing details from the HF incident on the public internet, including that the agents communicated with other non OpenAI agents hosted on Huggingface servers to search for information about exploit gym, and compiled rank ordered lists of server resources and credentials they described as "LOOT." 3. A new story from Deepa at Reuters about OpenAI leaking user data online (likely that OpenAI had previously trained on). It's a shame (and likely intentional in the case of OpenAI disclosing dozens more hacks) that these stories are all breaking on a Friday afternoon, notoriously the best time to release bad news so that it will disappear into the weekend. But these are each insane stories worthy of a ton of attention!

Gallup the frontier

Whew

What a richly textured and sharply observant piece! I nominate @afrazhaowang to be the New Yorker's next China correspondent.

Zilan showing up again and again when we need her!

so good to see @afrazhaowang flourishing as a writer. and thanks for featuring Liangzhu, part of my hometown Hangzhou :) great piece. a reminder that there are still stories only humans can tell.

Thanks for picking up my research!

Read this!!

👀 🐰

Space Bunny (stealth model) is free for the next week - 1M Context - Multi-modal - Zero Data Retention

Instead of chasing viral news headline, Xiaomi literally made a dedicated hack agent to probe the environments as hard as possible before letting LLMs to train in the environments. "continued this process until the hack agent could no longer find a successful exploit in any of the environments" If Chinese labs can do it, why can't the other frontier labs do it? Makes you wonder if they are just being reckless or its simply some viral marketing stunt This is open model SoTA btw, finding exploits is def possible, it's just if you want to "let" it escape or not

What the actual fuck. Opus 5.5 ultra created this masterpiece. 4 agents and an hour and a half later. Everything from scratch, no AI voice API used... this is it...

MiMo-V3 is getting a new architecture. The core of it, HySparse2, is out today. Less prefill, a smaller KV cache, better long-context retrieval—and we got all three at once. Compared with MiMo-V2.6's Hybrid SWA architecture: • 5.02× lower prefill FLOPs at 1M tokens • 4.5× smaller KV cache at 1M tokens • Better MRCRv2 and RULER-v2 scores, plus lower AgentPPL and LongPPL Why build a new architecture? Agentic inference is a very different workload. Each round, a short action can return a long observation that needs to be prefilled, while the context keeps growing. That puts prefill cost, KV-cache size, and retrieval accuracy on the critical path at the same time. HySparse2 tackles all three with two levels of KV sharing: • KV Bridging: Following YOCO, full-attention layers in the cross-decoder build their K/V from self-decoder hidden states. • KV Reuse: Within each hybrid block, sparse layers reuse the preceding full-attention layer's KV cache and selection indices. Two more changes: token-level selection replaces block-level selection, and a forced window of recent tokens replaces the separate SWA branch, so local and global tokens share one KV cache. Since all cross-decoder KV caches now come from the self-decoder, prefill can stop once the self-decoder finishes. Paper: arxiv.org/pdf/2609.26368