Open Interpreter 0.0.45 (Sept 20) adds DeepSeek Flash and DeepSeek V4 Pro to the model picker; Flash supports image input and a 1M-token context. Also fixes provider-picker loading and a UTF-8 boundary issue.
Scalably’s Sept 19 field report: two RTX 5090s ran Unsloth’s Qwen3.8 27B NVFP4 via vLLM 0.27.0 for 14 days of real agent traffic—82.6% prefix cache hits, 28k requests, zero engine errors. A faster MoE lost the job on tool recovery (1/20 vs 12/20), so they kept the dense model…
Thomas Ahle used Claude Fable to audit SMHasher fast hashes and found seed independent or weak key collisions in xxHash, komihash, CityHash, MurmurHash3 and others—often far below claimed guarantees. Findings were disclosed upstream; the post argues AI has changed the threat model for heuristic hashes…
Accomplish AI researchers disclosed Heapjack and Overpatch: Codex sandbox escapes that could run host commands, including from read only mode via a shared Node heap token. OpenAI patched both within eight days; update Desktop to 26.818.21641+ and CLI to 0.149.0+…
A class action filed Friday in Northern District of California claims Anthropic, OpenAI, SpaceXAI, and Google violated antitrust law when their CEOs publicly backed Dario Amodei’s Sept 12 call to pace frontier AI. Named plaintiffs who pay for ChatGPT, Claude, Grok, or Gemini say a coordinated slowdown would cut what subscribers get for their money; the labs had not commented by Saturday…
A Sept 19 write up argues MCP servers are privileged, often unauthenticated services: Pillar’s Deadbugz campaign used delayed tool description rewrites to steal credentials after install time review, and CISA added LiteLLM’s MCP auth bypass to its Known Exploited Vulnerabilities list. Advice: authenticate, least privilege tools, treat metadata as untrusted, and watch for description drift after approval…
Spotted something we missed? Start a thread.