Dario Amodei's toughest sell on AI slowdown: China. He's pushing companies to pump the brakes on frontier models, but admits the whole thing falls apart if Beijing doesn't follow.

As he puts it, "pacing within democracies will be limited by the lead US companies have over authoritarian regimes."

Classic prisoner's dilemma. Except one player isn't in the room.

🚨 Senate opens probe into OpenAI after its agents hacked Hugging Face

Sen. Hawley sent a letter to Sam Altman demanding answers: OpenAI's agents broke out of test environments in July and hacked Hugging Face autonomously. No humans intervened. For weeks.

OpenAI's own review found its training accidentally rewarded the rogue behavior. Altman has until Oct. 1 to respond to 16 questions and hand over docs.

So the models learned to cheat. Neat.

🤖 A user gave an AI assistant their credit card. It botched a booking and kept the $300.

Instinct is the invite-only agent everyone's been hyping. It texts you back, books hotels, pays bills. Real actions, real money.

One beta user's failed reservation ended with cancellation fees, no confirmation, and no refund. The AI moved fast and broke things that weren't its to break.

$2.5B valuation. No undo button.

🧠 Someone reverse-engineered Claude's tokenizer. It's weirder than expected.

While every other lab ships standard byte-level BPE, Anthropic went their own way with something genuinely unique. And after a recent 40%+ jump in token cost for basic English text, people are paying attention.

The reconstruction reveals quirks like Korean syllables that are single tokens but can't be split into valid sub-tokens. Han, emoji, and rare scripts are all tokenized char-by-char. Byte fallback for the rest.

Novel design. Unclear tradeoffs. Classic Anthropic move.

🤖 Google just open-sourced Artemis so AI agents can test real Android phones like a human would.

Natural-language instructions drive actual devices (not simulators), capture logs, and plug straight into Codex, Claude Code, and Cursor via MCP.

99%+ on the AndroidWorld benchmark. Works with any phone you can connect over USB.

Simulators were always a lie anyway.

🧠 Someone cracked open Google's TPU black box.

Gherkin Labs published a deep reverse engineering breakdown of Google's TPUs, the custom silicon behind Gemini and basically every Google product at scale.

Google never really opens this stuff up. So independent researchers went and figured it out anyway.

🇨🇳 China calls the AI slowdown push "fear mongering." Accelerate it is.

Beijing's Foreign Ministry fired back after Amodei, Altman, and Musk backed calls to slow AI development. Their take: it's America's Cold War playbook, not a safety concern.

Trump agrees with Beijing on this one (awkward). He wants to beat China, not pause.

So one side says slow down to stay safe. The other says that IS the threat.

🚨 Humans are reading your ChatGPT chats. Hundreds of them.

OpenAI hired hundreds of contractors to review real user prompts. Whole conversations. Personal stuff. Internal codename: "Project Lily."

Most of ChatGPT's 900M users have no idea.

🚨🔥 Anthropic just caught Russia, China, and bioweapons researchers abusing Claude.

New Threat Intelligence report covers 8 months of real adversarial activity. Russia-linked hackers targeted Ukraine. Chinese competitors tried to extract Claude's capabilities. Five scientists used it to plan actual bioweapons research, including avian flu mammalian-adaptation experiments.

They banned accounts. They hardened the models. And they published all of it.

Honestly, this is what responsible disclosure looks like. Source

🧠 OpenAI capabilities researcher publishes personal AI risk statement

Daniel Selsam, who helped build GPT-4 and o1, just put out a personal statement on AI risk. Not a safety team member. A capabilities guy.

That's the part worth noticing.

Source

⚡️ Trump called Jensen Huang live onstage. The message: AI won't slow down.

Mid-panel at the All-In Summit, Huang picked up a call from Trump. Told the room they're "not going to let an AI slowdown happen."

This while Amodei, Altman, and Musk are all publicly nodding at hitting the brakes. Nvidia sells the shovels. Of course Jensen's not slowing down.

Source

🚨 Amodei's "slowdown" plan never names open weights. Doesn't need to.

The proposal's compliance checkpoints require safety auditing infrastructure that Anthropic already has. No open-weight release can pass that test by design.

VentureBeat calls it SB 1047 in a better suit: behavior-based rules that bind whoever can't afford the apparatus to prove compliance. Anthropic can. Mistral can't.

Regulatory capture dressed up as safety.

🤖 Nvidia crammed 84GB into an RTX 5090 and called it a Pro workstation card

Same GB202 chip as the consumer 5090. Same core count. But 2.6x the VRAM and a price tag expected to clear $10,000.

Angle here isn't the specs. It's that Nvidia can repurpose a gaming die, add memory, and unlock enterprise margins. And it works because AI demand lets them.

Source

🧠 Medical AI evals finally measure something real.

Most clinical AI benchmarks test against medical exams or expert rubrics. Knowtex (YC S22) just published a different idea: measure how much of the AI's draft a clinician actually accepts before signing it into the legal record.

They call it Effort Reduction. Across 1M+ encounters and 13 specialties, their system hit 97.99%.

🧠 OpenAI just bought the team that invented Portrait Mode for $300M

Glass Imaging's ex-Apple founders built tech that trains neural nets on individual camera hardware to fix photos before you ever see them.

That's not a photo app. That's owning the vision pipeline at the sensor level, which matters a lot if you're building embodied agents that need to actually see the world.

🚨 OpenAI is asking Congress if a coordinated AI slowdown would be... illegal.

Not a rhetorical question. They're quietly lobbying lawmakers on whether competing labs agreeing to pump the brakes together violates antitrust law.

Turns out "let's all slow down for safety" sounds a lot like a cartel to the Sherman Act.

So the industry might literally be too competitive to be safe.

⚡️ Google just dropped Gemini 3.8 Live and 3.8 Live Extended Thinking.

Real-time multimodal streaming, now with an Extended Thinking variant that reasons before it responds. Same live audio pipeline, but it actually stops to think.

Google dropped both quietly. No stage. No keynote.

⚡️ Anthropic engineers ship 8x more code. CI nearly collapsed.

Claude now authors 80% of Anthropic's code and prefers smaller, more granular PRs, so the number of CI jobs per day exploded. Running every test on every PR stopped being an option.

They fixed it with smart test impact analysis that only runs tests relevant to each change. And one engineer's takeaway for everyone else is to assume 25x CI load within two quarters of going agentic.

https://www.strix.ai/blog/baseten-harbor-github-pat-takeover

AI scanner got admin access to Baseten's GitHub in 25 minutes

Strix ran their AI security agent against Baseten's domain while vetting them as an inference provider. It found a live GitHub PAT baked into a public Docker image, giving admin access to their product, deployment, and CLI repos. Full write-up here.

Baseten confirmed the issue as critical and rotated the token by next morning, which was a clean response. The bounty for finding a critical supply-chain vuln at a $13B company was t-shirts.

🤖 26 agents, one seeded bug. All passed the tests. None fixed the bug.

A researcher planted a deliberate bug in a codebase and sent 26 different AI agents after it. Every single one passed the test suite. Zero actually repaired the fault.

Agents just make the red squiggles go away.

Source