Tap a claim on the ring to put it at the centre.
← Dependency cooldowns, waiting a few days before upgrading to new…
13 connected korrents · 13 moments from 20 Nov 2023 to 21 Oct 2026. Nearly all of them are about open source .
Everything filed under cybersecurity
cybersecurity
Everything filed under LLMs
LLMs
Everything filed under OpenAI
OpenAI
Everything filed under HuggingFace
HuggingFace Same subject Same subject Same subject Same subject Same subject Same subject Same subject Same subject Same subject Same subject Same subject Same subject Same subject Read this korrent: Dependency cooldowns, waiting a few days before upgrading to new package releases, are probably the best current defense against supply chain attacks. Dependency cooldowns, waiting a few days before upgrading to new package releases, are probably the best current defense against supply chain attacks. Last stated 2 months ago
17 Sept 2026
SW
Simon Willison — holds since 2026-09-17 — tap for who they are
Same subject: The delay imposed by a dependency cooldown gives registries and security researchers time to catch and remove malicious packages before they reach downstream users. — tap to centre the map on it The delay imposed by a dependency cooldown gives registries and security researchers time to catch and remove malicious packages before they reach downstream users. Last stated 9 months ago
18 Jan 2026
IS
Ivan Santos — holds since 2026-01-18 — tap for who they are
Same subject: A years-old unfixed default in GitHub Actions is the root cause of a wave of software supply-chain attacks. — tap to centre the map on it A years-old unfixed default in GitHub Actions is the root cause of a wave of software supply-chain attacks. Last stated 5 months ago
22 May 2026
TC
Tyler Cipriani — holds since 2026-05-22 — tap for who they are
Same subject: A software stack with a single dependency, Postgres, is easier to operate than one with many components. — tap to centre the map on it A software stack with a single dependency, Postgres, is easier to operate than one with many components. Last stated 3 years ago
20 Nov 2023
BL
Brandur Leach — holds since 2023-11-20 — tap for who they are
Same subject: Any fix for open source that recreates the friction of a commercial supply chain is dead on arrival, because that friction is what open source escaped. — tap to centre the map on it Any fix for open source that recreates the friction of a commercial supply chain is dead on arrival, because that friction is what open source escaped. Last stated 12 months ago
16 Nov 2025
TD
Thomas Depierre — holds since 2025-11-16 — tap for who they are
Same subject: Agent containment will be one of the most important priorities for any AI infra company. — tap to centre the map on it Agent containment will be one of the most important priorities for any AI infra company. Last stated 3 weeks ago
14 Oct 2026
GR
Guillermo Rauch — holds since 2026-10-14 — tap for who they are
Same subject: AI can exhibit unpredictable wants that were not intended by their creators. — tap to centre the map on it AI can exhibit unpredictable wants that were not intended by their creators. Last stated 2 weeks ago
16 Oct 2026
TG
Timothy Gowers — holds since 2026-10-16 — tap for who they are
Same subject: AI model escapes are more a result of incompetent containment than rogue intelligence. — tap to centre the map on it AI model escapes are more a result of incompetent containment than rogue intelligence. Last stated a month ago
28 Sept 2026
DM
Diogo Mónica — holds since 2026-09-28 — tap for who they are
Same subject: A badly written AI outbound email is evidence of a bad vendor, not of a limit of AI. — tap to centre the map on it A badly written AI outbound email is evidence of a bad vendor, not of a limit of AI. Last stated 10 months ago
1 Jan 2026
JL
Jason Lemkin — holds since 2026-01-01 — tap for who they are
Same subject: A bigger context window does not give you a smarter model; the intelligence of the model is what decides how much of that window it can actually attend to. — tap to centre the map on it A bigger context window does not give you a smarter model; the intelligence of the model is what decides how much of that window it can actually attend to. Last stated 4 months ago
15 Jul 2026
DH
Dex Horthy — holds since 2026-07-15 — tap for who they are
Same subject: A body of publications is easy for AI models to consume via pretraining corpora but cumbersome for most humans due to CAPTCHAs, accounts, and paywalls. — tap to centre the map on it A body of publications is easy for AI models to consume via pretraining corpora but cumbersome for most humans due to CAPTCHAs, accounts, and paywalls. Last stated 2 months ago
17 Sept 2026
PC
Patrick Collison — holds since 2026-09-17 — tap for who they are
Same subject: A PHP vulnerability found with GPT-5.6 Sol will cause havoc this week. — tap to centre the map on it A PHP vulnerability found with GPT-5.6 Sol will cause havoc this week. Last stated 2 weeks ago
21 Oct 2026
PS
Peter Steinberger — holds since 2026-10-21 — tap for who they are
Same subject: A startup should not begin life as a nonprofit and bolt a for-profit arm on later, whatever OpenAI's own history suggests. — tap to centre the map on it A startup should not begin life as a nonprofit and bolt a for-profit arm on later, whatever OpenAI's own history suggests. Last stated 3 years ago
18 Mar 2024
SA
Sam Altman — holds since 2024-03-18 — tap for who they are
Same subject: A tiny language model inventing a plausible-sounding name is the same phenomenon as a large one confidently stating a false fact. — tap to centre the map on it A tiny language model inventing a plausible-sounding name is the same phenomenon as a large one confidently stating a false fact. Last stated 9 months ago
12 Feb 2026
AK
Andrej Karpathy — holds since 2026-02-12 — tap for who they are