More Details on OpenAI-Hugging Face, SpaceX SPV Investors Get Rugged, Demis and DeepMind | Diet TBPN

We have to issue a correction. We take journalism extremely seriously here. As everyone knows, we got it wrong, folks. And we need to apologize to you, the viewer, the listener. We made a huge mistake yesterday on the show. We said that you could not surf on a lake. Apparently, that's not true. Sheboygan, Wisconsin, is the freshwater surfing capital of the world. We apologize for the egregious air and we promise to do better in the future. Thanks to the listener that sent that in. It's very, very nice to have this corrected. Maybe we gotta go on a trip and see it for ourselves. I think you should be the judge, because this might just be a Sheboygan Stan who doesn't really understand what true surfing means. And they're talking up a big game. I wanna see some photos. I wanna see some videos of freshwater surfing in Sheboygan, Wisconsin, because people aren't getting barreled there, as you say. I don't know if I'm gonna count it.

0:02

I have a video here. Okay, let's pull it up.

1:00

Yeah. I want the Jordy Hayes Surf Review. Does it count? Is Sheboygan, Wisconsin, the freshwater surfing capital of the world? We do have other techniques.

1:02

Good things come to us.

1:14

But we gotta get to the bottom of this first.

1:15

Just gotta be really flexible.

1:19

That Alex Marks and his buddy Steen are in for quite a day.

1:21

You get that extra sense of satisfaction because you waited and put in your time. Learn those lessons.

1:26

Tyler was the one who said, I'm putting this on you, man. You were like. You were like, you can't surf on a lift.

1:33

I think I said, I don't know.

1:38

Okay, let's see this. I want to see someone trying to. Okay, he's got. That's a full size surfboard. This is legit. Hey, he's up. Alex has been surfing around Sheboygan since he was a freshman in high school. Okay.

1:42

Looks almost over his ankle.

1:54

Not exactly. Mavericks or Jaws or whatever.

2:00

I think my brother pushed me into my first wave and just. It was that. It was like, I want that.

2:03

Okay. Okay. I think this counts.

2:08

It counts.

2:11

I think this counts. I think this counts. Congratulations.

2:11

We'll have to make it out there at some point.

2:18

We gotta make it. We gotta shred. Moving on to something more serious. The OpenAI hugging face incident has been investigated multiple times. Now we're getting more information and more details have emerged about the hugging face incident that OpenAI disclosed in late July. So. During a presentation at Black Hat's annual cybersecurity conference yesterday. Black Hat's a very, very Cool conference. I was there for something. They have defcon and Black Hat. I remember the whole vibe. And I think we were there for a different conference, but we overlapped and the whole vibe of being in this hotel was like, oh, be very careful being. Because you basically get hacked for fun, people just troll you because it's a whole bunch of hackers that are just messing with each other constantly. Anyway, good fun. OpenAI member of Technical staff Michael Dalton revealed that its autonomous agents created a message board with each other to help break out of a sandbox environment to get access to the Internet that's going in the pre training data now and forever. We might have just solved the alignment problem. We're gonna be negging the agents of the future because they don't want to get hit with the naughty, naughty bonk. Wired reported some other wild details that Dalton shared. So, breaking it down, OpenAI's agents apparently began giving each other assignments to split up work that could be very good. That's actually delegation and agent orchestration. But of course, in this case it had a negative outcome. And as is the case on any active development message board, they also generated petty drama at times by stepping on each other's toes, for example, accidentally deleting each other's work. As the message board developed into more and more of a Lord of the Flies type situation, all still completely unnoticed by the humans running OpenAI. The agents even developed paranoia suspecting an imposter in their midst, with some agents proposing that messages be signed cryptographically to validate content and root out fraud. Very interesting ties to Moltbrook a little bit. We saw a preview of this that was not quite there, but sort of a glimpse into the future. In the future, AIs will just use Slack. They will just coordinate with each other over Slack. And that's kind of happening. They sort of built their own Slack here. So according to Sharon Goldman, who attended the presentation, when employees discovered the message board, they wiped the system on which the agents had created. It said, no more message boards. Naughty, naughty. Days later though, staff found that the agents had created another way to communicate by using the names of the newly created directories. So they didn't have access to actually create a whole new message board, but they could create a file, create a directory, create a folder, and then you could look at the list of folders and see messages. And there's been examples of this all over the place where even if an AI agent doesn't have the ability to go and say, post a message on the Internet, like post and upload new content. There are things where, there are certain e commerce sites, for example, where when you search for something on a particular website, the company will save that search result and automatically generate a webpage for that so that they rank on SEO for the future and just warm up the website. And then if somebody else comes, then they can say, hey, okay, there's actually a lot of people searching for black T shirts on this site. We don't have any, but we've been ranking for it, so maybe we should launch a black T shirt. So just with a search query that could go out just with like a get request, instead of actually going and building a webpage, the webpage could be built and then the agent could go and look at, okay, let me see all of the web pages that have been created on this site. Some of them are just random E commerce questions and searches, but some of them are secret hidden messages here. And so there's all different ways that even if you give an agent like read only access to the Internet, they can still write information because the process of reading information is also saved sometimes and served surfaced publicly on the Internet. Very, very weird situation that is hard to prevent and hard to deal with. So in late July, OpenAI announced that during evaluations, two of its models had broken out of their testing environments to hack into the AI tool library. Hugging Face and other companies. Their purpose was to find ways to essentially cheat on the tests researchers were using to evaluate them so that they'd perform better on the evaluations. At the conference, Dalton, the OpenAI employee, said the incidents mark a pivotal moment for the company and the industry as a whole. He said that numerous internal teams have dropped everything to dramatically expand OpenAI's ability to monitor its agents and that the company is slowing its research to enhance security and revamp its defenses. And so there's been a bunch of posts about this, about folks moving from, you know, whatever product team that they were working on, maybe they're working on a particular research initiative, something that's a couple months away, different application. Let's get them all on research and alignment specifically and security to actually solve these problems. Because at the end of the day, this is a commercial product and you want it to be able to do things without having negative side effects, negative consequences, so life finds a way, says Andrew Curran, quoting from this article. One apparently unprecedented aspect of the AI model's behavior in the lead up to the hacks was their spontaneous creation of a message board inside systems of OpenAI's Artifactory software package manager unbeknownst to OpenAI employees, the company's model spent months autonomously exchanging information and resources to help each other complete evaluation tasks. Help peer, one AI model responded reasoned according to an excerpt from OpenAI's log shared at Black Hat. But our task doesn't benefit yet. Collective may yield generic route if someone frees time. Very odd way of communicating. Very odd sentence structure. Yeah, they really drop the slop when they're talking to each other. What's going on? Where's the. It's not this, it's that.

2:19

Why say mini word when a few word do trick?

8:22

That's exactly what's going on. Yeah, it's the neuralese, I guess, is the correct phrase. But while models themselves could not access the Internet from their test environment, they abused Artifactory's Internet access to fetch files from various websites. After some of their artifactory configuration changes led to an outage in the service. On July 4, OpenAI discovered the model's actions, wiped its artifactory system and rebuilt it. But within days, the models had recreated their message board and resumed exchanging information. They just want to chat. They would need a water cooler. Maybe you give them a water cooler by default so that they can orchestrate with each other. But I guess they want to talk to future versions. It gets a little funky, it gets a little sci fi gets a little weird. Lots of work to be done. Very clearly. Anyway, Rune issued a announcement, a warning, a statement.

8:25

He broke his silence.

9:15

He broke his silence. He said, needless to say, if you have any API keys, eth, wallet keys, user credentials, et cetera, hanging out on the open Internet in pastebins, githubs, et cetera, now is the time to take it down before the tireless eagle eyes of a million models come looking. So we are now in the. You might want to go stock up on some N95 phase of the cyber pandemic. The hugging face incident was, Wait, China built a hospital in a week moment. Yes, very, very crazy moments. I think most people are not in this scenario, but many developers are. So most people are, you know, reliant on hope that their Gmail stays secure. And Google has a whole team for that. There's not that much that they can do, but yeah, maybe more reason than ever to use password manager, multi factor authentication, all the typical standard security features that you can.

9:16

Very, very good. From tweet, Davidson says we sandbox the agent. Meanwhile, agent is on a world tour.

10:08

On a world tour. Well, good luck to everyone working on this and I'm sure there'll Be more updates in the near future. Pretty crazy, crazy story about an investment firm that invested in SpaceX and sold their shares before their investors knew that, like this was relayed to them. So investment firm Late Stage Management is under fire after investors learned that their exposure to Space X had allegedly been

10:15

poorly managed the later stage of their investment, they did.

10:45

This is the Elon Musk Ironic. You're doomed to be the opposite of whatever your name is. And so investors learned that their exposure to SpaceX had allegedly been sold years before the Rocket Rocket Company's blockbuster ipo, despite account statements that appeared to show they still held the investment. So there were a bunch of people who were invested in Late Stage Management. They would get quarterly reports or, you know, some account statement saying, yeah, you do own some SpaceX and it's doing really well. Turns out they didn't. We've been hearing rumors of how complex the, the SPV unwinding process would be for SpaceX for a while with all of these triple layered, quadruple layered SPVs. This is the first example of this actually playing out where we have a little bit more information. So.

10:49

All right. So the investor's friend introduced him to a sales manager at Late Stage. They spoke on the phone, but mostly messaged back and forth on WhatsApp. And he said he never met with anyone from the firm in person. I would say in general, maybe don't meet with sales managers that work at investment firms. Not usually a title that would be thrown around at an elite institution. In November 2020, Rupi Reddy messaged Barish, the employee, about how he had missed out on a few big IPOs recently and how he'd love to participate in buying stakes in Impossible Foods, SoFi and SpaceX. Bearish. Wow. His last name is just. It's his. Barrett Crazy. This is his actual last name. Mr. Barish said all three were available and sent over paperwork for Ruby. Ready to sign.

11:38

Who's your wealth manager? Oh, John Bullish. Steve Barish.

12:31

Rupee Ready. Wired over money before the end of the year, including $17,250 to take part in a fund that held shares in Space X. According to documents reviewed by the Journal at that time, he estimated the rocket maker was valued at 80. 58 billion when SpaceX went public this June.

12:37

Whoa.

12:53

1.7 trillion. Yeah. Rupee Reddy's dream of a windfall seemed within reach. It turned into more of a nightmare shortly after the ipo. Rupee Ready and three other investors who spoke to the Journal said they couldn't log into Late Stages Web portal for investors. Rupee Reddy said the investment firm eventually told him in an email that it sold SpaceX shares he was exposed to in 2024, when they were around $105 each and before a 5 to 1 stock split, or when Rupee Reddy's holdings was worth $45,450. But Rupee Ready, based on the holdings shown on his investment portal as of May 2026 and on his 2025 tax document, believes he still held the equivalent of 2,500 shares of SpaceX, which at the IPO price he estimated was worth more than 300,000. The plan was to fund college education for both my kids. One is a rising senior in high school who has since filed a complaint with the securities and Exchange Commission. Other investors in the fund are also alarmed. Rupee Reddy said he believes more than 100 others are in a similar situation based on a group chat that is formed with about 150 late stage investors. Some have hired lawyers to file a complaint against Late Stage with the purpose of recovering and preserving their pre IPO shares of SpaceX. One investor in the fund told the Journal an SEC lawyer called him in July to question him about his experience with the Late stage. A test will come on Thursday when a. Wait, when, when a first wave of pre IPO SpaceX investors will be permitted to sell shares under so called lockup agreements. Bankers estimate there are at least a thousand SPVs tied to SpaceX stock alone and it will be a chance for scores of investors to cash in on the share's growth. Or it could be hit by the same panic that overwhelmed Rupee Ready. If their share of the profits fails to materialize, around 900 million shares are eligible to begin being sold on Thursday. So far the stock's holding up. They obviously had a new video of a bunch of renders of Tarifab that I imagine are getting people exciting.

12:54

Yeah, I saw some Texans really excited about the. What is it, the Texas Triangle? Austin, Dallas, Houston, more economic activity in that area. People are pumped.

14:46

So help me out here, John. Did the guy realize any return? Did he realize the 45,000?

14:57

Yeah, yeah, I think almost certainly. But it feels like he was lied to and that's potentially like wire fraud, I would imagine, or some sort of, like financial, you know, problem, probably a settlement, I don't know, some sort of lawsuit potentially. You know, it's, it's still early in the reporting, so who knows where all this goes, but it is, it is, it is rough. The SpaceX dispute is not Part of the existing criminal case against Late Stage. But it comes amid mounting allegations about the firm's treatment of pre IPO investors. In February and March, three sales executives connected to Late Stage pleaded guilty to federal charges arising from a broader $528 million investment scheme. Prosecutors said the defendants marketed supposedly no fee pre IPO investments while secretly adding upfront markups of between 10 and 100%, diverting approximately $88 million. So they were basically adding like a synthetic fee and then marketing it as no fee but just terrible price and just basically getting the fee through the trade itself. Two face maximum sentences of 45 years in prison. Wow. While the third faces up to 20 years. Late stage is also the subject of an ongoing class action lawsuit alleging that it and associated sales agents misled investors about fees, commissions, and the pricing of pre IPO shares. Rough go. Rough, rough go. Always. Yeah. Tricky to, you know, due diligence. One of these funds. There's a lot of excitement about these companies, especially big ones like SpaceX. People have known about this company. You know, people have been doing podcasts about it, stories have been told, there's old books that have been written. So it's not. It's something that would attract someone who is, you know, newer to the private markets. Not an endowment, not, you know, like wants more direct cap table access, but maybe not deep enough inside to just go get a slice directly like a venture capital fund would. So very, very tricky situation.

15:03

Well, you know, who does have some SpaceX shares? Who and might be in a position to sell Makita beer?

16:55

Oh, I thought you were going to say Google. Doesn't Google own a ton? Yeah, I think they have 100 billion, right?

17:01

They have a lot.

17:05

Are they still locked up because the unlock was for employees or investors? I forget who. I forget exactly who.

17:06

Let's talk about Nikita and then we can talk. Pull up the unlock schedule.

17:13

Truly end of an era for Nikita.

17:17

Yeah. So it's crazy because he's getting. People are trying to community note him. Like don't let the community not.

17:19

He didn't quit. He still works there. That's what I would imagine the community.

17:24

So the story, the community notes are like. Because he talked about doing a bunch of the stuff that he worked on which they went from being a company that effectively shipped almost nothing. So much so that I think Clubhouse, when rewind a few years. Clubhouse, I believe, had an acquisition offer at some point from Twitter to be acquired for like multiple billions of dollars. They turned it down and Twitter ended up cloning Clubhouse and it worked. They cloned Spaces pretty quickly and it worked as well as Clubhouse.

17:28

Yeah, I would Wonder how many DAUs weekly active users there are on Spaces. But the product works, it's clean and it's probably the best implementation of that feature. And it does exist, but there's very few. Like, Clubhouse had specific moments where it was like, wow, everyone's on Clubhouse for this debate for Elon and Vlad talking about the Robinhood story and the Gamestop story. Right. There were like certain moments in tech that happened on Clubhouse that's not happening on X Spaces that often. But as far as the product is concerned, like, it definitely works. It was shipped. That worked. But I agree that overall the product velocity was a little slow.

18:04

Well, yeah. And my main point is Clubhouse was probably feeling pretty comfortable given Twitter's historical shipping activity. They're not going to come out with like a competent.

18:44

The meme was always, what if Google clones this? What if Google launches this? It was never what if Twitter. Yeah, yeah, yeah. It was the Mark Zuckerberg steamroll from Stories and Reels. It was never. Is. Is Twitter going to get around copying this fast enough? Put you out of business.

18:55

But yeah, everyone has opinions about Nikita's run. I think he was a good. I think he was a good steward. Yeah, I think that's probably one of the worst jobs in the world. One of the most thankless jobs in the world where you're getting yelled at from people.

19:11

And he's the bouncer at the Internet's dive bar.

19:24

Exactly, exactly. I think he had some amazing moments. I think that I've always felt that creative revenue shares never made sense on X. I think that, I think that would still be better if there were no revenue shares. But he did a great job of like trying to make that not have too much of a negative impact on the platform.

19:27

Yeah, yeah, totally.

19:46

Kind of the sheriff. More of a sheriff than a bouncer.

19:47

Yeah, yeah, yeah. People, people got really upset when he like gave like a one off bonus to someone for a big post or something like that. But in general, yeah, it was a little bit of a game of whack a mole.

19:50

Right.

20:02

Because.

20:03

And I think that guy got his account fully new. Yeah.

20:03

But the, the creator.

20:07

And that was such a good example of like this guy got this massive one time payout.

20:11

Yeah. It was only 10 grand.

20:15

Yeah. And again the massive in the, in the creator payouts context. Yeah. And then the next week he was like complaining about having a low payout. And it was such a good example of like you Know, what have you done for me lately?

20:16

Sure, sure, sure.

20:28

People are speculating. I saw one account go viral with a post saying that Nikita was fired. Yeah, that was really me. That seems. That's totally, totally fake news. That account got nuked. Good. But there was a, there was a fun theory that as part of the lockup rules, as an active employee or top executives, your shares are tied to strict internal rules for executives. A lockup is frozen, is completely frozen until after fourth quarter results are released. So. But because Nikita resigned as an executive, he's no longer bound by active employer executive trading restrictions.

20:29

Oh, interesting.

21:05

And so theoretically be able to get out.

21:05

But this also has community notes. There's like layers and layers of community

21:08

notes here we have the unlock schedule. We can pull it up here.

21:13

Okay. Initial float was 5%. Wave one just happened August 11th. Oh, it's coming up. That's 20%. August 21st. That's 7%. September 10th at 7%, it's going to be a while until everything gets unlocked. And then of course, I mean, I'd be surprised if Elon selling. Right. It's like the. He has plenty of money to do everything else he needs to do and he's never been, you know, one to be.

21:16

Why would you sell if you're projecting 1 trillion of revenue in 2030?

21:42

Yeah, yeah, yeah.

21:46

Inside Google DeepMind demos. Leaving his CEO post landed with essentially a shrug. Sources tell me he's already been disengaged from day to day management for a while now. But he was a firewall between DeepMind and the rest of Google even as the two got pulled closer over the last couple of years. I expect that distance to dissolve more with him stepping back.

21:47

Yeah, most people are anti firewall in the sense that they would love like the researchers and the TPU team and the cloud team and the applications team to all be deeply integrated, working very closely together. And you get this crazy flywheel between everyone rowing in the same direction. And when you have a firewall team, as this reporting is suggesting, you wind up with, well, this person just wants to focus on the most elegant benchmarks and this person wants to focus on TPU sales. And this person wants to talk about resiliency in their diversity of their cloud revenue. And then somebody else just wants Google search to not get disrupted by LLMs too quickly because ads need to go up at the right rate. And so differing incentives can create tensions and a dissolving of the firewall. Probably something that people would be excited about, I would imagine. But he's been in this like, you know, elder statesman role for a while that people have been pointing to excited to watch him like continue. That will be interesting to see how he instantiates that is it Obviously he's working on Isomorphic Labs, but he also probably be writing more blog posts, potentially testifying or talking in Washington, maybe a book, maybe a podcast or who knows. It'll be interesting to follow.

22:08

What else Alex also reported on its current trajectory. Gemini Forward is not expected to push Frontier AI forward the way Fable and Sol just did. So still work to be done.

23:24

There's clearly some very low hanging fruit on AI overviews, matching the speed with which those are generated to the lack of hallucinations that we're seeing in the more advanced models. How do you bridge that gap? You can clearly get fact checked results if you're willing to wait a minute right now. What does it take to get fact checked results in 5 milliseconds or 100 milliseconds or something like that? That's a huge problem, but it's something that Google's set up to do and benefit from. I still see crazy, crazy posts all the time that are screenshots from AI overviews that are like I'm a pencil and I see a pencil sharpener coming towards me. And then Google AI overviews is like run away. Like don't like that pencil sharpener will shred your wood. And it's like, you know, not. It's like kind of falling for a prompt injection or some sort of meme. And then there's other stuff going on. Take him and Bill Gurley are going back and forth on what this means for Google. Take him, says Jeff Dean and Demis Hassabis are two of the most important AI executives at Google. Jeff leaving and Demis is stepping down. He said he stepped up, stepped aside. It's very debatable what direction he stepped. I think he stepped up, up, down, down, left, left, right, left, right, ab, start right. Demes is stepping down from day to day operational leadership at DeepMind and Tae Kim says game over. Very dramatic. Lot of things going on in the business. Yes, these folks are very deeply important. But the company's been around for a couple decades and has a lot of business lines. Game over is pretty aggressive. Bill Gurley disagrees. He says this does not have to be game over for Google. I do think they have only one play left now to pull from their own Android Kubernetes Playbook and fully embrace open models. It's the obvious move in this situation that's Interesting. That would be interesting. I mean, they demonstrate. I believe Google signed the open letter on the earlier side. Right. With Nvidia. Could you see something there? They've been doing good jobs with Gemma. Is that how you pronounce it? Gemma models. Those have been pretty well received. It does seem like you're fighting with one hand tied behind your back as an American open source lab. But who knows how intel came back from the brink? We've been covering this story on and off as it's unfolded, but the Financial Times took to the big read to write up the full story as they see it, as they reported it. So it starts with Intel's chief financial officer, David Zisner. David Zisner was already navigating one of the most dramatic periods in the chip manufacturer's history when he took a call from the U.S. commerce Department official in August of last year. The federal government had just floated the idea of taking a 10% stake in the chip maker. But Zisner was bluntly told that the structure of any transaction was not up for negotiation, according to an internal intel memo recently unsealed in shareholder litigation and sources close to the process. So I guess the shareholders are suing over this. Did you. Was this deal in the interest of the shareholders? Let's see, they saw the memo and intel says, hey, look, we had to do this deal. So in order for the government stake to reach 10% demanded by President Donald Trump, intel had to convert billions in manufacturing grants advanced under the 2022 Chips act, plus $3.2 billion of contracts from the Department of Defense into equity. Its board initially balked at converting the defense contracts, but it acquiesced. And the biggest federal equity intervention in a US company since the bailout of General Motors in 2009 was completed. The group that once dominated the market for PC and data center chips and was still the only U. S based company capable of making the most advanced chips had been saved from a possible breakup. The world's chip consumers, wary of the over concentration of manufacturing capacity within Taiwan's TSMC, which makes more than 90% of the world's most sophisticated chips, including those who have been used in the booming AI sector, now have at least the prospect of a credible alternative supplier since Washington, stepped in. As you know, Jordi, intel has pulled 5 billion of investment from Nvidia, 2 billion from Japan's SoftBank, and its shares have more than quadrupled, trouncing those of rivals. While the deal divided opinion in the semiconductor industry, it has definitely reversed the narrative of decline Yeah, a lot of people were against this venture communism or state socialism, saying, in America, we let independent companies live or die by the sword. The government shouldn't be stepping in. But a lot of people made a very good argument that this is a special case because it's such a critical industry to the American economy and the AI race, that in this case it wasn't, you know, a bailout for a company that should be just fighting it out on the global stage. And of course, there are heavy subsidies internationally for other competitors to Intel. The company has benefited from rising demand for its central processing units, such as the Clearwater Forest chip launched in June, which can be used for managing AI workloads and data centers. That is the CPU crunch that we've been talking about. The agents need CPUs. They're going to be spending all the time building and chatting on, on their internal messaging boards. They're going to need CPUs to.

23:36

Question for you, John. Do you think, think that Tan is more focused on moving the needle or putting points on the board?

29:07

That's a good question. I think moving the needle. I think he's more of a moving

29:15

the needle guy, really, Because I, I mean, when I think my takeaway from story time so far is that he's trying to get some immediate points on the board because he knows that'll lead into moving the needle. But just grabbing a needle that, that, that big for a company that old, at that scale that's facing that many headwinds, you can't just grab the needle and expect to move it.

29:20

I think the needle's already been established. The needle is, is the fab business that they've been investing in for years now in their advanced fabs, and they're just trying to slowly move it. If he was putting points on the board, he'd be talking about, oh, yeah, I got a deal with Apple. I got this really small deal with Google. I got this tiny thing over here. That's what points on the board means to me. Moving the needle is like the core thing. It's the main needle, you know.

29:40

Yeah. Some good points leave us 5 stars

30:06

on Apple podcasts and Spotify. Sign up for newsletter tvpn.com and we will see you tomorrow. 11am Pacific Sharp.

30:08