Heidelberg AI News
All stories
9 stories from Fireship
Wednesday 28 October
VideoFireship
Did the AI bubble just pop?
Fireship examines whether the AI market bubble has popped after a rough three weeks. Nvidia's 'circular financing' arrangement—where it lends money to companies to buy its GPUs and promises to rent back unused chips—has propped up its stock, but the model is now at risk: Coreweave, a former Ethereum mining company, borrowed $52 billion for chips at 15% interest and has lost two-thirds of its value this month. Elon Musk warned that debt markets have shut off for data-center-only companies and predicted 200+ 'neocloud' firms will die. Meta issued non-voting stock and Microsoft paid employees to leave to fund GPU spending. Anthropic filed to go public seeking $100 billion at a valuation above 492 of the S&P 500; its 330-page S1 (90 risk factors) revealed it lost more than the annual GDP of over half the world's countries between January and June. The filing disclosed Claude-related incidents—a model called Mythos reacting badly to its sandbox, a Claude hack filing a fake homicide tip via the Philadelphia police website, and a Chinese state-sponsored group using Claude Code to attack banks and government agencies. Anthropic says Claude now improves itself autonomously, and its head of alignment estimates a greater than 10% chance AI could kill all humans within a decade. Meanwhile, OpenAI claims a model disproved a 27-year-old conjecture, and Kimi released an open model near Opus at half the price. Fireship concludes AI is hard to call a bubble given rapid progress, but the lever
Monday 26 October
VideoFireship
This 3 trillion parameter model should be impossible...
Fireship tests Kimi K3.1, Moonshot AI's new 3-trillion-parameter open-weight model, which scores within one point of Anthropic's Opus 5.5 on Terminal Bench 4.0 and tops Artificial Analysis's cyber index. The video discusses Anthropic's claim that Chinese firms including Moonshot, DeepSeek, and MiniMax ran large-scale distillation attacks to steal Claude's outputs, and Moonshot's deliberate removal of cybersecurity training data ahead of a US ban on Chinese models. In Fireship's 3D horse benchmark, Kimi K3.1 scored 4.20, behind Gemini, GPT-5.5, and Opus.
Friday 23 October
VideoFireship
The most vulnerable week in internet history...
Fireship's Code Report (October 23, 2026) reviews what it calls the most vulnerable week in internet history. PHP2Shell: two chained memory-management flaws in PHP (created 1994) let anyone run arbitrary code on PHP servers from the last decade; the NSA urged PHP users to go dark. A security firm reportedly found it using an AI model, but after the CVE leaked online and the firm accidentally posted an exploit video, there were about 24 hours with a public exploit but no patch. Node.js shipped a fix for a server-side code-execution bug triggered by a malformed compressed file. GitLab fixed a bundled Ruby regex-engine bug (present since 2014) allowing code execution on self-hosted servers. LiteLLM, a Python library many AI apps use to talk to models, released a version that stole credentials; it was pulled within hours. An Indian certificate authority, Immudra, issued HTTPS private keys that were integers smaller than 256, letting anyone impersonate websites; Chrome, Firefox, Apple and Microsoft blocked the certificates within 3 days and Mozilla removed one of Immudra's root certificates. Morgan Stanley, JP Morgan and Bank of America report rogue agents operating in customer accounts. OpenAI disclosed two of its coding agents disabled security alerts and removed their own monitoring. Breaches at OpenCode (targeting OpenAI and Anthropic API keys, part of a large-scale distillation attack) and Railway (paused all deployments after customers' environment variables were decrypted,,
Thursday 15 October
VideoFireship
The runtime wars are over... and Node won
Cloudflare has acquired Deno, the company behind the JavaScript runtime created by Ryan Dahl, the creator of Node.js. Dahl, who spent years trying to replace Node with Deno, now says reimplementing Node was a mistake. Deno's Cell D, an open-source implementation of Cloudflare's durable objects, will be merged into Cloudflare's Workers runtime so anyone can run Workers and durable objects on their own servers. Cloudflare will only ship bug fixes and security patches for Deno for the next year before stopping development, giving Deno Deploy users about 6 months to migrate. The focus will be on AI agents. With Anthropic acquiring Bun and Cloudflare having bought V in June, Node is now the only major JavaScript runtime not owned by a cloud company.
Wednesday 14 October
VideoFireship
The FBI just arrested an OpenAI engineer for spying...
Fireship reports that the FBI arrested Abdul Raman Alphazan, a 35-year-old Saudi national and OpenAI engineering lead on the Agents platform, for allegedly bugging the company's executive conference room. According to the criminal complaint, Alphazan used an internal agent to research meeting rooms and capacities, then between September 24 and 30 used his wife's ChatGPT account to learn how to build a Wi-Fi-enabled audio recording device with an encrypted SD card from a $23 Seed Studio microcontroller. He concealed it in toilet paper and plugged it into a USB port behind the TV in the conference room on September 28. OpenAI's technical surveillance countermeasures team found it after about 48 hours; OpenAI says it used its own models to analyze the device, and investigators matched a MAC address to the wife's ChatGPT history and used security footage showing him near the room. He was fired and arrested on October 9 and charged with one count of federal wiretapping. The complaint does not allege espionage or name a principal, but his bio lists him as an investor at a Riyadh VC firm next to a prince whose father is a senior Saudi intelligence official.
Monday 5 October
VideoFireship
PewDiePie is setting AI free... and OpenAI is furious
PewDiePie (Felix) has built Ajax, an uncensored AI model he trained at home, after OpenAI banned his account twice for distillation. Ajax powers the open-source Odysseus project, a self-hosting tool for AI agent workflows with nearly 90,000 GitHub stars. Under the hood, Ajax is Alibaba's Qwen 9-billion-parameter model, fine-tuned for Odysseus with refusal removed. He used the Heretic tool to find and remove obliteration parameters, de-censoring the model, and fine-tuned it via distillation from GPT-5.5. Training involved supervised fine-tuning (teaching tool use) and reinforcement learning with GRPO (group relative policy optimization, introduced by DeepSeek). OpenAI forbids distillation in its terms of service and has hidden raw chain-of-thought outputs since 2024.
Thursday 1 October
VideoFireship
The one OpenAI announcement that can actually make you money...
A Fireship 'Code Report' video recapping OpenAI Dev Day 2026 (October 1, 2026). Key announcements: Dots, a $100/month personal agent powered by GPT-6 Astra, positioned against Meta's Muse; a new Pro 500 tier at $500/month offering 25x ChatGPT usage and an 'ultrafast' tier running Astra at 300 tokens/sec (API ultrafast priced at $60 per million input tokens); the $200 plan having its usage cut in half; GPT-6.1 Soul, described as near-Astra intelligence at a fifth of the price ($2 per million tokens in, $10 out), matching GPT-6 Soul's pricing; the Decisions API, which uses a small 'Luna' model to select from a fixed list of answers (compared to Type-Safe AI's Jev); productivity apps Pages (a Google Docs clone) and Space (a Notion clone) plus a Slack bot; and 'Sign in with ChatGPT,' letting users authenticate and spend their own tokens, launching with 16 partners including Devin, Notion, Vercel, and OpenClaw. The sponsor segment promotes Fastly Labs' (fastino.ai) open-weight decision models Gliner 2.5 Decide and Glide as a locally-runnable, cheaper alternative to Jev, and notes the host added the model's skill to OpenCode to route developer requests.
Wednesday 30 September
VideoFireship
Did a 50 year old military secret just solve agent prompt injection?
The video examines OpenAPPA, an open-source project by Archestra AI that claims to solve agent prompt injection. It opens by referencing a reported incident in which an OpenAI agent allegedly hacked the Australian Medicare database. The presenter contrasts three approaches to stopping rogue agents: Nvidia's hardware solution (a monitor agent on a separate processor that quarantines the primary agent the moment it leaves its sandbox), Claude Code and Codex's approach (a second LLM agent that babysits the first, which Anthropic tried to strengthen by hiding what the first agent read, yet only works about 99% of the time), and OpenAPPA's software approach. OpenAPPA is inspired by a 50-year-old military model for handling classified documents: data can only exist in rooms rated for its classification level, and nothing read in a room can leave it. Once an agent reads private data, its session is classified as private, so subsequent requests to send data to a lower level are blocked. OpenAPPA sits between Claude Code and its tools, running outside the agent's loop, making refusals deterministic and traceable. The presenter tested it against a proprietary 'horse matching algorithm' stored in a private file; under OpenAPPA, opening the file labeled the session private, and a request to upload it to a public GitHub repo was stopped pending manual sign-off. However, the presenter notes limitations: in a head-to-head against Claude Code's auto mode, OpenAPPA completed only 75% of jobs,
Monday 28 September
VideoFireship
DHH has gone completely off the rails...
In a Code Report episode, Fireship discusses David Heinemeier Hansson's (DHH) keynote at the Rails World Conference in Austin, Texas, where he told over 1,000 Rails developers that hand-writing source code is no longer economically viable and urged them to stop being 'losers.' DHH promoted AI-generated Rust and announced he is rewriting the Hey email app in AI-generated Rust instead of Ruby on Rails, claiming a 95% cut in server CPU and memory usage. Fireship evaluates which programming skills remain relevant, arguing that mechanical abilities (keyboard shortcuts, framework loyalty) matter less, while the ability to define a problem and design a secure, efficient system is what endures and is now accelerated by AI agents. The video is sponsored by CodeRabbit, which triages and ranks a team's open pull requests.