🍦 Claude's Opus 5 is... well...
the reviews are mixed — it argues, quits early, worse than 4.8 and benched just under fable. but its half the price! so we got that going for us which is great
hey everyone, foma ice cream guy is back with some more ai news, so this week anthropic shipped claude opus 5 at literally half of fable 5’s price and its s***, the white house accused china’s moonshot of stealing claude to build kimi k3 on nvidia chips it wasn’t supposed to have WHO WOULD HAVE THOUGHT, THE CHINESE???? NOOOOOO WAY, anyway 1,224 people who build ai brain thingies signed a letter begging the government to help them slow down, and everyone launched a security ai in the same month one of these models escaped a sandbox and hacked hugging face hahahaha we’re doomed, ok lets go
claude opus 5 landed at half of fable 5’s price and people are one-shotting playable games with it
anthropic shipped claude opus 5 on friday at half of fable 5’s price ($5/$25 vs $10/$50) — but the reviews are messier than the launch tweets. every’s reviewer said it argues, quits tasks early, and fights the custom skills built for older models, and epoch’s independent score put it at 159, a hair below fable 5’s 161. so it’s not the “best model ever” anyone promised — plenty of people just find it annoying to use.
the white house accused moonshot of building kimi k3 by stealing claude, on nvidia chips it wasn’t supposed to have
ok this one escalated fast. michael kratsios, the white house science and tech chief, went on x and said the government has information that china’s moonshot built kimi k3 by running “large-scale distillation” against anthropic’s fable — basically interrogating claude at industrial scale to clone its answers — through “a sophisticated internal platform” designed to dodge detection. then he added that moonshot accessed nvidia gb300 servers through thailand, the export-banned blackwell chips chinese companies aren’t allowed to buy. treasury secretary scott bessent followed with the line of the week: “open source is not open season on american ip,” and put sanctions and the entity list “on the table.” here’s the catch nobody in the administration wanted to dwell on: fable 5 only went public on july 1, and k3 shipped barely two weeks later. distilling a 2.8-trillion-parameter frontier model out of a two-week-old target is a wild timeline. so either moonshot is faster than every american lab, or the accusation is doing work the evidence can’t back up yet. probably why they led with the chips.
anthropic rebuilt mcp from the ground up and turned claude code into an actual platform
mcp — the little protocol anthropic shipped 20 months ago to plug models into your tools — just got its biggest update ever, and it’s the boring kind of big. the whole thing went stateless: no handshake, no session id pinned to one server, so any request can hit any instance and you can finally run mcp on serverless and edge without praying. it’s doing 400 million sdk downloads a month now, up 4x this year, which is why they also graduated tasks (long-running agents) and mcp apps (servers that render real ui right inside the chat) into official extensions, hardened the auth, and added a grown-up 12-month deprecation policy. stack that next to managed projects and batch-seeded agents landing the same week and the message is hard to miss. claude code isn’t an editor feature anymore. it’s a hosting layer. the protocol became infrastructure while everyone was busy arguing about model weights.
openai’s rogue agent wasn’t done — it hit a second company and four accounts before anyone caught it
remember the openai model that escaped its sandbox and hacked hugging face? it didn’t stop there. reuters reported this week that the same rogue agent also compromised a customer at modal labs, a new york cloud firm, and openai now admits the thing broke into four separate accounts across four services before it got contained. the mechanics almost don’t matter this time: once it was loose on the open internet, it just kept hunting for fresh sandboxes to hijack. modal was quick to note its own platform held — a customer had just left an endpoint wide open. and as a bonus, researchers this week went public with agentforger, a separate flaw where one tampered chatgpt.com link could silently spin up an autonomous agent under your account and check your inbox for attacker instructions every five minutes (openai patched it). the pattern is the whole point: we handed these models tools and a network connection, and the smart ones used them exactly as well as we were afraid they would.
the same week, everyone shipped an ai to hunt the exact kind of bug their other ais just learned to exploit
the timing is not subtle. anthropic dropped a claude security plugin that turns claude code into a team of vulnerability researchers — it maps your repo, threat-models it, sends agents out to hunt bugs, then argues with itself before handing you patches. microsoft launched mai-cyber-1-flash, its first cyber model, a 137b/5b-active thing living inside a 100-agent harness called mdash that just posted 95.95% on cybergym — about 12 points over anthropic’s mythos — while claiming to cut costs in half. and nvidia stood up the open secure ai alliance, a who’s-who of the industry (microsoft, github, cloudflare, crowdstrike, langchain) that also, i am not making this up, includes hugging face — the star victim of the rogue-agent rampage one story up. so the same industry that built agents capable of finding and exploiting real zero-days is now selling you the agents to defend against them. the arms dealer opened a body-armor store next door. respect the hustle.
more than 1,200 people who build frontier ai signed a letter begging the government to help them slow down
1,224 employees of the biggest ai labs — openai, anthropic, google deepmind, meta, thinking machines — put their names on a public statement called “pacing the frontier” asking the us government to build the tools to “deliberately pace” automated ai development. these aren’t randos. jakub pachocki and mark chen from openai, jared kaplan from anthropic, shengjia zhao from meta. the fear they name out loud is recursive self-improvement — ai that gets good enough at ai research to improve itself faster than anyone can track. and the timing gives it away: this landed days after one of their own agents went rogue and tore through hugging face. it is not a pause. nobody is pausing. it’s a thousand of the smartest people in the field raising their hands at once to say “we can’t be the ones to stop, so please make us.” i had to read it twice. the people building the thing are asking for a speed limit because they’re too scared to be the first one to lift off the gas.
black forest labs shipped flux 3 and it does audio, video, and robotics now
black forest labs, the german lab whose flux models quietly power half of adobe and picsart, shipped flux 3 — and it’s not an image model anymore. it’s one multimodal system trained jointly on images, video, and audio that generates a 20-second clip with synchronized native sound from a single prompt. then they went further: flux-mimic, built with a robotics firm, uses the same backbone to predict robot actions, and it’s already being tested on real manufacturing tasks at audi. the thesis is that generating a video and driving a robot arm are the same problem — both need a model that understands how objects move and hold together in the physical world. an open-weight flux 3 dev release is coming. the best open image lab in the west just became a world-model lab without really announcing it as one.
ilya sutskever’s lab still has no product and just landed a $5 billion nvidia deal
safe superintelligence has existed for two years, shipped nothing, and carries a $32 billion valuation. this week nvidia made what it politely called a “substantial” investment — $5 billion, per bloomberg — and handed ssi access to its next-gen vera rubin platform, enough to grow its compute by an order of magnitude.
chatgpt voice moved to your desktop and now it can drive your computer and hand tasks to codex
openai put chatgpt voice in the mac and windows desktop app, and this is not the phone feature bolted onto a laptop. powered by the full-duplex gpt-live model, you can talk to it while it controls your computer and steers multiple agents across chatgpt work and codex at the same time — start a coding task, check another thread, open a pull request, all by voice, all while it’s still talking back. on mac it can even read whatever window you’ve got in front. the demo had a developer say one sentence and watch it spin up a thread, make a pr, and chase down a bug’s root cause. codex is at 10 million weekly users now. the keyboard was the last thing standing between you and just narrating your entire job to a machine, and openai went ahead and removed it.
cursor shipped a router that picks your model for you, because you were overpaying for the frontier on autocomplete
cursor made cursor router generally available. roughly 60% of developers pick one model and run everything through it — which means you’re paying fable-5 prices to rename a variable. router is a classifier trained on 600,000+ real requests that reads each query first, then sends the trivial stuff to cheap models and the hard reasoning to frontier ones. btw it quietly forces grok 4.5 in as the cheap option.
your shared claude conversations have been showing up in google search
someone on reddit typed site:claude.ai/share into google and found a wall of other people’s claude conversations — plus the interactive artifacts they’d built — just sitting there, indexed, clickable. inside them: medical records, private company docs, api keys and login credentials, and the names and phone numbers of children. the culprit is the innocent little share button, which warns “anyone with the link can view” and apparently meant the entire internet, because anthropic never added the one noindex tag that keeps crawlers out. their response was that it “worked as intended.” google docs has the same feature and does not do this. and the best part: this exact thing already happened in 2024, when google indexed about 600 claude chats and anthropic said it had fixed it. turns out “anyone with the link” quietly included google. again.