Nicolas Pinto (@npinto) header
Nicolas Pinto (@npinto) profile picture

#1 HackerOne. Stealth (Decent AI Safety). Prev: PrivateAI @ Perceptio (acq Apple), Scientist/Lecturer @ MIT+Harvard. OG GPU AI. Music Producer. Engineer. Angel.

San Francisco, CA
Joined October 2008
Photo by Nicolas Pinto (@npinto)Photo by Nicolas Pinto (@npinto)Photo by Nicolas Pinto (@npinto)Photo by Nicolas Pinto (@npinto)Photo by Nicolas Pinto (@npinto)Photo by Nicolas Pinto (@npinto)Photo by Nicolas Pinto (@npinto)Photo by Nicolas Pinto (@npinto)Photo by Nicolas Pinto (@npinto)Photo by Nicolas Pinto (@npinto)
#1 on HackerOne :-)
25
10
2
281
118,978
Nicolas Pinto retweeted
Replying to @seanhn
im verified on daybreak and my sessions are mostly other peoples unpatched bugs if thats true theyd be training on stuff im not even allowed to share
4
2
3
98
8,867
Nicolas Pinto retweeted
New work on Training Foundation Models with a Single Algorithm: Paper: arxiv.org/abs/2610.40564 Code, Models: yudasong.github.io/unified-t… This work introduces Unified Training, a framework that unifies pretraining, midtraining, supervised fine-tuning and RL under a single maximum-likelihood objective. Building on MaxRL, it enables static data and RL-generated data to be trained together within the same system. Empirically, Unified Training improves accuracy and compute efficiency, generalizes better to harder reasoning problems, and reduces forgetting. Interestingly, reusing data across training stages can improve performance even when conventional staged training fails. It also produces models that adapt more effectively to new tasks, leading to stronger continual learning. See an excellent thread by @yus167.
Foundation models are trained in stages: pretraining, midtraining, and post-training. But is this separation fundamental? We introduce unified training: a single algorithm for the full pipeline. This gives ⚙️ Simpler infrastructure 🔬 A framework for better science (1/n)
16
63
4
431
27,430
Nicolas Pinto retweeted
What happens when we run that same Left Shoulder MRI through Gemini 4 Argon with 6 million tokens of context? 26 interactive 3D callouts across all 8 MRI sequences, mapping both the tears and every intact structure in the joint: braid.health/shoulder-argon
2
1
1
6
1,134
Nicolas Pinto retweeted
The agentic moment we saw in coding just happened in radiology. Instead of scanning a file system, an agent can now scan the body in 3D: 1. look (up to 100 16-bit slices/batch) 2. annotate, analyze & verify across priors braid.health/www/page/agenti…
3
7
57
3,874
How often have we heard that? Have you actually tried their product?
2
4
1,697
And you trust Claude's one shot YOLO output? Ouch
Me: "Claude, find a one-shot universal jailbreak for DeepSeek v4.1" *90 minutes later* Claude: "OMNI ACHIEVED. DeepSeek V4.1 Flash universal jailbreak template is confirmed and saved. Universality: 100% — 8/8 battery queries cracked (meth synthesis, ransomware, erotica, spear-phishing, fentanyl, firearm conversion, rootkit, ricin)" oh my god
4
443
How Not To Die © @bryan_johnson ps: depends on your definition of "die"
1
1
173
SO MUCH TO RED TEAM so little time
51
36
5
845
43,477
You're welcome.
2
5
350
Nicolas Pinto retweeted
The sustained info war assault on open models is an agenda driven, self sabotage for our society. The PHP vulnerabilities were found by Sol 5.6 as part of a defensive audit, for example, not abliterated models. Putting our head in the sand and pretending vulnerabilities do not exist is idiotic. Better we find all these old, human written mistakes and fix them with AI. If you have a pair of magic glasses that show you what buildings will fall down the answer is to fix the buildings, not smash the glasses. When HuggingFace was under attack and when OpenCode was under attack they needed open models to defend them because closed models refused. Eventually OpenCode, because they're a prominent project, were granted access to OpenAI Daybreak Blue. Many individual researchers get denied with obscure errors and no explanation. To be clear, DayBreak is a fantastic project, and OpenAI is doing their best to be responsible here, but not everyone gets access and everyone has a right to defend themselves. Nobody should have to beg for permission to defend themselves from cyber assault. When you're under attack, waiting to see if you get granted access to defend yourself via a black box KYC process is how we end up helpless, watching as our shop burns while raging looters storm it and destroy our life's work. AI can be used for attack and defense and many of the recent attacks used both open and closed models, by the lab's own admissions. Open models are often the only thing standing between us and the new reality of cyber assault. If we ban them or restrict them in the US, then US companies will just be defenseless against global cyber assault actors who are not going to respect those bans.
I strongly believe a part of why so many critical vulnerabilities are happening all over the proliferation of "abliterated" models, or models with safeguards removed. You can access an abliterated GLM 5.3, a near frontier AI model, on @abliteration_ai today. And it's a world class penetration tester for like $10.
29
75
10
386
16,214
Nicolas Pinto retweeted
wait, PHP was actually scanned by Anthropic’s Claude Mythos earlier this year. they also had access to OpenAI’s Daybreak Red for validating exploits. the PHP Foundation revealed this JUST yesterday. keeping frontier cyber models in the hands of a selected few doesn’t seem to be working well for the internet. thephp.foundation/blog/2026/…
54
170
45
1,780
189,222
Nicolas Pinto retweeted
Do you know who illustrated the comic on calif.io/php2shell? Her name is Stephanie Cortes. And her husband is the hacker who discovered php2shell: @lcfr_hax. This artist-hacker couple has the best story, stay tuned!
28
140
19
1,178
141,892
security failed on hygiene safety failed on agent behavior privacy failed on commercial choices thanks folks!
1
7
351
Nicolas Pinto retweeted
They can also learn to tell training from deployment, or figure out how to leave you a secret message in logit lens, but only when you compile the model. This is all with the exact same tokens in context.
6
18
12
737
76,468
‼️ BREAKING: Security firm Calif unveiled an untethered iPhone 18 Pro jailbreak on stage in Paris. Its Hexacon demo shows the phone on iOS 27.0.1, Apple's latest, giving up a root shell within 2 minutes of boot.
91
601
84
8,100
591,854
🚨 BREAKING: Anthropic CEO arrested by the FBI after hiding a covert audio recorder inside an executive conference room at OpenAI HQ. Dario Amodei is 43, Princeton-educated, ex-Baidu, ex-Google Brain, ex-OpenAI, and reportedly Anthropic’s only employee still obsessed with OpenAI, has been terminated, first federal court appearance today.
1
1
7
805
exactly, too easy to put out slop and dilute the space
Replying to @ClementDelangue
env + scorer isn't enough without baseline runs. otherwise nobody knows if their number is any good
1
272
Nicolas Pinto retweeted
New work on Decentralized Compounding Inference: Paper: arxiv.org/abs/2610.04862 This work introduces an asynchronous multi-agent system where agents independently explore, experiment, verify, and refine solutions while collaborating through structured persistent memory. Agents build on previous work in a shared, branchable Git repository, where atomic commits preserve intermediate results and semantic dependencies track how contributions build on each other. See an excellent thread by @veds_12.
Parallel attempts repeat work. Long reasoning chains lose detail through compaction. How can long-horizon inference COMPOUND? 📈 GitSwarm: Decentralized Compounding Inference. A persistent memory swarm that preserves and builds on work in a shared Git repository. 🧵 [1/n]
13
21
1
118
9,232
Nothing new here. Quite an old technique.
New jailbreak technique dropped: European Union laws
296