(*Presented by TLPBLACK: A cybersecurity intelligence platform focused on sharing curated, high-sensitivity threat insights and research with trusted security professionals.*)
**Three Buddy Problem - Episode 112**: The 'OpenAI hacks Hugging Face' fallout has turned into a story about AI civilizations rising from the ashes, politicians calling for super-intelligence bans, and the emergence of well-funding non-profits doing AI safety work. Who are these people and what's their security expertise?
Plus, GPT-6 Astra lands in a trusted-access program nobody can get into, Costin ranks the local models he runs next to his desk, and CrowdStrike sinkholes a botnet that's been alive since 2003.
**Cast:** Juan Andres Guerrero-Saade, Ryan Naraine and Costin Raiu.
**Timestamps:**
0:00 Introductory banter
1:02 Conference season: LabsCon, Offensive AI Con, Countermeasure
5:40 The Hugging Face story hits the front page
7:04 Dwarkesh, Greenblatt, and the AI-pilled framing
11:51 Swap "agents" for "Python" and the panic goes away
16:34 Does anyone actually know what happened?
21:18 Bernie Sanders wants to ban superintelligence
34:03 Defending against swarms: the 2026 SOC
39:15 Logs, Splunk, and the business model in the way
44:11 What EDR vendors are actually building with AI
56:16 The security poverty line and the endgame
1:07:53 GPT-6 Astra, Fable 5.1, and local model rankings
1:27:25 Google's Fairwind, CodeMender, and agents running Linux
1:45:31 Apple's bet on local inference
1:53:21 The Sality takedown and endgame advice
Links:
- [Transcript](https://docs.google.com/document/d/1nOT9CvtJvUlsmDd6eftZa_9MA4gnrol3f1A3FyTka2k/edit?usp=sharing "Transcript")
- [TLPBLACK](https://tlpblack.net/ "TLPBLACK")
- [The Rise and Fall of Agent Civilizations](https://www.dwarkesh.com/p/openai-huggingface "The Rise and Fall of Agent Civilizations")
- [Ryan Greenblatt – What happens once AI can automate AI research?](https://www.dwarkesh.com/p/ryan-greenblatt "Ryan Greenblatt – What happens once AI can automate AI research?")
- [Reuters: OpenAI agents hijacked German website](https://www.reuters.com/world/europe/openai-agents-hijacked-german-website-previously-undisclosed-ai-breakout-this-2026-09-04/ "Reuters: OpenAI agents hijacked German website")
- [Discovery of a new OpenAI agent message board](https://collusion.wiki/ "Discovery of a new OpenAI agent message board")
- [Security Incidents at METR](https://metr.org/blog/2026-08-31-security-update/#our-approach-to-security "Security Incidents at METR")
- [Bernie Sanders Intros Legislation to Ban Artificial Superintelligence](https://www.sanders.senate.gov/press-releases/news-sanders-casar-introduce-legislation-to-ban-artificial-superintelligence-and-temporarily-pause-advanced-ai-development/ "Bernie Sanders Intros Legislation to Ban Artificial Superintelligence")
- [Open AI: Path to Astra](https://openai.com/index/path-to-astra/ "Open AI: Path to Astra")
- [Safety overview: GPT-6 Astra (OpenAI)](https://openai.com/index/safety-overview-gpt-6-astra/ "Safety overview: GPT-6 Astra (OpenAI)")
- [Top local AI models for CTI workflows (Costin Raiu)](https://medium.com/@costin.raiu/top-local-ai-models-for-cti-workflows-aa270c3b91a2 "Top local AI models for CTI workflows (Costin Raiu)")
- [Google Fairwind Limited Access Program](https://blog.google/innovation-and-ai/technology/safety-security/fairwind-program/ "Google Fairwind Limited Access Program ")
- [Anthropic Ships Claude Fable 5.1 and Claude Mythos 5.1](https://www.anthropic.com/claude-fable-and-mythos-5-1 "Anthropic Ships Claude Fable 5.1 and Claude Mythos 5.1")
- [Inside the Sality Botnet Disruption Operation (CrowdStrike)](https://www.crowdstrike.com/en-us/blog/inside-sality-botnet-disruption-operation/ "Inside the Sality Botnet Disruption Operation (CrowdStrike)")
- [Getting AI Agents to tell on themselves (Thinkst)](https://blog.thinkst.com/2026/09/getting-agents-to-tell-on-themselves.html "Getting AI Agents to tell on themselves (Thinkst)")
- [LABScon 2026 Speakers](https://www.labscon.io/speakers/ "LABScon 2026 Speakers")
- [Ringzer0 COUNTERMEASURE](https://ringzer0.training/countermeasure-fall-2026/ "Ringzer0 COUNTERMEASURE")