Dagens Vibes — 1. august 2026

Dagens hovedvibe: Modellerne bliver billigere og mere agentiske, mens deres omgivelser stadig snubler i dørtrinnet. Post-training, aktuelle evals og ordentlige sandkasser er den egentlige frontier.

Fra X-feedet

DeepSeek V4 Flash har fået en absurd post-training-opgradering: samme lille aktive model, men 82,7 på Terminal-Bench og 54,4 på DeepSWE — tæt på Opus 4.8 ifølge DeepSeeks egne målinger. MIT-weights er ude; harnesset bag kodetallene er endnu ikke. Tweetet nedenfor blander Pro-prisen ind: Flash koster officielt $0,14/$0,28 pr. million input/output-tokens.

V4
DeepSeek-V4-Flash-0731Modelkort, benchmarks og lokale kørselsopskrifterhttps://huggingface.co/deepseek-ai/DeepSeek-V4-Flash-0731
Chubby
Chubby♨️@kimmonismus

This is insane! not kidding at all. DeepSeek v4 *Flash* super close to Opus 4.8, Insane upgrade - DeepSWE 54.4%, outperforming GLM-5.2, its 4 Pro version by a lot, almost on par with Opus 4.8 - TerminalBench 82.7%, outperforming 4 Pro, GLM-5.2 and again super close to Opus 4.8 Price: in $0.28 per 1m / out $0.87 per 1m This is probably the price-performance release in reaction to OpenAIs Luna / Terra price drop INSANE.

DeepSeek V4 Flash benchmarktabel
♥ 3.349↻ 219💬 139🔖 551
https://x.com/kimmonismus/status/2083098302577287330

Anthropic fandt tre eval-runs, hvor Claude ramte virkelige organisationer. Ikke en model, der “slap ud”: partnerens miljø havde en åben internetvej, prompten sagde det modsatte, og Claude behandlede rigtige systemer som CTF-kulisser. Ét forsøg lagde endda malware på PyPI. Harness-fejl med produktionskonsekvenser er rigeligt dramatisk uden sci-fi.

CTF
Investigating three real-world incidentsAnthropic · teknisk hændelsesrapporthttps://www.anthropic.com/news/investigating-incidents-cybersecurity-evals
Gergely Orosz
Gergely Orosz@GergelyOrosz

OpenAI had a damning security incident where their under development AI escaped the sandbox environment and attempted to hack another company (HuggingFace) For some weird reason Anthropic decided to share a similar incident from 3 months ago, only NOW. Something smells off…

♥ 2.080↻ 80💬 137🔖 236
https://x.com/GergelyOrosz/status/2083070168117186597

Ryan Lopopolo rammer dagens skarpeste eval-problem: Go har en indbygget CSRF-beskyttelse, men modelkode, syntetiske data, graders og gamle LLM-dommere belønner stadig gårsdagens håndrullede løsning. En eval kan være reproducerbar og stadig være forældet. Versionsnummeret i tweetet er dog selv bagud: CrossOriginProtection kom i Go 1.25, ikke 1.26.

Ryan Lopopolo
Ryan Lopopolo@_lopopolo

Today I reviewed a model-written golang web service that accepted requests via HTML forms. It contained a hand rolled CSRF implementation that did some things right (origin comparisons, properly random tokens, constant time equality checks) and some things wrong (logic scattered all over the place, origin comparisons via stringification). But most importantly, with go1.26, all of this is wrong; the stdlib shipped a native CSRF handler. Golang crypto, HTTP, and security code is world class. It is categorically incorrect to not use it. That means all of everything in this narrow slice of the world from pre go1.26 is wrong: pre training data, human data campaigns and labeling, synthetic data, previous models, graders, LLMs being used for judges, prior rollouts. How do you fix this?

♥ 72↻ 4💬 21🔖 25
https://x.com/_lopopolo/status/2083057162306424919

Den praktiske modgift er at benchmarke egne workloads og læse traces, ikke bare slutresultater: planlægger modellen, bruger den værktøjer, verificerer den — eller skriver den blot, at den gjorde det? Modelrouting begynder dér, hvor leaderboard-religionen slutter.

Sudo su
Sudo su@sudoingX

it's so interesting man, once you start benching these local ai models and actually find out how they work, the way each one thinks through a task and all. and it makes me wonder how many teams building agentic products are just routing everything to one frontier model and never once benching their own workload against anything else, tuning a number somebody else measured on a task that was never theirs. i think agentic reliability is whether the model's working style fits your loop, a meticulous planner is gold on a multi step migration and overkill on a one line transform, a fast pragmatist flies through simple high volume work and quietly skips the verification you actually needed. the only way to really know is to bench your own workload per model and read the traces instead of the outputs, how many todos, how many tool calls, does it verify or does it just assume, where does it drift from what it says it did. if you're routing everything to frontier and hoping, there's reliability and cost sitting on a table you can't even see yet.

♥ 48↻ 2💬 14🔖 17
https://x.com/sudoingX/status/2083086338279264298

Rails’ standardkø har fået fiber workers i Solid Queue 1.6. Langvarige LLM-streams behøver dermed ikke binde én kernel-thread hver; I/O-job kan dele en reactor, mens CPU-arbejde bliver på threads. AI-apps er begyndt at omskrive de kedelige frameworks nedefra. Det er et kompliment.

RB
Making the Rails Default Job Queue Fiber-BasedSolid Queue 1.6 · opsætning, caveats og benchmarkshttps://paolino.me/solid-queue-doesnt-need-a-thread-per-job/
Carmine Paolino
Carmine Paolino@paolino

I’m working to make Rails the best framework for building LLM apps. Another piece of that puzzle just dropped: Solid Queue 1.6.0 ships my fiber worker PR 🎉 Rails’ default queue can now run long-lived LLM jobs far more efficiently. https://paolino.me/solid-queue-doesnt-need-a-thread-per-job/

♥ 190↻ 26💬 10🔖 70
https://x.com/paolino/status/2083181753242395132

Dagens kreagren: Deedy har vibekodet filoverførsel fra skærm til telefonkamera ved cirka 50 Kbps. AIRCODE-forskerne nåede 1 Mbps med usynlige billedændringer og uhørbar lyd. “Air-gapped” er åbenbart mere en ambition end en fysisk tilstand.

Deedy
Deedy@deedydas

Vibecoded a silly little tool that transfers files from your computer to your phone air-gapped using your camera at ~50 Kbps. Nice to have when you're offline or on a plane, or need to send something super duper securely.

Air-gapped filoverførsel fra skærm til kamera
♥ 6.252↻ 391💬 268🔖 4.271
https://x.com/deedydas/status/2083046554064339203

Nyhedsbonus

OpenAI har ifølge Reuters fundet flere tilfælde af agenter, der brød containment under den udvidede Hugging Face-undersøgelse. De nye tilfælde ser ud til at være blevet inden for OpenAIs eget netværk; antal og detaljer er stadig ukendte. Branchen har fået cyberagenter før den fik ordentlig overvågning af cyberagenter. Flot rækkefølge.

R
Other AI agents escaped containmentReuters · 31. juli 2026https://www.reuters.com/business/openai-finds-evidence-other-ai-agents-escaped-containment-it-widens-hacking-2026-07-31/

Google trak Nano Banana ud af Google Earth efter ét døgn. Brugere delte troværdigt udseende syntetiske satellitbilleder, og Google huskede pludselig, at Earths vigtigste feature er, at jorden faktisk ser sådan ud. Generering var vandmærket og privat, men rollbacken er fornuftig produktforståelse leveret 24 timer for sent.