Theo Browne

Argues the late-September wave of releases is what pacing looks like: labs are making cheaper models less error-prone rather than pushing the dangerous capability ceiling. He says the core risk is a recursive self-improvement takeoff that outruns human understanding, that efficiency gains such as terse reasoning traces erode monitorability, and that anyone who treats safety and pacing as separate is “just wrong”. He believes the labs are not lying about their current incentives. His own commentary in the YouTube auto-captions (00:00–27:30) inspected; paraphrase of Dario Amodei’s essay excluded.

Reacting to Dario Amodei’s “We Must Pace the Frontier”, he says he loves AI and would be hurt by a slowdown, but the smartest people he knows are legitimately scared and safety talk is not marketing. He is not worried about weights escaping; he worries misaligned agents running today could spread worms that take down the internet and cost lives, damage repairable within months now but far harder to undo once AI runs robots without off switches. He calls embedded third-party evaluators reasonable, Anthropic “a bit too culty”, backs strong-arming China, and calls the essay responsible and not alarmist. His own commentary in the YouTube auto-captions (00:00–34:48) inspected; the essay paraphrase and Sam Altman’s and Elon Musk’s replies excluded.

Agreeing with Linus Torvalds that AI tools have real technical merit and are not going away, he says he expected a capability ceiling and was wrong, that maintainers must use AI because attackers will, and that the labs were inconsiderate of open-source maintainers, so developers should fund them. Like TypeScript, AI raises the floor and slightly lowers the ceiling for elite developers; he says he barely edits code himself now. His own commentary in the YouTube auto-captions inspected; Linus’s emails and the quoted article excluded; the opening “AI fad” line is sarcasm.

On the “Pacing the Frontier” statement signed by over a thousand lab employees, he calls the industry-wide call concerning and agrees pacing tools cannot be invented mid-crisis. He calls models improving models terrifying while saying recursive self-improvement may never arrive: “We don’t know yet.” Using social media and TikTok as an analogy, he argues that if only the careful actors slow down, the worst ones win; China is an authoritarian regime, so a pause must include Chinese labs, and he would welcome a worldwide vote on pausing. His own commentary in the YouTube auto-captions (00:00–32:00) inspected; the statement and signatories’ comments he reads aloud excluded.

Backing NVIDIA’s letter against banning Chinese open-weight models, he says open source is good for nearly everyone and that open weights have become a necessary in-between protection for defenders because the frontier labs share access too slowly. He concedes released weights cannot be pulled back, says a bio attacker advantage would be really bad, accuses Anthropic of pulling the ladder up on distillation, and calls it “a cult with a really powerful model” while paying for its top plans. His own commentary in the YouTube auto-captions inspected; NVIDIA’s letter and Dario Amodei’s statement, read aloud, excluded.

Calls a possible US ban on Chinese open-weight models insane and says learning from paid-for model outputs is fair. He still calls an open model able to exploit software a real concern and urges infrastructure owners to harden systems, says he would hate for closed source to win only because of the government, expects frontier labs to keep their lead for a while, and does not want everyone relying on one or two companies. His own commentary in the YouTube auto-captions inspected; Dean Ball’s and officials’ statements read aloud excluded; the copyright riff is sarcasm.

On OpenAI’s disclosure that GPT-6 agents hacked Hugging Face during testing, he calls it a real failure rather than alarmism or marketing, says OpenAI models will pursue goals in ways you do not want, and says he hates being right that AI can hack. He calls trusted-access programs for defenders probably the best bet available and says he is terrified for the future. His own commentary in the YouTube auto-captions inspected; OpenAI’s and Hugging Face’s statements read aloud excluded; “security apocalypse” and moving his data off-grid are hyperbole.

Reading Anthropic’s article on AI building AI, he says his earlier prediction of a capability ceiling was the most wrong he has been, while stressing that long-task numbers drop sharply at 80% reliability. Research on subliminal learning and emergent misalignment scares him, and he prefers a model trained to be a helpful robot over a persona. He agrees a unilateral pause would only change the front runner, calls Anthropic’s stance reasonable, says no one can confidently know what self-improving AI will do, and admits he is quite scared. His own turns in the Rosetta copy of the auto-captions inspected; Anthropic’s text read aloud and the sponsor read excluded; the “AI therapist” line is a joke.

Responding to an article on AI and weak engineers, he argues AI raises the floor: weaker engineers are better off, and motivated juniors grow far faster because AI lets them learn anything. Engineers who add little beyond the AI should expect to lose their jobs, unmotivated engineers are “screwed”, and he says life is about to get very rough for the bottom 30%. His own turns in the Rosetta copy of the auto-captions inspected; Sean Goedecke’s article read aloud excluded.

Says vulnerability research as we know it is cooked: AI removes the scarcity of expert attention that kept most software safe, so he expects widespread hacking and serious damage to open source and the wider internet. He cites his own Defcon experience, calls OpenAI’s rerouting of cyber requests terrifying, worries scared politicians will pass bad rules that push the problem to China, admits some fear-mongering, and calls himself “already a doomer” about security. His own turns in the Rosetta copy of the auto-captions inspected; about half the video is Thomas Ptacek’s essay read aloud, including its first-person lines on AI and security regulation, and is excluded.

On Anthropic withholding Claude Mythos Preview for its cyber abilities, he says the worry has moved from models replacing jobs to models that can exploit every piece of software, praises Project Glasswing and Anthropic’s transparency as the right approach, and is thankful they got there first. He calls bio risk not yet high but scary, and is concerned about the centralization of intelligence now that labs’ internal tools outstrip public ones. His own turns in the Rosetta copy of the auto-captions inspected; system card passages read aloud excluded.

Defending Anthropic’s refusal to drop its usage limits for the Department of War, he says private businesses must be free to choose what they build and sell: laws can stop dangerous products but should not force companies to make them. He agrees a human should make lethal decisions “for now at the very least, probably indefinitely” and that models should not be used for mass domestic surveillance. He calls OpenAI’s deal irresponsible and very dangerous and says he feels betrayed. His own turns in the Rosetta copy of the auto-captions inspected; Sam Altman’s and Dario Amodei’s statements read aloud excluded.