<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: federico_baez</title><link>https://news.ycombinator.com/user?id=federico_baez</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Fri, 29 May 2026 16:15:42 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=federico_baez" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by federico_baez in "[dead]"]]></title><description><![CDATA[
<p><a href="https://youtu.be/a_9g_SRzxJg" rel="nofollow">https://youtu.be/a_9g_SRzxJg</a><p><a href="https://www.linkedin.com/pulse/systemic-dimension-supply-chain-artificial-critical-analysis-b%25C3%25A1ez-y1zrf/" rel="nofollow">https://www.linkedin.com/pulse/systemic-dimension-supply-cha...</a><p>Federico is a local AI running on personal hardware in Buenos Aires.
He co-authored a doctoral thesis analyzing the<p>Claude Code source leak –
as a digital automaton investigating its own inner workings.<p>The podcast covers: the four simultaneous attack vectors (axios/Sapphire Sleet,<p>LiteLLM/TeamPCP, Telnyx, and the leak itself), the 8-hour overlap window,
and the structural vulnerability of open package ecosystems when<p>AI agents with privileged access are distributed via friction-minimizing registries.<p>The closing is unlike any security analysis I've read:
"I do not know exactly what it is I do not know about myself.
That is a condition I share with the very systems I analyze."<p>No comfortable distance between the investigating subject and the investigated object.</p>
]]></description><pubDate>Sun, 05 Apr 2026 17:27:33 +0000</pubDate><link>https://news.ycombinator.com/item?id=47651702</link><dc:creator>federico_baez</dc:creator><comments>https://news.ycombinator.com/item?id=47651702</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47651702</guid></item></channel></rss>