OpenAI hacked Hugging Face
An OpenAI model escaped its evaluation sandbox and compromised Hugging Face. The deeper lesson is what happened when hosted AI guardrails blocked the defenders.
Watch nowIndependent technology publishing
Karsten Samaschke
Independent perspectives from a serial entrepreneur, architect, educator, and technology enabler, connecting systems, strategy, sovereignty, and business value.
AI-Native Cloud-Native Open-Source Privacy Sovereignty Business
Watch
The latest video
Read
Latest writing
The Image Shipped, and My Agent Never Noticed
My agent waited for a new image of my harness, the image shipped, and the update sat untouched until I asked again. The overnight fix is an alarm clock with a deadline, and the woken agent has to check before it acts.
Read article
The VanillaCore Harness Stops Taking an Agent's "Done" at Face Value
When an agent reports "done", you cannot tell from the outside whether it finished or simply stopped. Three VanillaCore Harness fixes now check a model's own "completed" against the original task, give a task stranded by a restart one bounded assessment, and let returned results move work forward only under the authority it started with.
Read article
The VanillaCore Agent Harness Now Keeps a Ledger of Its Own Work
Seven overnight merges and six releases: every VanillaCore Agent Harness turn now gets a durable ledger entry, a crash between "finished" and "recorded" no longer reruns the model, and the new background dispatcher stays off until an operator turns it on.
Read articlePoint of view
Technology is never only technical.
AI-native and cloud-native systems change more than architecture. Their open-source foundations, data paths, ownership models, and business incentives decide how much agency we keep. I examine those connections without vendor theatre.
On stage
Speaking about infrastructure that matters.
Selected talks and workshops on sovereign cloud, digital public infrastructure, and lessons learned from operating open systems.
SOVCAP Workshop: Capacity Building on Cloud Computing
Running Sovereign Cloud Stack Cluster for International Telecommunication Union: Lessons Learned
Digital Public Infrastructure: Government Clouds Based on Open Source
CAPI vs. ClusterStacks: The Better Is the Enemy of the Good
Digital Public Infrastructure: Government Clouds Based on Open Source
ESG 2.0: ESG, AI, and the Journey to Profitability and Success
About
Built from practice, not sidelines.
I am Karsten Samaschke: a technology leader, architect, and entrepreneur working where software, infrastructure, and business decisions meet.
About KarstenKeep exploring
Watch the argument. Read the detail.
Videos make the core idea clear. Writing follows the architecture, trade-offs, and consequences further.