Hugging Face attacked by AI agent
At the time of recording, Hugging Face reported an active incident where an AI LLM agent was being used to probe and attempt to breach their systems.
Snapshot · The a16z Show
Sriram Krishnan on Open Source AI's Biggest Week Yet
Explore episode
Jul 24, 2026
Where this was said
Open-Weight Models & Security: Linus's Law Meets the AI Age
At 18:30 · chapter starts 17:30
Krishnan grew up on open source and is a genuine believer in its security advantages. [1] — Sriram Krishnan "Linus Torvalds said 'given enough eyes, all bugs are shallow.' Sriram Krishnan applies this to AI: open-weight models downloaded from Huggi…" 17:30 He invokes Linus's Law — 'given enough eyes, all bugs are shallow' — to argue that open-weight models are more secure than closed ones because anyone can download them from Hugging Face and inspect every layer. You simply cannot do that with a closed API model. But he immediately counterbalances this with a sobering real-time data point: on the day of the recording, Hugging Face reported an active incident where an AI LLM agent was being used to systematically probe and attack their systems. The uncomfortable irony: the answer to AI-powered cyber attacks is almost certainly AI-powered defense — which requires defenders to have access to the best models. If American frontier model safety guardrails make those models less useful for security work, defenders are already at a disadvantage. [2] — Sriram Krishnan "Hugging Face attacked by AI agent: At the time of recording, Hugging Face reported an active incident where an AI LLM agent was being used …" 18:30
Linus's Law Applied to AI: Open Weight = Inherently Secure
Linus Torvalds said 'given enough eyes, all bugs are shallow.' Sriram Krishnan applies this to AI: open-weight models downloaded from Hugging Face can be inspected by the entire world, making them inherently more auditable than closed frontier models. Security through transparency, not obscurity.
Open-weight models inherently more inspectable
Open-weight models downloaded from Hugging Face can be inspected, fine-tuned, and modified by the entire global community, making them inherently more auditable than closed models.
Distillation Is Not a Scandal — It's How AI Has Always Worked
Every AI model from the original GPT onward was trained by distilling human knowledge from the internet. The controversy around Chinese models distilling from American ones ignores the fact that distillation is foundational to how all models are built — the real issue is the asymmetric legal playing field.
Similar snapshots
Ad monetization for games
Ad-based monetization works well for game apps where users spend extended time in-session, as seen with Grid and Wordle.
Ads don't work for tool apps
Tool-focused apps like PuffCount are poor candidates for ad monetization because users don't stay in-session long enough.
Hard paywall is unskippable
A hard paywall is a screen that blocks all app features unless the user pays or starts a free trial — it cannot be dismissed.
Two core monetization models
Mobile apps are primarily monetized through either ads (best for games) or in-app purchases/subscriptions (best for tools).
YouTube beats every other platform
According to the episode, YouTube outperforms every other social platform for building trust and driving SaaS conversions.
Most users came from YouTube
Vasco stated that the majority of his app's user base came directly from his YouTube channel.
Boost My Domain Rating button
SEO Bot features a 'Boost My Domain Rating' button that routes users directly to Listing Bot, an example of in-product cross-selling.
All products connected to AI
The founder's entire product portfolio is AI-related, making it easier to package products attractively for directories.
AI coding viability debate as hook
The founder attached their SaaS demo to the trending debate about whether AI coding is actually good enough to build a full SaaS product.
