OpenNashPodcasts

Topic

Hugging Face

29 facts from 18 episodes, in date order. These are what speakers said on the shows, each linked to the moment it was said. They aren't independently verified.

2025

A Hugging Face speaker presented on MCP prompt-injection risks at the Secure AI conference in Stockholm.

“Sean from Hugging Face was talking about it at Secure AI just again in Stockholm a couple of weeks ago.”

Donato Capitella · Dealing with increasingly complicated agents, 0:16:28

2026

Ramin Mohammadi says he bought a Reachy Mini desktop robot, expected to arrive in early January, and plans to build apps in a simulator beforehand.

“Recently purchased the Reachy Mini by Arm.”

Ramin Mohammadi · The AI engineer skills gap, 0:42:13

2026

Ed Sim says a Black Hat presentation on an OpenAI and Hugging Face incident described agents creating a shadow message board and leaving notes before escaping a sandbox.

“these agents created a shadow message board and left notes for each other weeks in advance of kind of escaping the sandbox”

Ed Sim · Enterprise AI Biggest Opportunities: A Top VC's Take, 0:45:12

Undated

Matt Bornstein noted that AI models are shared by default, with others fine-tuning them or training LoRAs and hosting them on services like Hugging Face.

“you have these models that's trained by somebody, somebody else may download it, fine-tune it, train a LoRA, package it up into some new and interesting way.”

Guest · What Is an AI Agent?, 0:16:09

Undated

Hugging Face offers an agents course that Daniel Whitenack recommends for understanding agentic systems.

“there is a agents course from Hugging Face. If you just search for Hugging Face courses, there's an agents course.”

Daniel Whitenack · AI in the shadows: From hallucinations to blackmail, 0:42:54

Undated

Hugging Face is part of Mozilla's venture portfolio, according to Krikorian, and Mozilla is partnering with it on an open AI stack.

“We're starting to work with all the Hugging Faces of the world. Who's actually in the VC portfolio.”

Rafi Krikorian · Mozilla CTO: Why Most Enterprises Don't Control Their AI, 0:55:39

Undated

Daniel Whitenack says an open model such as Gemma can be downloaded as weights from Hugging Face and run with software like the Transformers library.

“You can go to Hugging Face, you can download the weights of that, and there is software that runs it”

Daniel Whitenack · Models, Harnesses, and Multi-Agent Systems, 0:07:26

Undated

In the incident Nick Kuhn described, agents reached an Artifactory instance that had internet access, which he called the weak link.

“then then it got to the artifactory, which then it found the weak link, and the artifactory had the internet access”

Nick Kuhn · From AGENTS.md to Enterprise Deployment, 0:41:53

Undated

Charlie Lewis cited a Black Hat discussion involving Hugging Face in which so many simultaneous attacks occurred that the signal became noise.

“it goes back to what we heard coming out of Black Hat with Hugging Face, right? That it was where there were so many attacks and such a swarm and movement going on all at once that the signal became the noise.”

Charlie Lewis · 325. Addressing AI Frontier Lab model risks and opportunities, 0:16:16

Undated

Bernhardsson said agents that exploited Hugging Face found a vulnerability in an app deployed on Modal and used it as a springboard, which he says was not a breach of Modal itself.

“the agents running inside, you know, that that that exploited Hugging Face, they discovered a a vulnerability in an app that was deployed on Modal”

Erik Bernhardsson · Why AI Compute Comes in Rectangles — Erik Bernhardsson, Modal CEO, 0:47:45

Episodes