Bullpen.News From Edwin Dorsey
Get Daily Recap Feedback

Friday, October 30, 2026

Back to today

From X

@gnoble79 24 clicks

George Noble on X

This is not what you want to see if you are a $CRWV bull. $CRWV remains one of our biggest shorts. We are short from $107. Only a takeunder from $NVDA will prevent bankruptcy. Subscribe to the Noble Update to receive our best ideas. 67% YTD performance based on a diversified book of longs AND shorts. We have unrivaled performance. We have decades of experience. We are battled tested and have been through numerous market cycles. We have a process. While others chase narratives and charts, we focus on valuation and fundamentals. KNOW WHAT YOU OWN. YOUR ATTENTION TO THIS MATTER IS GREATLY APPRECIATED.
@convequity 1 click

Convequity on X

A company gets an API key from a model provider (OpenAI, Anthropic, Google) and links it in OpenCode Console. OpenCode, the coding agent, uses that key to run models at the provider, billed to the company. It is a bearer credential: anyone with a copy can spend on the account. OpenCode disclosed unauthorized access to a legacy system being decommissioned. Keys for about 1.4% of Console users who linked external providers may have been exposed. OpenCode calls it a distillation attack. Users report charges for runs they never made. Provider terms generally make the key owner responsible, so the bill can land on the customer. A copied key works at the provider until revoked. OpenCode already runs on Cloudflare Workers, and Console is a gateway with budgets. Direct calls with a stolen key bypass Console and its budgets. Whether that legacy host ran on Cloudflare is undisclosed. In our view, customers need a control layer they own that keeps the raw provider key away from the agent and its vendor: a vault-held key, or Cloudflare ($NET) AI Gateway prepaid billing with no customer provider key, plus scoped keys, spend caps, per-user limits, alerts and full logs. F5 ($FFIV), Kong and LiteLLM offer related controls. We cannot say these would have stopped this breach. They can limit blast radius, spend and detection time: metrics we think a CFO will ask for before the next rollout.

Investor Letters

All letters

Another Haircut with Avy the Barber

SoFi’s stock case hinges on interest rates, tangible book value and private-credit loan sales after its $1.5 billion equity offering.

SOFI $22B
WHAT ARE WE DOING? “Contrarians At The Gate” 3 clicks

Twilio CEO: ‘Buy the dip!’

Twilio CEO Khozema Shipchandler urged investors to “buy the dip” after earnings sent the software maker’s shares down 17% after hours.

TWLO $31B
The Technology Letter 2 clicks

CoStar: 3Q26 Business Recap

CoStar’s 3Q26 revenue growth slowed to 14% as bookings fell to $37 million, while cost cuts lifted EBIT margin to 8.8%.

CSGP $12B
Speedwell Memos 3 clicks

Publications we follow

Every publication on this site, hand-picked.

129 publications

Newsletters 109

YouTube 4

Blogs 15

Seeking Alpha 67 of 269

Nominate a publication

X accounts we follow

Every account on this site, hand-picked.

91 accounts
Nominate an account

Investor letters we follow

190 firms

Sectors

Ordered by how often our editor reaches for them.