Bullpen.News From Edwin Dorsey
Get Daily Recap Feedback

Saturday, November 7, 2026

Back to the front page

From X

@gnoble79 24 clicks

George Noble on X

This is not what you want to see if you are a $CRWV bull. $CRWV remains one of our biggest shorts. We are short from $107. Only a takeunder from $NVDA will prevent bankruptcy. Subscribe to the Noble Update to receive our best ideas. 67% YTD performance based on a diversified book of longs AND shorts. We have unrivaled performance. We have decades of experience. We are battled tested and have been through numerous market cycles. We have a process. While others chase narratives and charts, we focus on valuation and fundamentals. KNOW WHAT YOU OWN. YOUR ATTENTION TO THIS MATTER IS GREATLY APPRECIATED.
@convequity 1 click

Convequity on X

A company gets an API key from a model provider (OpenAI, Anthropic, Google) and links it in OpenCode Console. OpenCode, the coding agent, uses that key to run models at the provider, billed to the company. It is a bearer credential: anyone with a copy can spend on the account. OpenCode disclosed unauthorized access to a legacy system being decommissioned. Keys for about 1.4% of Console users who linked external providers may have been exposed. OpenCode calls it a distillation attack. Users report charges for runs they never made. Provider terms generally make the key owner responsible, so the bill can land on the customer. A copied key works at the provider until revoked. OpenCode already runs on Cloudflare Workers, and Console is a gateway with budgets. Direct calls with a stolen key bypass Console and its budgets. Whether that legacy host ran on Cloudflare is undisclosed. In our view, customers need a control layer they own that keeps the raw provider key away from the agent and its vendor: a vault-held key, or Cloudflare ($NET) AI Gateway prepaid billing with no customer provider key, plus scoped keys, spend caps, per-user limits, alerts and full logs. F5 ($FFIV), Kong and LiteLLM offer related controls. We cannot say these would have stopped this breach. They can limit blast radius, spend and detection time: metrics we think a CFO will ask for before the next rollout.

Investor Letters

All letters

Axon 3Q26 Business Update

Axon cut full-year guidance after delayed federal Dedrone contracts slowed 3Q revenue growth to 28%, while software and services grew 43%.

AXON $31B
Speedwell Memos 3 clicks

ARM Q2 FY3/27 Earnings Review

Arm reported Q2 revenue of $1.443 billion, up 27%, as licensing rose 50% while royalties grew 8%; Q3 guidance calls for $1.54 billion.

ARM $181B
Cestrian Capital Research

AppLovin 3Q26: Business Update

AppLovin's 3Q26 revenue rose 55% year over year and margins reached 78.2%, driven by AXON model gains, while publisher bidding pressure…

APP $118B
Speedwell Memos 2 clicks

Publications we follow

Every publication on this site, hand-picked.

129 publications

Newsletters 109

YouTube 4

Blogs 15

Seeking Alpha 74 of 277

Nominate a publication

X accounts we follow

Every account on this site, hand-picked.

91 accounts
Nominate an account

Investor letters we follow

359 firms

Sectors

Ordered by how often our editor reaches for them.