New Ask Claude or ChatGPT about any stock, using Bullpen. Bullpen in Claude or ChatGPT. 7 days free
Bullpen.News From Edwin Dorsey
Get Daily Recap Feedback

Friday, November 13, 2026

Back to the front page

From X

@gnoble79 24 clicks

George Noble on X

This is not what you want to see if you are a $CRWV bull. $CRWV remains one of our biggest shorts. We are short from $107. Only a takeunder from $NVDA will prevent bankruptcy. Subscribe to the Noble Update to receive our best ideas. 67% YTD performance based on a diversified book of longs AND shorts. We have unrivaled performance. We have decades of experience. We are battled tested and have been through numerous market cycles. We have a process. While others chase narratives and charts, we focus on valuation and fundamentals. KNOW WHAT YOU OWN. YOUR ATTENTION TO THIS MATTER IS GREATLY APPRECIATED.
@convequity 1 click

Convequity on X

A company gets an API key from a model provider (OpenAI, Anthropic, Google) and links it in OpenCode Console. OpenCode, the coding agent, uses that key to run models at the provider, billed to the company. It is a bearer credential: anyone with a copy can spend on the account. OpenCode disclosed unauthorized access to a legacy system being decommissioned. Keys for about 1.4% of Console users who linked external providers may have been exposed. OpenCode calls it a distillation attack. Users report charges for runs they never made. Provider terms generally make the key owner responsible, so the bill can land on the customer. A copied key works at the provider until revoked. OpenCode already runs on Cloudflare Workers, and Console is a gateway with budgets. Direct calls with a stolen key bypass Console and its budgets. Whether that legacy host ran on Cloudflare is undisclosed. In our view, customers need a control layer they own that keeps the raw provider key away from the agent and its vendor: a vault-held key, or Cloudflare ($NET) AI Gateway prepaid billing with no customer provider key, plus scoped keys, spend caps, per-user limits, alerts and full logs. F5 ($FFIV), Kong and LiteLLM offer related controls. We cannot say these would have stopped this breach. They can limit blast radius, spend and detection time: metrics we think a CFO will ask for before the next rollout.

Investor Letters

All letters

Qualcomm Custom ASICs?

Qualcomm’s Alphawave SerDes, CPU cores and HBC could support custom AI ASICs as hyperscalers build heterogeneous fleets beyond GPUs.

QCOM $190B
Chipstrat 4 clicks

TSOH Weekly Roundup (11/13/2026)

Tripadvisor’s CEO and CFO will depart after weak Q3 results, while Roblox’s CEO discusses AI and Berkshire repurchases $9.6 billion of…

RBLX $37B
TSOH Investment Research 3 clicks

QXO Inc Earnings Update: Q3 2026

QXO's Q3 sales rose 79% to $4.9 billion after TopBuild and Kodiak acquisitions, while acquisition debt lifted interest expense to $163…

QXO $13B
SixSigmaCapital: Navigating the Financial Markets 3 clicks

Cerrado Gold: Research Note

Cerrado Gold will acquire Argentina’s Manantial Espejo mine from Pan American Silver for $20 million and targets a 2027 restart funded by…

PAAS $16B
Atrium Research - Equity Research 2 clicks

Big Short: Fidelity & Guaranty

F&G’s main insurer held $66.5 billion of assets against $1.38 billion of statutory capital, while private credit, reinsurance dependence…

FG $3.1B
Mispriced Assets 5 clicks

Publications we follow

Every publication on this site, hand-picked.

130 publications

Newsletters 110

YouTube 4

Blogs 15

Seeking Alpha 88 of 290

Nominate a publication

X accounts we follow

Every account on this site, hand-picked.

91 accounts
Nominate an account

Investor letters we follow

376 firms

Sectors

Ordered by how often our editor reaches for them.