--- title: "Glasswing & Daybreak: You Are (Not) Secure" description: "What if frontier labs can turn constrained compute into market leverage?" url: "https://cameron.otsuka.systems/articles/2026-05-12-glasswing-and-daybreak-you-are-not-secure/" published: "2026-05-12T00:00:00.000Z" updated: "2026-05-21T00:00:00.000Z" --- # Glasswing & Daybreak: You Are (Not) Secure What if frontier labs can turn constrained compute into market leverage? Metadata Publication Inference Draft 2026-20 Published 2026-05-12 Last updated 2026-05-21 Format newsletter Tags markets, systems POSSE [Substack](https://inferencedraft.substack.com/p/glasswing-and-daybreak-you-are-not) ![Anime-style cyberpunk hacker wearing a bulky VR headset and skeletal mechanical gloves types at a cluttered workstation, while monitors flash “daybreak” and “ACCESS DENIED” amid code, cables, and warning panels.](https://cameron.otsuka.systems/_astro/daybreak-hacker.BAUMNMCx_1SubPA.png) Frontier labs have a difficult balance to maintain: they want to grow their market share of users, but they need the compute to support those users. The common way a lab might strike this balance is: 1. Make a big claim that gets attention for the product. 2. Sign up a large number of new users. 3. Use the growth numbers to attract capital and sign new compute partnerships. One thing the lab might notice with a large percentage of those new users is that they aren’t particularly _good_ at using the product. They’re actually quite wasteful and not using the product for its highest and most valuable use. So a different method the lab might take is: 1. Make a big claim that gets attention for the product. 2. Gate access to a vetted set of partners. 3. Use their testimonials to attract capital and sign new compute partnerships. While this second method creates a two-tiered access list, it enables the lab to launch new models within its limited compute constraints. If you’re on that list, you’re enjoying access to the best models. If you’re not, you’re probably hoping this doesn’t relegate you to the [permanent underclass](https://www.newyorker.com/culture/infinite-scroll/will-ai-trap-you-in-the-permanent-underclass). OpenAI has just announced [Daybreak](https://openai.com/daybreak/), its response to Anthropic’s [Project Glasswing](https://www.anthropic.com/glasswing), providing cybersecurity and critical infrastructure partners early access to their frontier models before they go GA. While previous model releases were mostly driven by users sharing improved use cases they’ve stumbled upon (e.g., OpenClaw), the gated method seems to already be bearing fruit. Anthropic’s initial testing [identified a 27-year-old OpenBSD bug, a 16-year-old ffmpeg vulnerability, and several thousand more](https://red.anthropic.com/2026/mythos-preview/). Mozilla [used Mythos to fix its largest number of security bugs in a single month](https://hacks.mozilla.org/2026/05/behind-the-scenes-hardening-firefox/): ![A graph showing the volume of Firefox security bug fixes shipped by month, trending in the 20-30 range throughout each month in 2025, with a spike to 60-70 in February and March 2026, up to 423 in April 2026](https://cameron.otsuka.systems/_astro/firefox-security-bug-fixes-by-month.gc_x_IrY_2h8dJF.png) `curl`, a nearly-ubiquitous Unix tool, [used Mythos to find a vulnerability](https://daniel.haxx.se/blog/2026/05/11/mythos-finds-a-curl-vulnerability/), although Daniel is a bit more skeptical about its power: > My personal conclusion can however not end up with anything else than that the big hype around this model so far was primarily marketing. I see no evidence that this setup finds issues to any particular higher or more advanced degree than the other tools have done before Mythos. Maybe this model is a little bit better, but even if it is, it is not better to a degree that seems to make a significant dent in code analyzing. And the conclusion to this is realizing that frontier labs are now selling a way of working, inclusive of model access, workflow implementation, and compute capacity. To that end: - OpenAI is [creating a new enterprise AI services company with TPG Inc., Brookfield Asset Management, Bain Capital, and others](https://www.bloomberg.com/news/articles/2026-05-04/openai-finalizes-10-billion-joint-venture-with-pe-firms-to-deploy-ai). - Anthropic is also [creating a new enterprise AI services company with Blackstone, Hellman & Friedman, and Goldman Sachs](https://www.anthropic.com/news/enterprise-ai-services-company). The uncomfortable vision here is a future where model access is not open or widely distributed, but highly curated. While the labs need growth, not all growth is equally useful. The private club with access to the latest frontier models may have a structural advantage over competitors without access. And in that world, [how much](https://www.cnbc.com/2025/04/28/donald-trump-jr-private-members-club-executive-branch.html) would [they pay](https://www.ft.com/content/d8e49edb-feb9-4bfb-9f91-f10169c0961d?syn-25a6b1a6=1) for [membership](https://www.vanityfair.com/style/story/zero-bond-scott-sartiano)? * * * ## Mine Print Hash The Trans Adriatic Pipeline is now delivering natural gas to Europe, aligning just in time with the recent EU summit held in Armenia. Matt and I discuss the geopolitical risks at stake in the EU periphery and why China has finally weighed in on the Iran situation, all related to critical energy corridors. [The Trans Adriatic Pipeline: Eurasian Energy Corridor Chess Game](https://cameron.otsuka.systems/podcasts/mine-print-hash-2026-19/) [The Trans Adriatic Pipeline: Eurasian Energy Corridor Chess Game](https://www.youtube-nocookie.com/embed/RtN3Ww7RiDQ) * * * ## Open Threads The continued competition for compute and its inputs: - Apple and Intel partner on chips. [Link](https://www.wsj.com/tech/apple-intel-have-reached-preliminary-chip-making-agreement-69eb9370) - Cerebras upsizes its planned IPO. [Link](https://www.cnbc.com/2026/05/11/cerebras-raises-ipo-range.html) - Anthropic partners with SpaceX to use the xAI Colossus 1 compute capacity, but questions abound about why xAI isn’t using it for Grok? [Link](https://x.com/claudeai/status/2052060691893227611) - CME Group to launch compute futures. [Link](https://www.prnewswire.com/news-releases/cme-group-and-silicon-data-partner-to-launch-first-compute-futures-302769215.html) The continued competition for energy and its inputs: - UAE has been secretly carrying out attacks on Iran. [Link](https://www.wsj.com/articles/the-u-a-e-has-been-secretly-carrying-out-attacks-on-iran-f1745a0d) - As a complement to our Mine Print Hash episode, a look into Turkmenistan’s importance to China’s Hormuz hedging. [Link](https://jamestown.org/prc-turkmenistan-gas-ties-hedge-hormuz-risk/)