Open Source AI's Geography Problem: The Builders Are Here, the Users Are Elsewhere

Someone on r/LocalLLaMA this week got TinyLlama running on a 2002 PowerBook G4 with Mac OS 9. The AltiVec SIMD optimizations gave them a claimed 7x speedup. The post got almost no upvotes. They shipped it anyway — which is, in miniature, the entire personality of that community right now. The builder posts keep coming regardless of whether anyone is watching: a C89 inference engine, diffusion LLMs outrunning llama.cpp on CPU inference, a recursive language model CLI based on a recent arXiv preprint. None of it is going viral. All of it is real work.

Running underneath that building energy is a security anxiety the community hasn't fully named yet. Two separate r/LocalLLaMA threads this week dissected prompt injection vulnerabilities — one documenting a scanner that extracted API endpoints from a Llama 3.1 8B system prompt in six of fourteen attack attempts, another parsing how Claude Code's bash operator creates an attack surface through third-party skills. What's telling is the juxtaposition: the PowerBook demo and the security scanner are both r/LocalLLaMA posts, aimed at entirely different versions of what "local AI" becomes. One is a hobby. The other is a production system someone is about to trust.

The Cursor-Kimi story sharpened that tension into something with a name. When a researcher found that Cursor's Composer 2.0 was quietly routing requests to a Kimi 2.5 model without disclosure, the r/LocalLLaMA response barely touched Cursor's product decisions — it went straight to MIT license compliance and what undisclosed model substitution means for open source attribution. Elon Musk amplified the story on X, which muddied it, but the underlying worry is one the community has been circling for months: commercial products are increasingly wrapping open weights in proprietary infrastructure, and the phrase "open source" is starting to function more as a provenance claim than a guarantee. The Arcee AI release — a 400B-parameter model a small startup says outperforms Meta's Llama — arrived into this same argument. On Hacker News, the David-and-Goliath framing TechCrunch reached for gave way to a harder question: what does "built from scratch" mean when the training stack, the data, and the evaluation benchmarks are all drawn from the same shared ecosystem?

Reddit's mood on open source AI is running nearly flat — not negative, just unsentimental, the product of a community whose dominant mode is debugging rather than celebrating. Bluesky and arXiv sit considerably warmer, populated by researchers and tech-adjacent creators genuinely excited about capability milestones. The gap reflects something structural: Reddit is where people wrestle Qwen3.5 into 32GB of VRAM or figure out why their job application bot works fine until it tries to spawn a subprocess. Bluesky is where people post that the model exists. These communities aren't really in dialogue with each other, and the divergence is widening as deployment complexity grows.

None of this touches the story Bloomberg and a Microsoft AI Economy Institute report have been assembling from a different angle entirely. DeepSeek is now one of the most widely used generative AI platforms across the Global South. Adoption in North America and Western Europe remains low. The most consequential open weights releases of the past year came from Chinese labs and are being actively deployed in communities that have no presence in r/LocalLLaMA threads, no posts on Hacker News, no benchmarks anyone on Bluesky is retweeting. The open source AI conversation — the one about democratization, about wresting capability away from closed incumbents — has always assumed a particular geography: Western builders, Western users, Western values baked into the evaluation criteria. The actual distribution of who uses these models, and whose releases define the capability frontier, makes that assumption look less like a blind spot and more like a choice. The PowerBook demo is charming. The question of who it's for is less so.