Developer Simon Willison warns against accidentally exposing local apps to the internet, advocating for binding to localhost or private networks like Tailscale by default. He demonstrates how to secur…
Trust in systems—whether software, finance, or governance—requires transparency and verifiability, not just intelligence. Citing examples like shot-scraper video for coding agents and OpenAI's bug-fix…
Qwen 3.6 27B, a dense local language model from Alibaba's Qwen team, impresses developers with its general intelligence and practical coding abilities, running efficiently on consumer hardware via lla…
Developer Simon Willison built agent-historian, a tool that lets AI coding agents query their own session history, after repeatedly encountering agents that forget solutions from previous sessions. Th…
Developer aac released two agent-native CLI task trackers, act and ask, that let AI agents manage long-running tasks and request human input without session loss. Act enforces dependencies between tic…
A new AI model, Ornith-1.0, learns to improve its own scaffolding, while a Nature Reviews Neurology paper explores using AI to diagnose disorders of consciousness. The author argues that the urgent qu…
A hypothetical security incident, CVE-2026-LGTM, documented by Andrew Nesbitt, reveals that a malicious package with embedded instructions to automated reviewers bypassed seven AI-powered security gat…
A veteran developer recounts how using AI coding assistants like Claude Code and OpenAI's Codex led him to believe the tools were limited to boilerplate tasks, but the release of Claude Opus 4.5 in No…
A new paper by Simon Willison, highlighted on Bruce Schneier's blog, reveals that large language models suffer from role confusion, enabling prompt injection attacks. The research shows that models le…
Simon Willison created a GitHub repository that uses AI-generated scripts and GitHub Actions to build a 66MB SQLite database from Mozilla's browser compatibility data, hosted with open CORS headers fo…
Anthropic engineer Thariq Shihipar published a post arguing that HTML outputs improve human-agent workflows over Markdown, releasing 20 self-contained HTML examples that drew 4.4 million views in 16 h…
Anthropic's Claude Code engineering lead Thariq Shihipar argues that HTML is increasingly better than Markdown for keeping humans engaged in agentic workflows, citing richer visualizations and interac…
Researchers Charles Ye, Jasmine Cui, and Dylan Hadfield-Menell found that large language models often ignore explicit role tags like <system> or <user> and instead infer roles from text tone, enabling…
Prompt injection remains the top vulnerability for large language models, according to OWASP's Top 10 for LLM Applications, because it is an architectural property of how LLMs process input rather tha…
Vanta's Staff Software Engineer Noam Rubin outlines the company's agent development principles, emphasizing betting on model intelligence, enabling composition for emergent behaviors, and building str…
Tom MacWright criticizes job applications built entirely with AI, arguing they reveal nothing about the person behind the polished surface. The author reflects on how true character is found in action…
Postman launched Passport, a secure API access system that replaces real API keys with cryptographic credential references bound to the holder, to prevent secret sprawl and leakage in the age of AI ag…
Simon Willison built a test harness combining OPFS and Pyodide to explore whether Datasette Lite can edit persistent SQLite files stored in the browser's Origin Private File System. The tool allows te…
Developer Simon Willison ported the Moebius 0.2B image inpainting model to run in a browser using WebGPU, bypassing the original requirement for PyTorch and NVIDIA CUDA. The project, completed with as…
Cloudflare launched 'Temporary Cloudflare Accounts for Agents' on June 19, 2026, allowing unauthenticated users to deploy Workers via wrangler deploy --temporary without signing up. The ephemeral depl…