RC RANDOM CHAOS
RC RANDOM CHAOS

Tech · Culture · Fiction

Google Ads became a malware distribution channel Article

Google Ads became a malware distribution channel

Malvertising turns Google's top search ad into a malware delivery channel. How the attack works, why review misses it, and the steps that stop it.

SWE-2 is the wrong model for almost everything
Article SWE-2

SWE-2 is the wrong model for almost everything

SWE-2 is a code-execution node, not a generalist replacement. How to eval it against your own repos and where it actually fits in production pipelines.

The weaker model matters more than the smarter one
Article LLM engineering

The weaker model matters more than the smarter one

DeepSeek v4.1 Flash cuts token cost, not the need for validation - use it in cascades, verification loops, and long-context pipelines that hold up in production.

Your defenses are now executing for the attacker.
Article forgejo

Your defenses are now executing for the attacker.

Forgejo 16.0.3 and earlier carry a critical RCE. The vulnerable version is the exposure, and running a build above the range is the only confirmed mitigation.

A helpful AI agent cannot be a private one
Article cybersecurity

A helpful AI agent cannot be a private one

Meta's Muse personal AI agent is only useful because it reads your messages, contacts, and habits. What that access costs your privacy and safety.

iPhone Duo is not a convenience feature
Article iPhone Duo

iPhone Duo is not a convenience feature

iPhone Duo's shared access and multi-device authentication expand who can authenticate and access, collapsing resource security to the weakest device and party.

Open problems are running out
Article AI safety

Open problems are running out

Terence Tao calls open math problems a non-renewable resource. Why AI mining them threatens encryption, AI safety benchmarks, and how to respond.

The Wire — latest

All →

Stay in the loop

New writing delivered when it's ready. No schedule, no spam.