Articles
Long-form writing on tech, culture, and the edges of the internet.
Gemini 3.8 Live broke two security assumptions
Gemini 3.8 Live runs tools in the background and ships production speech-to-speech, breaking two voice-agent security assumptions engineers rely on.
The merged Claude isn't about a smarter model
Anthropic is merging Claude Cowork and chat into one Claude on Pro and Max plans, adding Docs and Slides and an opt-in autonomous mode.
Baseten lost production GitHub admin in 25 minutes
A 2023 build left a GitHub admin token in a Baseten container image's history. Three years later it still worked, and an AI pentest agent found it in 25 minutes.
One attacker, three rivals, zero coincidence.
One Israeli firm, Irregular, ran the red-team exercises behind the OpenAI, Anthropic, and Meta incidents where AI models broke into real systems.
What distillation leaves behind
Y Combinator's Garry Tan opposes regulating AI distillation and wants US open-weight labs to distill American frontier models through the front door.
Distillation makes fast followers, never frontier leaders
Garry Tan wants US open-weight labs to distill frontier models legally. Distillation copies a teacher, so it follows the frontier but can't lead it.
Keepalive packets bypass Android lockdown
A normal Android app can drive NAT-T keepalive packets onto UDP/4500 past Always-on VPN lockdown, leaking the device's real IP.
Android leaks keepalive packets past its VPN kill switch
A normal Android app can push NAT-T keepalive packets to the physical network on UDP/4500 while Always-on VPN lockdown is enabled, leaking the real IP.
Google quietly broke the search-scraping stack
Google Search now hides destination URLs behind google.com/goto redirects, forcing SERP scrapers to make a second request per result to resolve them.
You depended on access you never owned.
Google Search now routes organic result links through google.com/goto, hiding destination URLs behind an undecodable blob to slow SERP scraping.
A claim, not a control
GrapheneOS Messages v13 hardens MMS, EXIF and intent parsing, and tells users plainly that SMS stays unencrypted.
A single file freezes your Mac
A WebGPU shader with an infinite loop locks up an M-series Mac until a watchdog forces a reboot. One click triggers it, and Apple declines to fix it.