Articles
Long-form writing on tech, culture, and the edges of the internet.
The demo passed. Two weeks later, the queue filled.
Charity Majors argues cheap AI code turns code into a cache and shifts engineering work to validation, observability and production discipline.
The door was unlocked, not picked
A three-word prompt, "fix this code," triggered a US export ban on Anthropic's Fable 5 and Mythos 5, per Katie Moussouris's read of the research.
The contract you pasted is now giving orders
Advertised LLM context windows run to millions of tokens, but effective context is far smaller. How coding agents hit the limit and how specs and artifacts keep sessions sharp.
Whoever holds the file governs
kage clones a website into script-free static HTML with headless Chrome, then packs it into a ZIM archive or a self-contained offline viewer binary.
A reverse shell dressed as a Firefox patch
More than 408 AUR packages were infected through malicious install scripts pulling npm and Bun dependencies with infostealer and rootkit behavior.
Boundary change, not version bump
WASI 0.3.0 is ratified, moving stream, future and async into the Component Model's canonical ABI with host-driven scheduling and composable components.
Panic on a schedule
OpenAI called GPT-2's 1.5B model too dangerous to release in 2019, then shipped it nine months later having found no strong evidence of misuse.
Mandatory ID is the breach, not the fix.
The FCC wants US telecoms to store a government ID and address for nearly all customers, ending the burner phone and creating a breach-ready identity database.
Your supply chain isn't compromised. It's working.
Microsoft pulled at least 70 of its own open source GitHub projects after hackers injected password-stealing malware into Azure and AI coding tools.
Pentagon raises Israel espionage threat to highest level
The DIA raised its counterintelligence threat level for Israel to critical, citing aggressive human espionage and technical collection against the U.S.
Meta's chatbot worked exactly as designed.
Meta says at least 20,225 Instagram accounts were hijacked through an AI chatbot that reset passwords without verifying the account's email address.
Nothing broke when your router died
Motorola's MotoSync+ app has shown "Server License Expired" since mid-May, locking buyers out of router setup because all management runs through the app.