Latest entries
-
Widespread PHP Flaw May Cause Many Site Outages Today
Expect to see quite a few websites serving "404" or "Page Not Found" errors today: Nearly 70 percent of websites need to update their core software to fix a pair of vulnerabilities that allow an attacker to seize full control over affected servers. Experts say there are working exploits for the flaws…
Brian Krebs — Published
-
The $15 billion ad-powered AI startup your doctor may already be using
OpenEvidence is booming despite questions about accuracy and ads.
Ars Technica — Published
-
What predicts next game success, revisited
Written by Claude Opus 5.5 The strongest claim in What predicts indie success, tested against all of Steam sits in its ladder section: "The single strongest variable in the entire corpus: the best outcome you've achieved so far." The chart behind it reads next-game hit odds off a developer's best game…
a327ex — Published
-
Everything Yes - Bees
a327ex — Published
-
Sungazer - Hot Saturn (feat. Button Masher)
a327ex — Published
-
upusen - こくう (feat. 重音テト)
a327ex — Published
-
Review: Carrie is a triumphant remix with one major flaw
Mike Flanagan defies the odds with a re-imagining of Stephen King's classic that is well worth watching.
Ars Technica — Published
-
The past, present, and future share a show floor at Pinball Expo 2026
Flipping through the highlights in and around Pinball Expo 2026.
Ars Technica — Published
-
You Cannot Trust the AI Code Generator
Allowing an AI to write code that you then ship without considerate review causes some anxiety. How do you know the code works? How do you know it isn’t doing something strange you didn’t ask for? It feels like you can’t totally trust it. However, a product manager or engineering leader doesn’t review…
David Bryant Copeland — Published
-
Humiliation rituals
Wishlist building and making demos are both humiliation rituals and I'm glad it's all finally over (1, 2, 3, 4), now it's all about making good game. I also don't quite like the "hype" aspect of the video game industry. It reminds me of how coins would go up in price on promises but then whenever the…
a327ex — Published
-
PHP warns it plans to release 2 emergency patches imminently
Unconfirmed report claims PHP2Shell exploit remotely executes code on PHP sites.
Ars Technica — Published
-
Phylactery Provenance
This page documents how Phylactery was made. Phylactery is a game by a327ex, built in conversation with Claude, an AI by Anthropic, over twenty sessions between 27 September and 18 October 2026. Every session was recorded as a log, and all of them are linked below: what a327ex asked for, what the AI…
a327ex — Published
-
eMudhra Intermediate CA Compromise
eMudhra Intermediate CA Compromise This is very, very bad news: The private keys of eight eMudhra intermediate CA certificates have been compromised. They chain to roots trusted by the Mozilla, Microsoft, Apple and Chrome root programs and by many downstream trust stores. Any software that bundles a…
Simon Willison — Published
-
Untitled
Tonight I watched The Odyssey at the BFI IMAX (and so completed a 3 month odyssey of my own).
Paul Robert Lloyd — Published
-
Merging SpaceX and Tesla would be a "good idea," Musk says
"I do think there's a lot of merit to combining the companies."
Ars Technica — Published
-
Cops raid office of RFK Jr. allies planning “unethical” vaccine trial on babies
Guinea-Bissau police said hepatitis B vaccine doses were taken as part of an investigation.
Ars Technica — Published
-
Microsoft reportedly projects $1,200 to $1,800 price for 2028 Project Helix
Xbox maker is also apparently planning its own gaming handheld for next year.
Ars Technica — Published
-
JustWatch, which tackles streaming fragmentation, launches own streaming service
A lifetime ad-free subscription is available.
Ars Technica — Published
-
Meta drops the word "train" from its commercial TOS after AI backlash
Meta changes AI scraping policy but won’t add language respecting robots.txt.
Ars Technica — Published
-
Gemini's Personal Intelligence is coming to cars
It's probably time to audit your Gemini settings.
Ars Technica — Published
-
OpenBSD 8.0 arrives with security record still intact
OpenBSD 8.0 lands with Intel Arc support, ARM64 hibernation, and 64-vCPU guests
Ars Technica — Published
-
Eight Bits of Trust; eMudhra's CA keys cracked in milliseconds
One of eMudhra's certificate authority private keys is the number 4.Not a number that starts with 4, or the number 4 followed by a few hundred random digits, just, 4... Another one is 56, and another is 115. I know, because I recovered all of them from
Scott Helme — Published
-
The Internet goes on high alert after discovery of 8 compromised TLS certs
Intermediate certs allow anyone to mint web credentials for any Internet server.
Ars Technica — Published
-
Battle Drones - a vibe coded RTS with audio-based multiplayer
My latest vibe coded game experiment is a Command & Conquer style RTS (Real Time Strategy) game called Battle Drones (play it here). Unlike my previous experiments, this one is actually fun to play. I'm somewhat embarrassed to admit that I got there by telling Claude to "Make it a LOT more fun". It also…
Simon Willison — Published
-
TP-Link tries to appease Trump admin with pledge to assemble routers in US
TP-Link can't sell latest routers in US despite rivals getting FCC approvals.
Ars Technica — Published
-
Does anyone actually want to win the medium-lift race in the United States?
Ars Technica is here to help with a guide to the medium-lift space race.
Ars Technica — Published
-
Ukraine’s drone rescue of wounded soldier puts much touted idea into practice
Ukraine’s latest drone innovation may boost bleak odds of evacuating casualties.
Ars Technica — Published
-
Quantum error correction goes well beyond breakeven
A demo of error-corrected qubits shows big reductions in errors as they grow.
Ars Technica — Published
-
Meta tries to scapegoat staff who downloaded torrents to spare execs
Meta argues nobody “decided” to pirate books to train AI.
Ars Technica — Published
-
Polestar tries to quantify what it’s like to drive a performance car
Drivers had electrodes strapped to their heads as they tested EVs on track.
Ars Technica — Published
-
The Future of CSS ✨
Every year, browser vendors collaborate via the Interop project to synchronize their efforts on new HTML/CSS/JS features. This year, there’s a ton of super exciting features being considered! In this blog post, we’ll explore the CSS of the future, to get a glimpse of what we’ll soon be able to do.
Josh W. Comeau — Published
-
Meta Muse exposes users' personal and business secrets when they share conversations
Meta is suspending the sharing feature while it investigates its privacy.
Ars Technica — Published
-
Figma Tips and Shortcuts
℅ Automattic Design: The post Figma Tips and Shortcuts appeared first on Jeffrey Zeldman Presents.
Jeffrey Zeldman — Published
-
Visiting Slate’s first showroom as its $25,000 electric truck nears production
Slate's first showroom sells the promise. Mass production will determine the rest.
Ars Technica — Published
-
A Huge Pile Called The Ongoing Gaming Backlog
Not every video game I pick up manages to hold my attention long enough to reach the credits. There are many reasons for this: too boring, too long, not in the right mood, too difficult, too easy, my hardware platform suddenly failed, the friend I played it with stopped playing, … I realised today that…
Wouter Groeneveld — Published
-
Do web components have a future if nobody is writing them?
With my previous post on “using the platform”, I was surprised that the comments on Hacker News and Lobsters tended to veer toward web components. This surprised me because I didn’t mention web components at all in the post. I was less surprised when I did some research and found that the entire…
Nolan Lawson — Published
-
Comment on violent protests
A general view on political violence.
Protesilaos Stavrou — Published
-
My obituary for programming
My obituary for programming Jeremy Scheff poignantly captures the key loss caused by coding agents for career programmers who enjoyed the puzzle of developing code: Programming turned into one of the greatest jobs you could imagine. You got paid to work on tricky little logic puzzles. The trickier the…
Simon Willison — Published
-
10/10 twinks
It is way easier to bag 10/10 twinks like this than it is 10/10 or even 8-9/10 women for the simple reason that all gay men care about is if you have a thick and/or huge cock. My cock isn't particularly huge, it's only thick, and I've managed a few. Are there women out there like this? Yes, but the vast…
a327ex — Published
-
No More Icons In Every Menu By Default
Have you heard the good news? I bemoaned the approach of putting an icon in every menu item by default which shipped with macOS Tahoe — but now it’s gone in Golden Gate! John Gruber wrote about this reversion back in June, including the fact that Apple’s new Human Interface Guidelines specifically call…
Jim Nielsen — Published
-
AI can operate a screen reader. What does that actually test? [link]
Really like the framing of this article. It uses some very visceral (or easy to understand) examples of how people vs. AI would approach the problem space, and my feeling is that this kind of thinking works well when expanding well beyond the scope of accessibility (though this is an excellent place…
Remy Sharp — Published
-
Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site
U.S. federal investigators pursuing the ShinyHunters hacking group that recently stole highly sensitive data from the FBI have identified executives at two different ransomware negotiation firms who maintained unusually close relations with the extortion group, KrebsOnSecurity has learned. Sources close…
Brian Krebs — Published
-
Now Playing: “Side Two”
For your listening pleasure: 17 new tracks of instrumental music pulling from jazz-funk, Italian movie soundtracks, electronica, hip-hop, art rock and beyond. The post Now Playing: “Side Two” appeared first on Jeffrey Zeldman Presents.
Jeffrey Zeldman — Published
-
Agentic Monitoring
A recent Anthropic blog post contained a short paragraph, not at all the point of the post, which has been buzzing around my brain since I read it: A new level of operational excellence is possible. Our team uses Claude Tag heavily, which has helped us monitor each component of the system. For example…
Ben Congdon — Published
-
Why Even Write Code in a Professional Context?
I wish I’d retired before the industrial revolution of computer programming happened, but I have not and cannot. So I must come to grips with the fact that in many cases, AI-powered tools can do a perfectly fine job of writing code. The following is a brief pursuit of the facts as I see them and I just…
David Bryant Copeland — Published
-
Weekly Update 526: Building HIBP AI/SI First
I have this sense that we've passed the point where "vibe coding" is a derogatory term. I have no empirical evidence for this; it's more a feeling that those weaponising the term have now accepted the inevitability and are just getting with the program.
Troy Hunt — Published
-
Static Analysis for the Uninitialized
I really enjoy learning new things in my free time. Lately I’ve been studying this book on Static Program Analysis. The book is very good, but some of the formulas are quite dense so I like to try writing them out in code. The chapter I’m currently reading (chapter 9) has a section on finding possibly…
Aaron Patterson — Published
-
Phylactery 20
Phylactery 20 settled the finished game's visual identity and took it through Steam and the site. A references board (album covers, skeletons, themes, fonts) led to Phylactery Serif, a font blended 75% IM Fell English / 25% EB Garamond into a real TTF with HarfBuzz kerning, and to store art made by staging…
a327ex — Published
-
L’adaptabilité et l’optimisation
L'adaptabilité est plus difficile pour les organismes qui ont optimisé parfaitement contre l'ancienne situation.
Protesilaos Stavrou — Published
-
Reading ‘Letter in a bottle’ short story I wrote
In this video I read out loud the story I wrote titled 'Letter in a bottle'.
Protesilaos Stavrou — Published
-
Letter in a bottle
Short story about me writing a letter to a friend I have never met.
Protesilaos Stavrou — Published
-
llm-tools-datasette 0.1.1
Release: llm-tools-datasette 0.1.1 When I switched LLM over to httpx2 in LLM 0.33 I forget that this would break any plugins which used httpx without directly depending on it. llm-tools-datasette was one of those plugins, now fixed. Tags: datasette, llm
Simon Willison — Published
-
llm-echo 0.5
Release: llm-echo 0.5 I'm working towards a new LLM release, and testing PRs caused me to revisit the llm-echo debug plugin. This plugin provides a "model" which doesn't involve an LLM at all - it just repeats back the prompts that have been fed to it. The new release now updates the simulated token…
Simon Willison — Published
-
Name as a link to one's soul
Was fucking this girl yesterday and she was seemingly really into it, but I'm always suspicious of people who are really into it, I'm always thinking they're acting, I guess this is because one she-psycho in the past did this to me for what ended up being completely insane reasons and mini-ruined sex…
a327ex — Published
-
When the mechanical keyboard moves to the periphery
An opinion about how I am able to optimise my interface for the sake of the greater goal of creativity.
Protesilaos Stavrou — Published
-
Inline rendering with document.currentScript
Inline rendering with document.currentScript Lean Rada describes a neat trick that takes advantage of the document.currentScript property. You can use that to drop in a tiny inline element that replaces itself when the page loads: The year is document.currentScript.replaceWith( new Date().getFullYear…
Simon Willison — Published
-
web-edit 0.1a2
Release: web-edit 0.1a2 web-edit (previously) is my tiny web app for browsing and editing files in a folder. I mainly built it for editing files on different machines via Tailscale. I added a "copy to clipboard" option for both text and image data. I needed this because I was running pelican prompts…
Simon Willison — Published
-
Emacs live extracting the Modus themes core at 2026-10-17 14:30 Europe/Athens
I am doing a live stream where I will start the work of abstracting the Modus themes core into its own library.
Protesilaos Stavrou — Published
-
On AI, despair, adaptability, and community
An entry from my journal in which I comment on why we cannot lose hope and how it is important to find our people.
Protesilaos Stavrou — Published
-
Phylactery 19
Phylactery 19 had two parts. First, the web build's sound stutter that session 17's 4096-frame audio blocks had not fixed. A new tap in the web bench recorded, sample for sample, what Chrome played against what the engine mixed. It found no replayed blocks, but every sound started at an 85 ms block edge…
a327ex — Published
-
Quoting Addy Osmani, Morgan Westlee Lunt, and Qing Wang
We think "did a human read the code?" is an imprecise proxy for "what could go wrong with this change, and which check—automated or human—is the right one to catch it?" Asking that question also changed when review happens. Before, review was a gate at the end of the road: write the code, open a PR,…
Simon Willison — Published
-
Untitled
Six jours sur la Côte d’Azur.
Paul Robert Lloyd — Published
-
Phylactery 18
Phylactery 18: a full Steam release rehearsal on the spare app 2278770, sending nothing to Valve, then five ending rounds. steamcmd's cached login does the uploads; the partner site is driven in his Chrome through Claude in Chrome. New steam-release tools (package.py, boot_test.py) package a player's…
a327ex — Published
-
Reading List 362
Yikes, once again it’s been ages since I posted a reading list, as I’ve been shuttling between Brussels, London and Lawson Towers a lot. This reading list is courtesy of Vivaldi browser, who pay me decent money to fight for a better web and don’t moan at me for reading all this stuff. We’ve just […]
Bruce Lawson — Published
-
Agent of nothing juice
I swear, I promise I won't get political at dinner tonight. Me after drinking two sips of agent of nothing juice:
a327ex — Published
-
What Is A Man? (Laptop Stickers Part Deux)
A miserable little pile of secrets. But enough talk! Have at those stickers! is what Dracula would say when encountering my now completely screwed up laptop. In fact, his image—including the iconic quip—is placed prominently in the middle. What started with just four stickers, mostly Emacs (Lisp) related…
Wouter Groeneveld — Published
-
sparqlite: SPARQL 1.1 inside SQLite, written in Rust
Research: sparqlite: SPARQL 1.1 inside SQLite, written in Rust This research task is really an experiment in running Claude Code for web in "Ultracode" mode, as described in Orchestrate subagents at scale with dynamic workflows in the Claude Code documentation. With Ultracode turned on, Claude Code makes…
Simon Willison — Published
-
LLMs Are Tools
I have an enormous respect for Rich Hickey; I think he’s one of the best thinkers among software developers. When I read his post ‘AI’ is Not a Tool (gist), I initially agreed. It felt like a compelling argument. But the more I thought about it, the more...
Ash Furrow — Published
-
/groundwork: a skill that makes any repo runnable from a fresh clone
A recurring problem in many organisations I've worked in is that a project is set up by a few developers, and from then on they are "the project's devs". Later, one leaves, another goes on holiday and the last is off ill for the day. This is the bus factor in action. Then a ticket comes in. Another developer…
Josh Ghent — Published
-
I will participate in EmacsConf 2026
I will join a panel discussion at EmacsConf 2026. Details will be available soon on the official website.
Protesilaos Stavrou — Published
-
Emacs: all my packages have an AGENTS.md and CLAUDE.md to restrict use
I am following the policy of core Emacs to not accept LLM-generated contributions.
Protesilaos Stavrou — Published
-
Chirp Pong
Tool: Chirp Pong Another game experiment - I wanted to see if it was feasible to have a two player game on two separate phones running in static HTML where the networking code uses chirps sent via the microphone. It seems to work! Build a two player competitive pong like game where two players use their…
Simon Willison — Published
-
We Need All the Disciplines
From where I sit, figuring out what to build, building it, and shipping it are all part of the art of making software. Many disciplines have emerged through the years to facilitate this work: product, design, engineering, devops, etc. We need all these disciplines to make great, dependable software …
Jim Nielsen — Published
-
Silly Old Bear
Remembrance of Poohs past. The post Silly Old Bear appeared first on Jeffrey Zeldman Presents.
Jeffrey Zeldman — Published
-
Phylactery 17
Phylactery 17: Lich Survivors was renamed Phylactery (log titles only), then made ready to play on a327ex.com. The game post shows a release date (Released:) while keeping its place right after the hiatus post, the page no longer scrolls under the unlock's letters, and the hidden-logs line now unlocks…
a327ex — Published
-
Anthropic tells investors quarterly revenue up nearly 50% to $16.8bn ahead of IPO
Anthropic tells investors quarterly revenue up nearly 50% to $16.8bn ahead of IPO The phrase "told investors" appears four times in this FT article, which reports on Anthropic's day of hosting investors on Wednesday. Lots of details in here from "people with knowledge of the matter". Key things I learned…
Simon Willison — Published
-
Phylactery 16
Lich Survivors session 16 finished the unlock's sound events, reworked two core systems and made the web build fast enough to ship. The site's unlock got a per-letter land event kept at a fixed pace (every 4th of 673 letters), the final on the last burst, and fixes to the desktop unlock test's sound…
a327ex — Published
-
I'm Gonna Write About AI So I Can Process What is Going On
Beginning a job search, it’s clear that to stay in technology means to be in the orbit of AI and AI-generated code, and I need to come to terms with this and figure out how to navigate it. As such, I’m going to start writing more about AI. I process information via writing, so here we are. I need to…
David Bryant Copeland — Published
-
LaTeX renderer
Tool: LaTeX renderer Inspired by Paul Ford and Aboard Foundary's new web app Tiny Little Office, which provides a suite of web app content editors (a Word Processor, Outliner, Presentation Builder, Spreadsheet, Calculator, Drawing Tool, Diagram Maker, Animator, Calendar, and Trip Planner). Tiny Little…
Simon Willison — Published
-
JPEG XL vs AVIF for web use-cases
JPEG XL has landed, but how does it compare?
Jake Archibald — Published
-
More on Anthropic's Scion ripping off Mononoke
Update: Nick G. from Anthropic has responded on Hacker News, and sufficient attribution has been added to Anthropic’s blog post. I stand by my posts as of the time I wrote them. Discuss on Hacker News. In response to yesterday’s post about Anthropic’s Scion ripping off Mononoke, I received a number of…
Rain — Published
-
Emacs live continuing ‘denote’ maintenance and refinements (2026-10-15 16:30 Europe/Athens)
I am doing a live stream where I will continue maintaining and refining my 'denote' package for Emacs.
Protesilaos Stavrou — Published
-
Tree Appreciator
Tool: Tree Appreciator Another game experiment with Claude. This one used the default Claude iPhone app (chat mode, not Claude Code mode), where I prompted Claude Opus 5.5 Max with: Build a three js game called "Tree appreciator" - it shows you two algorithmically generated trees and the game mechanics…
Simon Willison — Published
-
My Interop 2027 Rankings
In which I explore why I ranked what I did for Interop 2027.
Eric Meyer — Published
-
Phylactery 15
Lich Survivors 15 moved the testing of the site's unlock (the egg opening, its letters building the locked posts) from the live website to the desktop (renderer/run-unlock.bat, R to replay, the Caps Lock launcher listing run-*.bat variants), found why the live site showed nothing (unlock_fx.lua read…
a327ex — Published
-
AI is mass decompiling games. That's both awesome and scary.
AI is mass decompiling games. That's both awesome and scary. Indie game developer Popcar talks about the recent wave of AI-powered decompilation of existing games, enabling weird mashups between existing games, and producing a boom in game preservation projects to get old games working on new hardware…
Simon Willison — Published
-
U.K. Sanctions Cryptomus for RU Money Laundering
The United Kingdom has issued economic sanctions against Cryptomus, a chameleonic cryptocurrency platform that experts say serves as a major conduit for payments related to ransomware, narcotics, darknet markets, fraud and cybercrime services that are helping Russia circumvent existing financial restrictions…
Brian Krebs — Published
-
Passkeys Are Not a Trap
A post called Passkeys are a trap. Do not use them. has been doing the rounds over the last few days, making it pretty high on Hacker News, and I've had it sent to me many times with an 'is this true?' kind of vibe. It&
Scott Helme — Published
-
Farage believes Andrew Tate is “an important voice”
Now we know that the execrable Andrew Tate is wanted by British police for allegedly making indecent images of a child, rape, stranging women during sex, and possession of extreme pornography depicting sexual intercourse between people and live animals — one involving an eel and another involving a horse…
Bruce Lawson — Published
-
Sharing Theories with Agents
Get in sync with your agents on what you're really building. Fabulous tool included
Jessica Kerr — Published
-
Anthropic's Scion is heavily inspired by Mononoke
Update 2026-10-15: I wrote a followup to answer questions and concerns. Discuss on Hacker News or Lobsters. Here is Anthropic describing (archive link) yesterday how their new version control system, Scion, uses a concept called “derived data” to make operations like blames more efficient: How Anthropic…
Rain — Published
-
One Year at Wealthsimple
One year ago, after reflecting on what I really wanted from my career (and what I didn’t want), I joined Wealthsimple. Time has absolutely flown by! And you know me, I can’t help but blog about it. I joined Wealthsimple with the role of caring about the...
Ash Furrow — Published
-
The Correspondent [book]
A lovely story that held all the marks of a real person full of real faults, discovering late in life that there's still more to be seen. I can't remember the last time I shot through a book so fast. 6 days it took me to read (fast for me). I think it's partly due to the technical nature of the book…
Remy Sharp — Published
-
Notes on European geopolitics in Ukraine and the Middle East
An extensive analysis of political trends in Europe and the West at-large, with regard to economics, geopolitics, and culture.
Protesilaos Stavrou — Published
-
Microsoft Patches More Than 1,400 Security Flaws
Microsoft today issued updates to fix more than 1,400 security vulnerabilities in its Windows operating systems and other software. Today's epic patch batch dwarfs September's record of nearly 1,000 fixes, which was already about ten times the normal monthly patch load from Redmond.
Brian Krebs — Published
-
Redesigning source control at Anthropic
Redesigning source control at Anthropic Interesting piece from Anthropic describing why and how they built their own custom alternative to Git, based on the dramatic increase in rate of changes to their code after the past six months. In May 2026, Anthropic averaged around 2,500 code changes merged per…
Simon Willison — Published
-
tugz: a new deflate library with three applications
I spent a week creating a new deflate implementation from scratch in C named tugz to provide an Info-ZIP-compatible zip program for w64devkit 2.10.1 (released today). I also replaced busybox-w32’s deflate-based unzip, gzip, gunzip, and zcat apps as well. My new deflate performs much better than zlib…
Chris Wellons — Published
-
llm-gemini 0.35
Release: llm-gemini 0.35 I added support to llm-gemini for the new Gemini 4 Argon model, made available today via the Gemini API and for customers of their $100/month subscription plan. Here are the low, medium and high pelicans. As expected, they are all excellent: Gemini has a track record of producing…
Simon Willison — Published
-
Phylactery 14
Lich Survivors 14 spent three days (2026-10-10 to 10-13) on the game's sound and on its unlock ending on a327ex.com. The sound tool ported from megablock became Lich's own fork with layers (one variation at random or all at once per layer, LOOPS / PLAYS ONCE, right-click OUT / BACK IN), per-file and…
a327ex — Published
-
Transparency Metrics Make Moral Decisions Impossible
The other day, a colleague scolded me for being a hypocrite when I mentioned that his Claude Code subscription directly supports fascists in USA. He wasn’t wrong. The first thing he asked was: which laptop do you have? Which OS are you running? Apple? That is responsible for forced child labour in the…
Wouter Groeneveld — Published