Author: Coté
-
Relief for open source CVE explosion, hopefully
Anthropic on Thursday unveiled OSS Scanner as an opt-in vulnerability scanner to help secure the open-source ecosystem using artificial intelligence (AI). It’s an opt-in service informed by our experience using Claude to find vulnerabilities during Project Glasswing," Anthropic said. "Projects that join will receive thorough, periodic security scans by our strongest models at no cost.…
-
400 Java flaws fixed by centaurs
For the more than 400 flaws, Lightwell engineers backported patches into the widely deployed versions of each library. Any fix that also applies upstream goes back to the open-source project under responsible disclosure protocols while Clearinghouse participants keep their embargo protections. Neither company has named the affected libraries. Behind the fixes, engineers from both companies…
-
From the big swings department
Cruise’s Curtis Markson is frustrated by Fossil Fools, complaining that he is being made to play a “cartoon” version of Rockwell so Hannah can “make some statement”. Fossil Fools is objectively terrible: the grotesque and pathetic US president (John Goodman) constantly moans about having “cancer of the asshole” for laughs, while his top brass, all…
-
The comming Full Disk Access apocalypse, for agentic AI.
Finer grained and more transparent access controls on MacOS (that have CLI options instead of just hard-enforced GUI modals) would be cool. Apple seems to think that by making a scarier warning they can convince more users not to grant FDA–or at least perhaps deflect blame from Apple to the user if they later regret…
-
Jevon’s Paradox, 70s Hollywood Edition
Time was, they didn’t shoot a lot of film. Then, they started shooting a lot of film. Then, with digital cameras, they shot a lot of film. The editor became very important. So, like: what if same for AI? In the 70s, there was a rapid elimination of production constraints. Improvements in film cost and…
-
Fulldisk access woes to come
It’s probably a good idea, but it will be very annoying for the AI-crazed…like myself. 🔗 Apple Says It Will Further Lock Down MacOS in Response to Third-Party A.I. Agents
-
Scrambled Eggs ‘James Bond’
For FOUR individualists: 12 fresh eggs Salt and pepper 5-6 oz. of fresh butter Break the eggs into a bowl. Beat thoroughly with a fork and season well. In a small copper (or heavy-bottomed saucepan) melt four oz. of the butter. When melted, pour in the eggs and cook over a very low heat, whisking…
-
AI is driving CVE discover up, but exploits not exactly exploding
Of 1,061 vulnerabilities credited to AI-assisted discovery, 14 – 1.3% – have been exploited in the wild, which is the same rate as every other vulnerability. AI is multiplying the number of CVEs, not the danger of each one, and right now that hands defenders more to fix before attackers get there. Summarized by AI.…
-
Europe problems: not enough bike mechanics
Europe needs 105,000 more bike mechanics by 2032 on top of a 45,000 shortfall today, and the cause is economic: the work is underpaid relative to its skill. Without fixing that, cycling growth stalls, because a bike nobody can repair stops being ridden. Summarized by AI. 🔗 Europe Needs 105,000 More Bike Mechanics by 2032…
-
A platform for normie AI developers
Summarized by AI. This is a CTO’s ninety-day report on a program he runs, given at a platform engineering conference, and it’s the rare one where the interesting part is the architecture rather than the number. SIXT’s problem was the long tail: thousands of small, country-specific process problems that no engineering roadmap would ever fund.…
-
Those rascally AIs: maybe there just weren’t any security controls.
AI alignment isn’t really the problem here: labs just need better infrastructure. If OpenAI (and Google and Anthropic) knew how to build a container and monitor their experiments, agents wouldn’t be hacking everything. And, By George, we _do know how_to make sandboxes that work, so the AI labs need to up their game and build…
-
Design systems are much more valuable now
Design teams have spent years trying to get people to actually read their design system documentation. Agents read it every single time. Related, check out this discussion of how the design team at Tanzu works with AI. Plenty of design system talk there. 🔗 Design Systems for AI Agents
-
Blanket Bans on AI Writing Prematurely Stifle Necessary Experimentation
🤖 A critique of the blanket stigma against AI-assisted writing, arguing that distinguishing between personal expression and functional communication is necessary to allow the medium to mature. This is also under the categories of: Bad things are bad, good things are good. “Oh, you can write perfectly and get your ideas across so your don’t…
-
What Meta Muse needs to do to succeed in The Enterprise.
Muse gives Meta a strong starting point. It is a persistent agent that can perform tasks across applications rather than simply answer questions. Its early popularity also gives Meta something most enterprise AI vendors lack: users who may already understand the product before encountering it at work. But consumer adoption is not proof of enterprise…
-
Oh, those rascally rogue AIs!
As of September 26th OpenAI has informed more than 100 third-party organisations about unauthorised activity involving its AI agents. Related, not great for the AI companies: During a Senate Homeland Security and Governmental Affairs Subcommittee on Disaster Management, District of Columbia and Census hearing on Wednesday, Chairman Josh Hawley, R-Mo., expressed concern about “the accelerating…
You must be logged in to post a comment.