Category: Found
Links, news articles, clippings, etc. – classic blog-style.
-
The product is not the UI – headless at Salesforce
At Dreamforce 2026, Salesforce spent a good chunk of its keynote telling customers they might never need to log into Salesforce again. That’s a remarkable message from a company whose web UI has been the center of its business for more than two decades, and it connects the two biggest takeaways I had from the…
-
516 patches across 6,000 vulnerabilities found by AI
Over six months of scanning some of the world’s most widely used open source projects, Anthropic’s models surfaced more than 29,000 candidate vulnerabilities. Its human review pipeline, which relies on six external security research firms to reproduce and triage findings, has worked through only about 6,000. A disclosure dashboard puts some numbers behind the problem.…
-
Google can update third party open source dependencies in two hours or so, but forked code takes much longer.
But, forks take longer: On predictors: custom patches matter most. Packages Google had patched took three times longer at the median than unpatched ones, and “Google-specific patches or customization” was also the single most-cited reason engineers gave for a slow update. Volume of external dependencies, package size, and upstream change velocity tracked effort as well,…
-
Preparing to be toast
If your employer has banned the use of AI, you should quit and find a company that is already going through an AI transformation.” If your team is too busy doing their new job to experiment with AI, you’re preparing them to be replaced. Maybe you’re okay with this, but hopefully you’re not, because it…
-
Super Milk
Right now, your washing machine is subject to more safety rules than AI. Every carton of milk that you see in the grocery store is subject to safety rules and inspection. 🔗 AI is less regulated than milk, Microsoft president says
-
Google AI for Normies unleashed
Google has put forward the most complete enterprise agent design we have seen from a hyperscaler, with identity, policy, cost control, memory, and model choice designed in from the start. … Google Cloud announced the Gemini agent at its Gemini at Work 2026 event, describing it as a single, universal agent for work. Users assign…
-
Relief for open source CVE explosion, hopefully
Anthropic on Thursday unveiled OSS Scanner as an opt-in vulnerability scanner to help secure the open-source ecosystem using artificial intelligence (AI). It’s an opt-in service informed by our experience using Claude to find vulnerabilities during Project Glasswing," Anthropic said. "Projects that join will receive thorough, periodic security scans by our strongest models at no cost.…
-
400 Java flaws fixed by centaurs
For the more than 400 flaws, Lightwell engineers backported patches into the widely deployed versions of each library. Any fix that also applies upstream goes back to the open-source project under responsible disclosure protocols while Clearinghouse participants keep their embargo protections. Neither company has named the affected libraries. Behind the fixes, engineers from both companies…
-
From the big swings department
Cruise’s Curtis Markson is frustrated by Fossil Fools, complaining that he is being made to play a “cartoon” version of Rockwell so Hannah can “make some statement”. Fossil Fools is objectively terrible: the grotesque and pathetic US president (John Goodman) constantly moans about having “cancer of the asshole” for laughs, while his top brass, all…
-
The comming Full Disk Access apocalypse, for agentic AI.
Finer grained and more transparent access controls on MacOS (that have CLI options instead of just hard-enforced GUI modals) would be cool. Apple seems to think that by making a scarier warning they can convince more users not to grant FDA–or at least perhaps deflect blame from Apple to the user if they later regret…
-
Jevon’s Paradox, 70s Hollywood Edition
Time was, they didn’t shoot a lot of film. Then, they started shooting a lot of film. Then, with digital cameras, they shot a lot of film. The editor became very important. So, like: what if same for AI? In the 70s, there was a rapid elimination of production constraints. Improvements in film cost and…
-
Fulldisk access woes to come
It’s probably a good idea, but it will be very annoying for the AI-crazed…like myself. 🔗 Apple Says It Will Further Lock Down MacOS in Response to Third-Party A.I. Agents
-
Scrambled Eggs ‘James Bond’
For FOUR individualists: 12 fresh eggs Salt and pepper 5-6 oz. of fresh butter Break the eggs into a bowl. Beat thoroughly with a fork and season well. In a small copper (or heavy-bottomed saucepan) melt four oz. of the butter. When melted, pour in the eggs and cook over a very low heat, whisking…
-
AI is driving CVE discover up, but exploits not exactly exploding
Of 1,061 vulnerabilities credited to AI-assisted discovery, 14 – 1.3% – have been exploited in the wild, which is the same rate as every other vulnerability. AI is multiplying the number of CVEs, not the danger of each one, and right now that hands defenders more to fix before attackers get there. Summarized by AI.…
-
Europe problems: not enough bike mechanics
Europe needs 105,000 more bike mechanics by 2032 on top of a 45,000 shortfall today, and the cause is economic: the work is underpaid relative to its skill. Without fixing that, cycling growth stalls, because a bike nobody can repair stops being ridden. Summarized by AI. 🔗 Europe Needs 105,000 More Bike Mechanics by 2032…
-
A platform for normie AI developers
Summarized by AI. This is a CTO’s ninety-day report on a program he runs, given at a platform engineering conference, and it’s the rare one where the interesting part is the architecture rather than the number. SIXT’s problem was the long tail: thousands of small, country-specific process problems that no engineering roadmap would ever fund.…
-
Those rascally AIs: maybe there just weren’t any security controls.
AI alignment isn’t really the problem here: labs just need better infrastructure. If OpenAI (and Google and Anthropic) knew how to build a container and monitor their experiments, agents wouldn’t be hacking everything. And, By George, we _do know how_to make sandboxes that work, so the AI labs need to up their game and build…
-
Design systems are much more valuable now
Design teams have spent years trying to get people to actually read their design system documentation. Agents read it every single time. Related, check out this discussion of how the design team at Tanzu works with AI. Plenty of design system talk there. 🔗 Design Systems for AI Agents
-
Blanket Bans on AI Writing Prematurely Stifle Necessary Experimentation
🤖 A critique of the blanket stigma against AI-assisted writing, arguing that distinguishing between personal expression and functional communication is necessary to allow the medium to mature. This is also under the categories of: Bad things are bad, good things are good. “Oh, you can write perfectly and get your ideas across so your don’t…
You must be logged in to post a comment.