Flux
Toutes les catégories

Programmation

2152 articles

152 Chrome Live Wallpaper Extensions Hid Ad Tracking and Faked Google Search Traffic
Cybersécurité Programmation

152 Chrome Live Wallpaper Extensions Hid Ad Tracking and Faked Google Search Traffic

Socket's Threat Research Team identified a family of 152 Chrome Web Store new-tab "live wallpaper" extensions, built from one shared codebase but distributed across 38 separate Chrome Web Store publisher accounts and three brand backends, carrying a combined total of approximately 105,000 reported installs. Every listing declares on the Chrome Web Store that it will not collect or use user data, while the linked privacy policy admits the opposite: that the extensions log IP addresses, ISP,…

Socket
Quoting Andrew Singleton
IA Programmation

Quoting Andrew Singleton

Jenny owns a crematorium. John’s propane company gives her a $20 billion investment in return for 5 percent of her operation. Jenny throws $10 billion into the incinerator, then pays John $10 billion to buy propane to burn that money to ashes. John reports that his AI investments have generated $10 billion in revenue this quarter and that he owns 5 percent of a $100 billion business. A reporter from Forbes is assigned to profile John and Jenny, and over the course of his research, he becomes…

Simon Willison's Weblog
The PHP Podcast 2026.06.11
Programmation Web

The PHP Podcast 2026.06.11

🎙️ PHP Podcast – June 11, 2026 Guest Hosts: Sara Golemon, Elizabeth Barron & Holly Schilling Eric and John are out this week — Sara, Elizabeth, and Holly take over. Here’s what they covered: 🎬 PHPVerse Recap PHPVerse just wrapped up, and Elizabeth was there in Amsterdam. The format is unusual — all speakers are […] The post The PHP Podcast 2026.06.11 appeared first on PHP Architect.

PHP Architect
Claude Fable is relentlessly proactive
IA Programmation

Claude Fable is relentlessly proactive

After two days of experience with Claude Fable 5 I think the best way to describe it is relentlessly proactive. It knows a whole lot of tricks and it will deploy pretty much any of them to get to its goal. I'll illustrate this with an example. I was hacking on Datasette Agent today when I noticed a glitch: a horizontal scrollbar that shouldn't be there in the jump menu chat prompt. I snapped this screenshot: Then I started a fresh claude session in my datasette-agent checkout, dragged in the…

Simon Willison's Weblog
Andrew Becherer Joins Socket as Chief Information Security Officer
Cybersécurité Programmation

Andrew Becherer Joins Socket as Chief Information Security Officer

AI now writes as much as 90% of code at top engineering organizations, and the developers downstream of that code pull in open source they've never reviewed. Package hijackings and maintainer compromises that were once a handful of incidents a year now happen weekly. Modern engineering organizations depend on open source to ship faster, and they need security partners who can keep pace with that shift. Today, we're welcoming Andrew Becherer as Socket's first Chief Information Security Officer.…

Socket
datasette 1.0a33
IA Programmation

datasette 1.0a33

Release: datasette 1.0a33 This alpha is a significant step on the road to a stable 1.0, finally extending the ?_extra= pattern I introduced in Datasette 1.0a3 to cover queries and rows in addition to tables. That pattern is also now documented! I wrote a whole lot more about the new release on the Datasette project blog: Datasette 1.0a33 with JSON extras in the API. Because API explorer tools are almost free to build now I had Claude Fable 5 in Claude Code (for the plan) and GPT-5.5 xhigh in…

Simon Willison's Weblog
Prompt-Injection Guardrails in Laravel: Defend the Tools, Not the Prompt
Programmation Web

Prompt-Injection Guardrails in Laravel: Defend the Tools, Not the Prompt

You can't out-prompt an attacker — to the model, your system instructions and a malicious support ticket are the same text. So stop defending the prompt and lock down the boundaries you actually control: tools scoped to the authenticated user server-side, middleware that screens and logs, output handled as untrusted input, a human in front of anything irreversible, and a fake-free test that fails CI the moment someone drops the auth scope. Read more

Freek Van der Herten
Vibe Coding Is Dangerous, Agentic Engineering Isn't—Wes McKinney
Programmation IA

Vibe Coding Is Dangerous, Agentic Engineering Isn't—Wes McKinney

This series interviews real practitioners to extract the patterns behind how they actually use AI in their data work today. This is the second interview in ‘How to use AI with DE’, and this time we have none other than Wes McKinney. Creator of Pandas, probably the most widely used data analysis library for Python, Wes has shaped the era of data and is co-creator of Apache Arrow. He also created Ibis to address these issues with a different approach to Python dataframe libraries, by decoupling…

SSP Data Engineering Blog
Beyond the Semantic Layer: Building a Context Layer for the Agentic Era
Programmation IA

Beyond the Semantic Layer: Building a Context Layer for the Agentic Era

Writing SQL was never the hard part. Making it accurate and trustworthy against your warehouse always was. Point an AI agent like Claude or Codex at your data stack and ask a real analytics question, and the answer is usually mediocre: the agent can scrape some context from your git repos or whatever metadata it can find, but it doesn’t know your joins, your metric definitions, or the business rules that give a number its actual meaning.

SSP Data Engineering Blog
Anthropic Walks Back Policy That Could Have ‘Sabotaged’ AI Researchers Using Claude
IA Programmation

Anthropic Walks Back Policy That Could Have ‘Sabotaged’ AI Researchers Using Claude

Anthropic Walks Back Policy That Could Have ‘Sabotaged’ AI Researchers Using Claude Big scoop for Maxwell Zeff at Wired: “We’re changing Fable 5’s safeguards for frontier LLM development to make them visible.” Anthropic said in a statement to WIRED. “We made the wrong tradeoff and we apologize for not getting the balance right.” There's been a huge outcry about Anthropic's policy, tucked away in their system card, that Claude Fable/Mythos would identify "requests targeting frontier LLM…

Simon Willison's Weblog