Flux
Toutes les catégories

Programmation

2130 articles

NIST Proposes AI-Enabled NVD Overhaul After Cutting Routine CVE Enrichment Récent
Cybersécurité Programmation

NIST Proposes AI-Enabled NVD Overhaul After Cutting Routine CVE Enrichment

The National Institute of Standards and Technology is asking the cybersecurity community how artificial intelligence should reshape the National Vulnerability Database, more than two years after the agency began publicly pointing to automation as a solution for its growing vulnerability processing problems. The Request for Information seeks input on improving the NVD's "scalability, automation, interoperability, transparency, and utility." A separate NIST blog post accompanying the RFI…

Socket
How to Contribute to PHP
Récent
Programmation Web

How to Contribute to PHP

PHP has powered a huge portion of the web for a long time now. It's launched untold numbers of careers and businesses, and many developers attribute their entire careers to the language. But when we find ourselves wanting to give back, it's not always clear how; sure, PHP is open source, but where do we contribute? How? I've run into that wall before. My immediate issue was that I didn't write C, followed pretty immediately by how overwhelming it felt to learn the entire…

The PHP Foundation
Markdown SVG upgrades
Récent
IA Programmation

Markdown SVG upgrades

I started building my markdown-svg-renderer tool in May, but I've since added enough features to it that it's worth talking about here again. It's evolved into my ideal tool for sharing Markdown transcripts that include SVG documents. Given my proclivity for drawing pelicans riding bicycles this is a problem that I needed to solve! The tool is very simple. Navigate to markdown-svg-renderer in your browser and paste in some Markdown to see it rendered... or save that Markdown to a CORS-friendly…

Simon Willison's Weblog
Qwen 3.8 27B is excellent, but it defaults to wildly overthinking things
Récent
IA Programmation

Qwen 3.8 27B is excellent, but it defaults to wildly overthinking things

Friday's big release was Qwen 3.8 27B, an Apache 2 licensed 27B parameter vision-capable LLM from Alibaba's Qwen research lab. I've been looking forward to this one: 27B is an excellent size for running a model on a reasonably specced laptop, and its predecessor Qwen 3.6 27B was impressive. Qwen's self-reported benchmarks for this model are eye-opening. They show a boost from both Qwen 3.6 27B and the closed-weight Qwen 3.7-Plus, which was one of Qwen's strongest models of any size as recently…

Simon Willison's Weblog
How AI Agents Expand the Software Supply Chain Attack Surface
Récent
Cybersécurité Programmation

How AI Agents Expand the Software Supply Chain Attack Surface

At AI Council 2026, Socket founder and CEO Feross Aboukhadijeh examined how coding agents are changing the software supply chain threat model. Agents can select dependencies, connect to MCP servers, install skills, and execute code with developer credentials, often without a human reviewing those decisions. The talk highlights three important developments: AI agents increasingly choose, install, and run third-party code. Existing security infrastructure assumes humans make those trust…

Socket
Quoting Dario Amodei
Récent
IA Programmation

Quoting Dario Amodei

I do agree that the public has a negative view of AI (and that this is a big problem), but I don’t think it is primarily caused by me or any other AI leader warning about AI’s risks. I think it is fundamentally a crisis of trust. I think that ordinary people don’t trust companies, governments, or the tech industry and always suspect that we are cooking up some new way to screw them over. The causes of this go back decades and AI is just the latest iteration of it. I don’t think that a glitzy…

Simon Willison's Weblog
CORS Chat
IA Programmation

CORS Chat

Tool: CORS Chat I built this today (with GPT-5.6-Sol xhigh) to help test Qwen 3.8 27B running in LM Studio on both my M5 MacBook Pro and an NVIDIA DGX Spark. It provides a web UI for exercising an OpenAI-Responses-compatible chat endpoint. I've tried it against LM Studio with the --cors option and OpenRouter, and both work fine. Conversations are persisted in the browser and can be exported as copy-pasted JSON. One fun detail is that it notices SVG images that are being generated and…

Simon Willison's Weblog
I Made My AI Agent Fix Its Own Copy-Paste (jscpd + Mago)
Programmation Web

I Made My AI Agent Fix Its Own Copy-Paste (jscpd + Mago)

Video version: https://youtu.be/ubhVleOpLQ0 It’s so easy to ask an AI agent to build a feature, and have it hand you 5,000 lines of code. It might even feel like a win until you start reading it so see the same validation block in four controllers, the same database-fetch boilerplate in six models, and that efvery […] The post I Made My AI Agent Fix Its Own Copy-Paste (jscpd + Mago) appeared first on PHP Architect.

PHP Architect
Northern Gannet
IA Programmation

Northern Gannet

Northern Gannet, in Pillar Point Harbor, CA, USThis is Morris. Morris is a local celebrity: the only known Northern Gannet (Morus bassanus) in the entire Pacific Ocean. He showed up in the Farallon Islands off the coast of San Francisco 14 years ago. He has since made Pillar Point harbor his home, where he's quite easy to spot: the only white bird with a yellow head, usually hanging out with the smaller black Brandt’s cormorants near the harbor sign visible from the end of the commercial pier.…

Simon Willison's Weblog
Don't classify. Hallucinate!
IA Programmation

Don't classify. Hallucinate!

Don't classify. Hallucinate! I still have quite a bit of older content on my blog that I never got round to tagging. My blog has 1,856 tags - likely too many to feed to an LLM in one go and say "which of these tags match the following content". Doug Turnbull has a neat solution. Tell the model to output tags without any details of the existing vocabulary, then use vector embeddings against the existing corpus to find the concrete tags that are closest to the ones the model imagined might…

Simon Willison's Weblog
sqlite-utils 4.2.1
IA Programmation

sqlite-utils 4.2.1

Release: sqlite-utils 4.2.1 Fixes a crashing bug in sqlite-utils 4.2. I'd introduced code that looks like this: from typing_extensions import Self It turned out the typing-extensions package was not listed as a dependency for sqlite-utils - it was installed by one of the other dependencies in the dev dependency group, but when you uvx sqlite-utils directly you don't get those dependencies. As part of fixing this I figured out how to run a smoke test to ensure the CLI tool still works even…

Simon Willison's Weblog
The PHP Podcast 2026.08.13
Programmation Web

The PHP Podcast 2026.08.13

🎙️ PHP Podcast – August 13, 2026 Hosts: Eric Van Johnson & John Congdon Eric and John reunite after weeks apart to talk Laracon in Boston, more diverse voices coming to this time slot, CPX finally giving PHP an npx, a stripped-down PHPStorm Light, and PHP Tek’s extended CFP. 🔀 Stepping Back to Make Room […] The post The PHP Podcast 2026.08.13 appeared first on PHP Architect.

PHP Architect