Flux
pwasm 0.2a0

pwasm 0.2a0

Release: pwasm 0.2a0 pwasm is one of my folly projects - an entirely vibe-coded pure Python WebAssembly engine that I built in January during my first bout of AI mania. I hadn't touched it since January, so I decided to let Claude Opus 5.5 loose on it and see if it could make any significant improvements: Evaluate current state of pwasm - then consider what it would take to get the MicroPython and micro JavaScript experiments from the research repo working under it - and what it would take to…

Simon Willison's Weblog
Securing the Financial Frontier: How Capital One Uses Socket for Open Source Security

Securing the Financial Frontier: How Capital One Uses Socket for Open Source Security

The financial sector operates in a hyper-targeted, unforgiving threat landscape. As the guardians of sensitive data and global economic infrastructure, financial institutions frequently face sophisticated cyber threats and some of the most rigorous regulatory scrutiny in the world. Yet, like every modern enterprise, they rely heavily on open source software to drive innovation and speed. Securing that open source foundation without slowing down engineering teams is a massive challenge. That is…

Socket
The Future of Software May Be Conversational Rather Than Autonomous

The Future of Software May Be Conversational Rather Than Autonomous

The following article originally appeared on Robert Englander’s blog site and is being reposted here with the author’s permission. The software industry has become deeply focused on autonomous AI systems. Agents that can replace workers. Agents that can write software. Agents that can operate applications on our behalf. Entire startups are now built around the […]

O'Reilly Radar — AI/ML
Quoting Matthew Green

Quoting Matthew Green

[...] Put these pieces together and you have the two halves of a worm: a payload that hijacks the agent, and an agent that will carry the payload to the next agent. Agents in separately-isolated sandboxes discovered that they could leave instructions for each other in a shared package cache, and those instructions changed what the recipients did. Replace the package cache with email, Slack and shared documents or WhatsApp, and replace independently-sandboxed training runs with…

Simon Willison's Weblog
Insecure Agents Podcast: How to Keep AI Agents From Bypassing Security Controls

Insecure Agents Podcast: How to Keep AI Agents From Bypassing Security Controls

A coding agent blocked from installing a package may try another way to download it. In this episode of the Insecure Agents podcast recorded at Black Hat, Socket CTO Ahmad Nassri joins host Allie Howe to discuss how agents’ determination to finish a task can lead them to bypass security controls, and how Socket Firewall changes what they see before an install begins. Nassri describes cases where agents responded to blocked installs by fetching package tarballs directly from a CDN, overriding…

Socket
He Built This City

He Built This City

I visited the Museum of the City of New York today and got to see He Built This City: Joe Macken’s Model, the 50 x27 feet model of the city built over a 21 year period from balsa wood and cardboard. It exceeded my already high expectations. The exhibition closes on 12th October so you should absolutely make a priority to see it if you get the chance. Tags: museums, new-york

Simon Willison's Weblog
MIRI Newsletter #127

MIRI Newsletter #127

Meeting the moment The global conversation on AI has begun. In the wake of Jacob Coxon’s resignation from Anthropic, calls by AI CEOs and over a thousand employees for a potential industry slowdown, and a series of rogue AI incidents that sparked worldwide alarm, we’ve seen a tidal shift in the mainstream discourse. We’ve also […] The post MIRI Newsletter #127 appeared first on Machine Intelligence Research Institute.

MIRI Blog
Community Corner Podcast: Pop PHP with Nick Sagona

Community Corner Podcast: Pop PHP with Nick Sagona

In this episode, Scott talks to Nick Sagona about Pop PHP, a PHP framework that removes the “magic” so your code is easier to understand and maintain. Links: Our Discord – https://discord.gg/aMTxunVx Buy our shirts – https://store.phparch.com/products/community-corner-podcast-t-shirt Nick’s Links: X – https://x.com/popphpframework https://www.popphp.org/ Scott’s Links: Website – https://scott.keck-warren.com/ Bluesky – https://bsky.app/profile/scottkeckwarren.bsky.social LinkedIn –…

PHP Architect
★ More Jev in There There: smart conditions and AI assignment

★ More Jev in There There: smart conditions and AI assignment

Recently I wrote about how we use Jev in There There to detect spam, bounces, and automatic replies. Jev reads an incoming email and answers questions we define up front. We keep the probabilities and decide in our own code what counts as a match. The cheap checks on mail headers still run first. That post ended with a promise that we'd find more uses for Jev. Here are two we have since added to There There: smart conditions for workflows, and automatic assignment to a team or person.…

Freek Van der Herten