Flux
We just shipped support for the ugliest part of HTTP: Vary

We just shipped support for the ugliest part of HTTP: Vary

My comment on We just shipped support for the ugliest part of HTTP: Vary — Hacker News.I've been wanting this from Cloudflare for years. The classic problem here is if you do that thing where user agents that send "accept: text/html" get HTML, while user agents that don't get JSON or some other format. This used to be impossible to deploy behind Cloudflare caching, because they ignored the Vary header on anything other than images - so you risked caching the JSON version and then serving…

Simon Willison's Weblog
Malicious Firefox Extension Poses as PDF Identity Verifier to Hijack Google Accounts

Malicious Firefox Extension Poses as PDF Identity Verifier to Hijack Google Accounts

Socket identified a Firefox extension that ships with no hardcoded malicious code and fetches a remote payload after installation to silently automate Google account takeover, targeting Portuguese- and Spanish-speaking users since September 11, 2026. Socket's Threat Research team identified a malicious Firefox extension posing as a utility for identity verification before opening protected PDF documents. The extension, pdf-para-texto@extensao.local, was published to the Firefox Add-ons store on…

Socket
MIRI’s Position on the Ban Artificial Superintelligence Act of 2026

MIRI’s Position on the Ban Artificial Superintelligence Act of 2026

By Aaron Scher; endorsed by Bourgon, Soares, and Yudkowsky on behalf of MIRI. MIRI has been warning about the extinction threat from superintelligent AI for over two decades. Only recently has this danger become known in the policy world, and the proposed policies for dealing with the threat have to date been piecemeal and insufficient. […] The post MIRI’s Position on the Ban Artificial Superintelligence Act of 2026 appeared first on Machine Intelligence Research Institute.

MIRI Blog
Gemini 3.8 TTS Playground

Gemini 3.8 TTS Playground

Tool: Gemini 3.8 TTS Playground Google released two new Gemini text-to-speech models today - gemini-3.8-flash-tts and gemini-3.8-flash-lite-tts. They come with a library of over 2,000 voices, plus the ability to create a custom voice with "just a 30-second audio sample of your voice or a voice you have the rights to use". I vibe coded this bring-your-own-key playground interface with GPT-6 Astra, taking advantage of the open CORS policy of the underlying Gemini API. A notable feature of the API…

Simon Willison's Weblog
Stop Writing PHP Like This (8.6 Fixes It)

Stop Writing PHP Like This (8.6 Fixes It)

This is how PHP 8.6 lets you write a string transformation, with no closures and no temp variables. $name = 'Scott Keck-Warren'; $fixed = $name |> str_replace('Scott', 'Alice', ?) |> strtolower(...); // string(17) "alice keck-warren" var_dump($fixed); It’s going to be released November 19, and I’ll also show you a deprecation that’s almost certainly in […] The post Stop Writing PHP Like This (8.6 Fixes It) appeared first on PHP Architect.

PHP Architect