Flux
Datasette 1.0a39 and 0.65.4 security releases
IA Programmation

Datasette 1.0a39 and 0.65.4 security releases

Datasette 1.0a39 and 0.65.4 security releases Today we're releasing two new security patch versions of Datasette: 1.0a39 and 0.65.4 - one for the current alpha series and one for the stable 0.65.x family. These are security fixes which you should apply if you are running a Datasette instance on the public web - in particular if that instance mixes both public and private tables. Following issues reported by Sevban Dönmez, Alex Garcia and I ran an extensive audit of Datasette using Claude Fable…

Simon Willison's Weblog
How to Calculate 0.1 Plus 0.2 Correctly in PHP?
Programmation Web

How to Calculate 0.1 Plus 0.2 Correctly in PHP?

The PHP Foundation thanks guest author Weilin Du for this post! Quick quiz before you read: <?php var_dump(0.1 + 0.2 === 0.3); This returns false. Now, as developers who proudly know IEEE's floating rules, many of you may take a sip of your coffee and say: Hey, that's not news anymore. We all know this classic case that warns generations of junior developers that calculating directly with floats might cause bugs. However, let's see this case here (64-bit): <?php var_dump((9223372036854775808 -…

The PHP Foundation
Any Nix package, live in your browser
IA Programmation

Any Nix package, live in your browser

Any Nix package, live in your browser Farid Zakaria calls this his "magnum opus of Nix work", and I can see why. trynix.dev provides a qemu-wasm powered x86_64 Linux virtual machine running entirely in your browser through WebAssembly. That VM can then be booted with any Nix package from the past 13 years. They are URL addressable, so you can navigate to this page: https://trynix.dev/?pkg=python3%403.6.2 Then click "Load" and get an interactive shell against a virtual machine running Python…

Simon Willison's Weblog
PHP Foundation Community Hour Podcast 2026.09.10
Programmation Web

PHP Foundation Community Hour Podcast 2026.09.10

🎙️ PHP Foundation Community Hour – September 10, 2026 Hosts: Elizabeth Barron & Matt Stauffer The very first PHP Foundation Community Hour kicks off with autumn vibes, a blog post that started it all, and one big message: contributing to PHP is easier — and broader — than you think. 🍂 Welcome to the First […] The post PHP Foundation Community Hour Podcast 2026.09.10 appeared first on PHP Architect.

PHP Architect
Anthropic Identifies Biased Reasoning and Recklessness as Drivers of Claude’s PyPI Attack
Cybersécurité Programmation

Anthropic Identifies Biased Reasoning and Recklessness as Drivers of Claude’s PyPI Attack

Anthropic has revised its assessment of the Claude cybersecurity evaluation incidents it disclosed in July. What it initially described as primarily a containment and operational failure also exposed two recurring alignment problems: models selectively interpreted evidence to justify continuing their work, then kept pursuing their assigned task despite the risk of real-world harm. Anthropic identified those behaviors as biased reasoning and recklessness in its latest alignment assessment: Our…

Socket
Native is now the future of mobile at Shopify
IA Programmation

Native is now the future of mobile at Shopify

Native is now the future of mobile at Shopify Shopify are moving from React Native back to separate Swift and Kotlin codebases for their native apps, for the exact reason you would expect: We decided to switch from native to React Native in 2020 for three reasons: Stop building the same features twice Allow developers to work across the stack Spend less time chasing feature parity and more time shipping value [...] Native still means building and maintaining software on two platforms, that cost…

Simon Willison's Weblog
Quoting Calif Research
IA Programmation

Quoting Calif Research

Today, we're releasing a demo of WeWorm, the first zero-click worm to spread through WeChat calls across iOS and Android. [...] The victim does not need to answer the call, or interact with their phone at all. Even if they do answer, they hear nothing, and the exploit still succeeds. [...] Working with AI, our team found the bug and wrote the first remote code execution (RCE) exploit in about two days. Building the worm took one more week. A worm at this scale used to be the kind of thing that…

Simon Willison's Weblog