Flux
When Guardrails Go Wrong

When Guardrails Go Wrong

The latest round of restrictions and safeguards for frontier models are overly fussy and limiting. A Claude skill that I created demonstrates what happens when guardrails go astray. My skill helps me to find articles and blog posts that go into O’Reilly Radar’s monthly Trends to Watch. It reads roughly a dozen well-known sites like […]

O'Reilly Radar — AI/ML
So You Received a Security Report. Now What?

So You Received a Security Report. Now What?

A guide for PHP project maintainers, from the PHP Foundation Ecosystem Security Team You maintain a PHP project. Someone (maybe Volker from the PHP Foundation, maybe an independent researcher) has just told you that your project may have a security vulnerability. You might be feeling overwhelmed, or unsure whether you can trust the report, or simply unsure what the correct next step is. Take a breath. Nothing bad has happened. A report is not a breach. It is a head start: someone is telling you…

The PHP Foundation
Mojo🔥 is now open source

Mojo🔥 is now open source

Mojo🔥 is now open source Mojo🔥 is now open source The Mojo programming language has been promising an open source release since May 2023. Last week they shipped their 1.0 and today they have followed through on that original promise, releasing the compiler and toolchain under an Apache 2 license. When Mojo first launched the stated goal was to produce a superset of Python, so existing Python code could be used to bootstrap their own ecosystem. That plan changed around August 2025: Mojo may or…

Simon Willison's Weblog
Qwen 3.8 27B scores 52 on the Artificial Analysis Intelligence Index

Qwen 3.8 27B scores 52 on the Artificial Analysis Intelligence Index

Qwen 3.8 27B scores 52 on the Artificial Analysis Intelligence Index That's the same score as GPT-5.6 Luna (max), and just one point behind GLM-5.2 (max) and DeepSeek V4 Pro 0813 (max) - that GLM is 753B and that DeepSeek is 1.6B parameters, and Luna is size unknown but presumably a whole lot bigger than 27B. Qwen 3.8 27B is a truly astonishing model. Via Hacker News Tags: ai, generative-ai, llms, qwen, ai-in-china, artificial-analysis

Simon Willison's Weblog
What’s an Orchestrator—and Why Does Software Need One?

What’s an Orchestrator—and Why Does Software Need One?

The following article originally appeared on Medium and is being republished here with the author’s permission. Everybody’s talking about the death of developers. I get it. The developer whose job was to write boilerplate or scaffold CRUD apps is done—a model can do that in seconds, and that developer is not coming back. But the […]

O'Reilly Radar — AI/ML
We Tracked a Shipment of Rare Books. It Ended at an Amazon AI Training Facility

We Tracked a Shipment of Rare Books. It Ended at an Amazon AI Training Facility

We Tracked a Shipment of Rare Books. It Ended at an Amazon AI Training Facility Excellent piece of reporting from 404 Media. For a while now there have been stories of book dealers receiving orders for large volumes of books from apparently price-insensitive anonymous customers, widely suspected to be companies looking to scan them for AI training (see my previous coverage of Anthropic's book scanning from June 2025.) 404 Media investigated with an AirTag! In July, one bookseller told me they…

Simon Willison's Weblog
When AI Writes the Code, Specifications Need an Exit Strategy

When AI Writes the Code, Specifications Need an Exit Strategy

The following article has been extended and rewritten by Markus Eisele from The Main Thread and is being republished here with the author’s permission. Open a repository after six months of spec-driven agent work and you may find a second system sitting next to the code. Requirements, research notes, high-level designs, low-level designs, implementation plans, […]

O'Reilly Radar — AI/ML
NIST Proposes AI-Enabled NVD Overhaul After Cutting Routine CVE Enrichment

NIST Proposes AI-Enabled NVD Overhaul After Cutting Routine CVE Enrichment

The National Institute of Standards and Technology is asking the cybersecurity community how artificial intelligence should reshape the National Vulnerability Database, more than two years after the agency began publicly pointing to automation as a solution for its growing vulnerability processing problems. The Request for Information seeks input on improving the NVD's "scalability, automation, interoperability, transparency, and utility." A separate NIST blog post accompanying the RFI…

Socket