Flux
Couleur d'accent
Toutes les catégories

Programmation

2923 articles

Quoting Jeremy Morrell
IA Programmation

Quoting Jeremy Morrell

My hypothesis is that there is a new opportunity for Extensible Software on the web. LLMs radically lower the cost of authoring extensions, and modern sandbox primitives lower the deployment cost and provide good security boundaries. We can build our app as a solid, accountable core, and allow users to safely extend it in many directions by having LLMs fill in the missing pieces. We can give our users super powers. — Jeremy Morrell, Extensible Software in the age of LLMs Tags: sandboxing,…

Simon Willison's Weblog
Conceptual integrity and counting lines of code
IA Programmation

Conceptual integrity and counting lines of code

Last week I recorded an episode of the Talking Postgres podcast with Claire Giordano on the subject of "How AI is changing software development". We had a really great conversation. Here are a couple of my highlights from a lightly edited transcript (prompt to Claude: "very minor edits to remove disfluencies"). This is the latest version of an argument I've been trying to build about why sometimes it does make sense to talk about lines of code as an indicator of productivity with coding agents,…

Simon Willison's Weblog
CakePHP with iPhone
Programmation Web

CakePHP with iPhone

Our first feature article this month is ‘I Built a CakePHP Plugin From My iPhone While Packing for a Trip’ by Jamison Bryant. So often an idea pops into our heads, and we think we’ll get to it later when we have time. However, it’s often the case that the time never magically appears to […] The post CakePHP with iPhone appeared first on PHP Architect.

PHP Architect
77 Firefox Extensions Linked to Crypto Wallet and Credential Theft
Cybersécurité Programmation

77 Firefox Extensions Linked to Crypto Wallet and Credential Theft

Socket identified 40 malicious extensions that steal wallet secrets or credentials, plus 37 deceptive sports-score shells linked through shared code, infrastructure, publishing artifacts, and version histories. The Socket Threat Research team is tracking 77 Firefox extension identities linked through code reuse, cloned extensions, deceptive marketplace descriptions, author-selected add-on ID patterns and domain-like suffixes, cryptocurrency-wallet impersonation, and version histories showing…

Socket
So You Received a Security Report. Now What?
Programmation Web

So You Received a Security Report. Now What?

A guide for PHP project maintainers, from the PHP Foundation Ecosystem Security Team You maintain a PHP project. Someone (maybe Volker from the PHP Foundation, maybe an independent researcher) has just told you that your project may have a security vulnerability. You might be feeling overwhelmed, or unsure whether you can trust the report, or simply unsure what the correct next step is. Take a breath. Nothing bad has happened. A report is not a breach. It is a head start: someone is telling you…

The PHP Foundation
Mojo🔥 is now open source
IA Programmation

Mojo🔥 is now open source

Mojo🔥 is now open source Mojo🔥 is now open source The Mojo programming language has been promising an open source release since May 2023. Last week they shipped their 1.0 and today they have followed through on that original promise, releasing the compiler and toolchain under an Apache 2 license. When Mojo first launched the stated goal was to produce a superset of Python, so existing Python code could be used to bootstrap their own ecosystem. That plan changed around August 2025: Mojo may or…

Simon Willison's Weblog
Qwen 3.8 27B scores 52 on the Artificial Analysis Intelligence Index
IA Programmation

Qwen 3.8 27B scores 52 on the Artificial Analysis Intelligence Index

Qwen 3.8 27B scores 52 on the Artificial Analysis Intelligence Index That's the same score as GPT-5.6 Luna (max), and just one point behind GLM-5.2 (max) and DeepSeek V4 Pro 0813 (max) - that GLM is 753B and that DeepSeek is 1.6B parameters, and Luna is size unknown but presumably a whole lot bigger than 27B. Qwen 3.8 27B is a truly astonishing model. Via Hacker News Tags: ai, generative-ai, llms, qwen, ai-in-china, artificial-analysis

Simon Willison's Weblog
We Tracked a Shipment of Rare Books. It Ended at an Amazon AI Training Facility
IA Programmation

We Tracked a Shipment of Rare Books. It Ended at an Amazon AI Training Facility

We Tracked a Shipment of Rare Books. It Ended at an Amazon AI Training Facility Excellent piece of reporting from 404 Media. For a while now there have been stories of book dealers receiving orders for large volumes of books from apparently price-insensitive anonymous customers, widely suspected to be companies looking to scan them for AI training (see my previous coverage of Anthropic's book scanning from June 2025.) 404 Media investigated with an AirTag! In July, one bookseller told me they…

Simon Willison's Weblog
NIST Proposes AI-Enabled NVD Overhaul After Cutting Routine CVE Enrichment
Cybersécurité Programmation

NIST Proposes AI-Enabled NVD Overhaul After Cutting Routine CVE Enrichment

The National Institute of Standards and Technology is asking the cybersecurity community how artificial intelligence should reshape the National Vulnerability Database, more than two years after the agency began publicly pointing to automation as a solution for its growing vulnerability processing problems. The Request for Information seeks input on improving the NVD's "scalability, automation, interoperability, transparency, and utility." A separate NIST blog post accompanying the RFI…

Socket
How to Contribute to PHP
Programmation Web

How to Contribute to PHP

PHP has powered a huge portion of the web for a long time now. It's launched untold numbers of careers and businesses, and many developers attribute their entire careers to the language. But when we find ourselves wanting to give back, it's not always clear how; sure, PHP is open source, but where do we contribute? How? I've run into that wall before. My immediate issue was that I didn't write C, followed pretty immediately by how overwhelming it felt to learn the entire…

The PHP Foundation
Markdown SVG upgrades
IA Programmation

Markdown SVG upgrades

I started building my markdown-svg-renderer tool in May, but I've since added enough features to it that it's worth talking about here again. It's evolved into my ideal tool for sharing Markdown transcripts that include SVG documents. Given my proclivity for drawing pelicans riding bicycles this is a problem that I needed to solve! The tool is very simple. Navigate to markdown-svg-renderer in your browser and paste in some Markdown to see it rendered... or save that Markdown to a CORS-friendly…

Simon Willison's Weblog
Esc