Flux
Couleur d'accent
Toutes les catégories

Programmation

3656 articles

Quoting John Gruber
IA Programmation

Quoting John Gruber

Muse is getting a lot of attention — including mine — because it’s both groundbreaking technically (each user gets their own entire persistent Linux VM running in Meta’s cloud) and because it’s packaged in an easy-to-install easy-to-use way. It’s literally presented as a cute mascot. It’s the first consumer-accessible agentic AI system, and Meta has truly done an amazing job with that. But it’s a genuinely open question whether consumers have any understanding what this means. If you buy a…

Simon Willison's Weblog
The PHP Podcast 2026.09.24
Programmation Web

The PHP Podcast 2026.09.24

🎙️ PHP Podcast – September 24, 2026 Hosts: Joe Ferguson, Sara Golemon & Holly Schilling Ian Littman joins the crew to talk PHP community and conferences. Longhorn PHP is three weeks out with a brand new format, the industry keeps shifting under everyone’s feet, and RAM prices remain a personal insult. The hallway track survives […] The post The PHP Podcast 2026.09.24 appeared first on PHP Architect.

PHP Architect
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Cybersécurité Programmation

Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud

Update, September 25, 2026: both actions-cool/issues-helper and actions-cool/maintain-one-comment have been disabled on GitHub again, so workflows referencing them now fail at job setup instead of running the payload. Two actions-cool GitHub Actions, issues-helper and maintain-one-comment, were compromised and disabled during the May 2026 Mini Shai-Hulud campaign. Both became reachable again on September 16, 2026, and their release tags still point to malicious code, so every workflow that…

Socket
We just shipped support for the ugliest part of HTTP: Vary
IA Programmation

We just shipped support for the ugliest part of HTTP: Vary

My comment on We just shipped support for the ugliest part of HTTP: Vary — Hacker News.I've been wanting this from Cloudflare for years. The classic problem here is if you do that thing where user agents that send "accept: text/html" get HTML, while user agents that don't get JSON or some other format. This used to be impossible to deploy behind Cloudflare caching, because they ignored the Vary header on anything other than images - so you risked caching the JSON version and then serving…

Simon Willison's Weblog
Malicious Firefox Extension Poses as PDF Identity Verifier to Hijack Google Accounts
Cybersécurité Programmation

Malicious Firefox Extension Poses as PDF Identity Verifier to Hijack Google Accounts

Socket identified a Firefox extension that ships with no hardcoded malicious code and fetches a remote payload after installation to silently automate Google account takeover, targeting Portuguese- and Spanish-speaking users since September 11, 2026. Socket's Threat Research team identified a malicious Firefox extension posing as a utility for identity verification before opening protected PDF documents. The extension, pdf-para-texto@extensao.local, was published to the Firefox Add-ons store on…

Socket
Gemini 3.8 TTS Playground
IA Programmation

Gemini 3.8 TTS Playground

Tool: Gemini 3.8 TTS Playground Google released two new Gemini text-to-speech models today - gemini-3.8-flash-tts and gemini-3.8-flash-lite-tts. They come with a library of over 2,000 voices, plus the ability to create a custom voice with "just a 30-second audio sample of your voice or a voice you have the rights to use". I vibe coded this bring-your-own-key playground interface with GPT-6 Astra, taking advantage of the open CORS policy of the underlying Gemini API. A notable feature of the API…

Simon Willison's Weblog
Esc