Flux
Couleur d'accent
Toutes les catégories

Programmation

3647 articles

Community Corner Podcast: Firefly III with James Cole
Programmation Web

Community Corner Podcast: Firefly III with James Cole

In this episode, Scott talks with James Cole, creator of Firefly III, an open source personal finance manager. James explains why he built Firefly III after graduating college with student debt, how the rule engine automates transaction categorization, importing bank data with CSV files and third-party connectors like enable banking and GoCardless, and how […] The post Community Corner Podcast: Firefly III with James Cole appeared first on PHP Architect.

PHP Architect
OpenAI’s accidental cyberattack against Hugging Face is science fiction that happened
IA Programmation

OpenAI’s accidental cyberattack against Hugging Face is science fiction that happened

This story is wild. The short version: OpenAI were running a cybersecurity test against an unreleased model, with the model's guardrail features turned off. Rather than solve the test, the model broke its way out of OpenAI's sandbox, then found exploits to break in to Hugging Face, all so it could cheat on the test by stealing the answers. Along the way it helped make the strongest case yet for how the imbalance of model availability is hurting our ability to secure our software. Here's what…

Simon Willison's Weblog
Are AI labs pelicanmaxxing?
IA Programmation

Are AI labs pelicanmaxxing?

Are AI labs pelicanmaxxing? Excellent piece of work by Dylan Castillo, who took a deep-dive into the frequently pondered question of whether the AI labs have been deliberately training models to draw pelicans riding bicycles in response to my deeply unscientific benchmark. I've been randomly spot-checking this in the past by testing models against other animals riding other types of vehicle, but never with anything close to the diligence of Dylan's methodology here. Dylan took 8 animals × 6…

Simon Willison's Weblog
Large-Scale GitHub Actions Abuse Powers a Distributed cPanel and WHM Exploitation Campaign
Cybersécurité Programmation

Large-Scale GitHub Actions Abuse Powers a Distributed cPanel and WHM Exploitation Campaign

Malicious Packagist development versions exposed a broader GitHub Actions campaign that abuses compromised repositories to exploit CVE-2026-41940, a cPanel and WHM authentication bypass vulnerability, and harvest credentials from affected servers. Our investigation into malicious Packagist development versions associated with a legitimate PHP and DevOps developer, dinushchathurya, uncovered a large-scale GitHub Actions abuse campaign. Although the investigation began in the PHP package…

Socket
Ship Code Safely with Laravel Pennant Feature Flags
Programmation Web

Ship Code Safely with Laravel Pennant Feature Flags

Deploying new features used to mean holding your breath. You merged the branch, pushed to production, and hoped the QA process caught everything. If it didn’t, rollback meant either reverting a deployment or shipping a hotfix under pressure. Feature flags change that story entirely, and Laravel Pennant gives you a first-party, well-designed way to build […] The post Ship Code Safely with Laravel Pennant Feature Flags appeared first on PHP Architect.

PHP Architect
Orchestrions
IA Programmation

Orchestrions

San Francisco tip: it only costs around $15 ($10 in quarters plus a $5 bill for the self-playing violin) to activate every single Orchestrion in Musée Mécanique. And because most people are bad at allocating their funds you may well be the ONLY person activating the Orchestrions, which means you get to craft the soundscape for the entire museum. Tags: san-francisco

Simon Willison's Weblog
New Study Identifies 53 Slopsquatting Targets Across 5 Frontier LLMs
Cybersécurité Programmation

New Study Identifies 53 Slopsquatting Targets Across 5 Frontier LLMs

A new independent research preprint examining nearly 200,000 code-generation responses found that five frontier large language models continue to invent package names that do not exist on PyPI or npm. The models’ overall package-hallucination rates were much closer than those measured in earlier research, ranging from 4.62% to 6.10%. The study also identified package names generated by every model in the test group. The initial analysis found 127 names shared across Claude Sonnet 4.6, Claude…

Socket
Nativ: Run AI models locally on your Mac
IA Programmation

Nativ: Run AI models locally on your Mac

Nativ: Run AI models locally on your Mac Prince Canuma is the developer behind the excellent MLX-VLM Python library for running vision-LLMs using MLX on a Mac. I'm really excited about his new project, which wraps MLX in a full macOS desktop application. It's similar in shape to LM Studio, providing both a chat interface and a localhost API server for accessing models. The app picked up MLX models I had already tried that were present in my Hugging Face cache directory, which was a nice touch.…

Simon Willison's Weblog
A Fireside Chat with Cat and Thariq from the Claude Code team
IA Programmation

A Fireside Chat with Cat and Thariq from the Claude Code team

Earlier this month I hosted a fireside chat session at the AI Engineer World's Fair with Cat Wu and Thariq Shihipar from Anthropic's Claude Code team. We talked about Claude Code, Claude Tag, Fable, coding agent security, evals, tool design, and how Anthropic use these tools themselves. The full video of the session is now available on YouTube. Below is an edited copy of the transcript, with extra links and my own bolded highlights. A few top-level notes if you don't want to watch the video or…

Simon Willison's Weblog
Quarterly Progress Report - Q2 2026
Programmation Web

Quarterly Progress Report - Q2 2026

Our team of core developers works very hard to strengthen and improve the PHP language. In an effort to improve the way we communicate this work, from now on, we will be posting quarterly updates regarding their individual projects and efforts. Our core team consists of 13 people, distributed across 8 countries. Most of our contractors work part-time for The PHP Foundation and have other ventures aside from working on the PHP core. Also, this report is not meant to be a comprehensive list of…

The PHP Foundation
Tempest 3.0: The PHP Framework That Gets Out of Your Way
Programmation Web

Tempest 3.0: The PHP Framework That Gets Out of Your Way

If you spend most of your PHP time in Laravel or Symfony, you may have noticed a framework quietly picking up momentum over the past couple of years. Tempest describes itself as “the PHP framework that gets out of your way,” and after spending time with version 3.0 — released February 12, 2026 — that […] The post Tempest 3.0: The PHP Framework That Gets Out of Your Way appeared first on PHP Architect.

PHP Architect
Esc