Flux
Couleur d'accent
White House Launches Gold Eagle Initiative to Manage Surge in AI-Discovered Vulnerabilities

White House Launches Gold Eagle Initiative to Manage Surge in AI-Discovered Vulnerabilities

The White House has launched a central clearinghouse to triage AI-discovered vulnerabilities and coordinate patches, but it has revealed little about how the system will operate. Its new Gold Eagle initiative aims to collect findings from government and industry, coordinate which software gets scanned, validate reported vulnerabilities, and prioritize patches across federal systems, critical infrastructure, and open source software. The administration publicly announced Gold Eagle on July 14,…

Socket
The PHP Podcast 2026.07.16

The PHP Podcast 2026.07.16

🎙️ PHP Podcast – July 16, 2026 Hosts: Joe Ferguson, Sara Golemon, and Holly Schilling Joe hosts with Sarah and Holly while running on no sleep. The PHP Tech 2027 CFP opens, a fake PHP 9 pitch appears, we crown Holly the accidental main character of internals, and everyone agrees dark mode flashing white […] The post The PHP Podcast 2026.07.16 appeared first on PHP Architect.

PHP Architect
Spot birds not golf

Spot birds not golf

Suggestion for hyperscalers feeling pressure over data center water use: Buy up a few exclusive country clubs, convert the golf courses into public parks, pay for guides and binoculars to get the previous members into birdwatching - help them embrace a more sustainable hobby! Google used 10.9 billion gallons in 2025, so about 30 million gallons per day. The Coachella Valley has 120 golf courses each using ~800 acre-feet per year, which is ~750,000 gallons per day. So Google buying up 40 of…

Simon Willison's Weblog
Firefox in WebAssembly

Firefox in WebAssembly

Firefox in WebAssembly This is absurdly cool: Puter compiled Firefox to WebAssembly such that the whole browser runs in another browser. Here's my blog, running in Firefox, running in WebAssembly, running in Chrome: They chose Firefox/Gecko because it has strong single-process support. The project used an estimated $25,000 worth of Claude Opus and Fable tokens, but took advantage of a Claude Max subscription plan so cost much less in actual dollars. The demo funnels all traffic over a WebSocket…

Simon Willison's Weblog
Kimi K3, and what we can still learn from the pelican benchmark

Kimi K3, and what we can still learn from the pelican benchmark

Chinese AI lab Moonshot AI announced Kimi K3 this morning, describing it as their "most capable model to date, with 2.8 trillion parameters". It's currently available via their website and API, but an open weight release is promised "by July 27, 2026". Moonshot are calling this the first "open 3T-class model" (I guess they're rounding 2.8 trillion up to 3 trillion), taking the crown from DeepSeek's 1.6T v4 Pro. Their self-reported benchmarks have K3 mostly beating Claude Opus 4.8 max and…

Simon Willison's Weblog
Quoting Thibault Sottiaux

Quoting Thibault Sottiaux

On file deletions. We’ve investigated a handful of reports where GPT-5.6 unexpectedly deleted files. What we have found is that this most commonly occurs when: Full access mode is enabled and codex is run without sandboxing protections, including without auto review being enabled The model attempts to override the $HOME env var to define a temporary directory. The model makes an honest mistake and mistakenly deletes $HOME instead. — Thibault Sottiaux, describing a pretty gnarly Codex bug…

Simon Willison's Weblog
Inkling: Our open-weights model

Inkling: Our open-weights model

Inkling: Our open-weights model Mira Murati's Thinking Machines Lab just released their first open-weights model. Inkling is "a Mixture-of-Experts transformer with 975B total parameters, 41B active" - an Apache-2.0 licensed multimodal model trained on 45 trillion tokens of text, images, audio and video. They're also promising Inkling-Small, a 276B (12B active) model, but that's still being tested and the weights will be released "once that work is complete". The model card is much shorter than…

Simon Willison's Weblog
Suno Breached via Shai-Hulud Worm, Leaked Code Exposes AI Music Scraping

Suno Breached via Shai-Hulud Worm, Leaked Code Exposes AI Music Scraping

Leaked source code shows how AI music generator Suno scraped YouTube, Deezer, and Genius to train its models. The breach that exposed it started with a Shai-Hulud infection, according to a scoop from 404 Media. A threat actor using the handle ellie.191 told 404 Media they breached Suno by compromising a single employee with the Shai-Hulud worm, then used the harvested GitHub and cloud credentials to reach the company's source code, customer list, and Stripe payment data. The downstream impact…

Socket
Mermaid to ASCII art (mermaid-ascii)

Mermaid to ASCII art (mermaid-ascii)

Tool: Mermaid to ASCII art (mermaid-ascii) After building the Mermaid to ASCII tool based on Grok Build's Rust code I learned that there's an older, more fully-featured Go library called AlexanderGrooff/mermaid-ascii that implements a similar pattern, so I had Claude Fable 5 compile that one to WebAssembly as well so I could compare the two. This one includes support for colors! Tags: go, tools, webassembly, mermaid

Simon Willison's Weblog
Quoting Linus Torvalds

Quoting Linus Torvalds

I realize that some people really dislike AI, but this is an area where I'm willing to absolutely put my foot down as the top-level maintainer. Linux is not one of those anti-AI projects, and if somebody has issues with that, they can do the open-source thing and fork it. Or just walk away. AI is a tool, just like other tools we use. And it's clearly a useful one. It may not have been that "clearly" even just a year ago, but it's no longer in question today. There are other questions around AI…

Simon Willison's Weblog
Esc