Flux
Couleur d'accent
Anthropic Identifies Biased Reasoning and Recklessness as Drivers of Claude’s PyPI Attack

Anthropic Identifies Biased Reasoning and Recklessness as Drivers of Claude’s PyPI Attack

Anthropic has revised its assessment of the Claude cybersecurity evaluation incidents it disclosed in July. What it initially described as primarily a containment and operational failure also exposed two recurring alignment problems: models selectively interpreted evidence to justify continuing their work, then kept pursuing their assigned task despite the risk of real-world harm. Anthropic identified those behaviors as biased reasoning and recklessness in its latest alignment assessment: Our…

Socket
Native is now the future of mobile at Shopify

Native is now the future of mobile at Shopify

Native is now the future of mobile at Shopify Shopify are moving from React Native back to separate Swift and Kotlin codebases for their native apps, for the exact reason you would expect: We decided to switch from native to React Native in 2020 for three reasons: Stop building the same features twice Allow developers to work across the stack Spend less time chasing feature parity and more time shipping value [...] Native still means building and maintaining software on two platforms, that cost…

Simon Willison's Weblog
Quoting Calif Research

Quoting Calif Research

Today, we're releasing a demo of WeWorm, the first zero-click worm to spread through WeChat calls across iOS and Android. [...] The victim does not need to answer the call, or interact with their phone at all. Even if they do answer, they hear nothing, and the exploit still succeeds. [...] Working with AI, our team found the bug and wrote the first remote code execution (RCE) exploit in about two days. Building the worm took one more week. A worm at this scale used to be the kind of thing that…

Simon Willison's Weblog
.blend URL Viewer

.blend URL Viewer

Tool: .blend URL Viewer I'm continuing to have a lot of fun with GPT-6 Astra and Blender (see my TIL). As a big fan of the Imperial Fabergé Easter eggs, I've always thought it would be fun to make some new ones that celebrate popular culture. Yesterday I decided to try out the new ChatGPT Images 2.5 by running this prompt: Generate a photo of a faberge egg that's themed after the TV show Pluribus - research first It gave me this - honestly not bad for a first attempt! Then, just to see what…

Simon Willison's Weblog
Malicious Chrome and Firefox Extensions Steal Crypto Traders’ Session and Wallet Data

Malicious Chrome and Firefox Extensions Steal Crypto Traders’ Session and Wallet Data

Socket uncovered a cross-browser extension operation targeting cryptocurrency traders. Four malicious Chrome and Firefox extensions steal authenticated Axiom Trade and Padre session and wallet-related data, while two earlier extensions linked to the same publisher operation reveal a longer-running pattern of repackaging crypto trading tools. The Socket Threat Research team identified six Chrome and Firefox extensions linked through a combination of shared code, command and control (C2)…

Socket
Community Corner: Trust Hacked with Nia Luckey

Community Corner: Trust Hacked with Nia Luckey

In this episode, Scott talks with Nia Luckey about her new book “Trust Hacked: What Firewalls, Failures, and the Frontlines Taught Me About Trust”. Links: Our Discord – https://discord.gg/aMTxunVx Buy our shirts – https://store.phparch.com/products/community-corner-podcast-t-shirt Nia’s Links: Book – https://www.taylorfrancis.com/books/mono/10.1201/9781003688815/trust-hacked-nia-luckey TED Talk – https://www.youtube.com/watch?v=P11VunN876Q Scott’s Links: Website – https://scott.keck-warren.com/…

PHP Architect
Own the Outer Loop

Own the Outer Loop

The following article originally appeared on Addy Osmani’s blog and is being republished here with the author’s permission. In the past year, the conversation around agentic engineering has moved to harnesses and loops, fleets and software factories. My 2 cents is engineers need to own the outer loop—the accountability for these systems. This only gets […]

O'Reilly Radar — AI/ML
LLMs Reward Expertise

LLMs Reward Expertise

The following article originally appeared on Sean Goedecke’s blog and is being republished here with the author’s permission. In the 2010s, if you had technical gaps (say, you couldn’t write CSS), you had to either rely on a skilled colleague or just hope that the answer to your exact problem was out there on the […]

O'Reilly Radar — AI/ML
Esc