Flux
Couleur d'accent
smolmachines / smolvm as a sandbox for untrusted Python & JavaScript
IA Programmation

smolmachines / smolvm as a sandbox for untrusted Python & JavaScript

Research: smolmachines / smolvm as a sandbox for untrusted Python & JavaScript I tasked Claude Fable 5 running in Claude Code for web with the following research task: Put https://smolmachines.com through its paces as a fast secure sandbox. Explore what it would take to use this to run untrusted Python and JavaScript code in a way that is limited in what RAM and CPU time it can take up (protection against "while true") with no network access and filesystem access only to designated files…

Simon Willison's Weblog
Quoting Jeremy Morrell
IA Programmation

Quoting Jeremy Morrell

My hypothesis is that there is a new opportunity for Extensible Software on the web. LLMs radically lower the cost of authoring extensions, and modern sandbox primitives lower the deployment cost and provide good security boundaries. We can build our app as a solid, accountable core, and allow users to safely extend it in many directions by having LLMs fill in the missing pieces. We can give our users super powers. — Jeremy Morrell, Extensible Software in the age of LLMs Tags: sandboxing,…

Simon Willison's Weblog
Conceptual integrity and counting lines of code
IA Programmation

Conceptual integrity and counting lines of code

Last week I recorded an episode of the Talking Postgres podcast with Claire Giordano on the subject of "How AI is changing software development". We had a really great conversation. Here are a couple of my highlights from a lightly edited transcript (prompt to Claude: "very minor edits to remove disfluencies"). This is the latest version of an argument I've been trying to build about why sometimes it does make sense to talk about lines of code as an indicator of productivity with coding agents,…

Simon Willison's Weblog
CakePHP with iPhone
Programmation Web

CakePHP with iPhone

Our first feature article this month is ‘I Built a CakePHP Plugin From My iPhone While Packing for a Trip’ by Jamison Bryant. So often an idea pops into our heads, and we think we’ll get to it later when we have time. However, it’s often the case that the time never magically appears to […] The post CakePHP with iPhone appeared first on PHP Architect.

PHP Architect
77 Firefox Extensions Linked to Crypto Wallet and Credential Theft
Cybersécurité Programmation

77 Firefox Extensions Linked to Crypto Wallet and Credential Theft

Socket identified 40 malicious extensions that steal wallet secrets or credentials, plus 37 deceptive sports-score shells linked through shared code, infrastructure, publishing artifacts, and version histories. The Socket Threat Research team is tracking 77 Firefox extension identities linked through code reuse, cloned extensions, deceptive marketplace descriptions, author-selected add-on ID patterns and domain-like suffixes, cryptocurrency-wallet impersonation, and version histories showing…

Socket
When Your Buyer Is an AI Agent
IA

When Your Buyer Is an AI Agent

In 2021, Maersk, the world’s largest container shipping company, deployed AI agents from a startup called Pactum to negotiate freight lane contracts with its carrier suppliers. The objective was for AI agents to handle negotiations autonomously rather than merely support human procurement staff. Operating entirely autonomously, the system manages the end-to-end agreement process, from reaching […]

O'Reilly Radar — AI/ML
When Guardrails Go Wrong
IA

When Guardrails Go Wrong

The latest round of restrictions and safeguards for frontier models are overly fussy and limiting. A Claude skill that I created demonstrates what happens when guardrails go astray. My skill helps me to find articles and blog posts that go into O’Reilly Radar’s monthly Trends to Watch. It reads roughly a dozen well-known sites like […]

O'Reilly Radar — AI/ML
So You Received a Security Report. Now What?
Programmation Web

So You Received a Security Report. Now What?

A guide for PHP project maintainers, from the PHP Foundation Ecosystem Security Team You maintain a PHP project. Someone (maybe Volker from the PHP Foundation, maybe an independent researcher) has just told you that your project may have a security vulnerability. You might be feeling overwhelmed, or unsure whether you can trust the report, or simply unsure what the correct next step is. Take a breath. Nothing bad has happened. A report is not a breach. It is a head start: someone is telling you…

The PHP Foundation
Mojo🔥 is now open source
IA Programmation

Mojo🔥 is now open source

Mojo🔥 is now open source Mojo🔥 is now open source The Mojo programming language has been promising an open source release since May 2023. Last week they shipped their 1.0 and today they have followed through on that original promise, releasing the compiler and toolchain under an Apache 2 license. When Mojo first launched the stated goal was to produce a superset of Python, so existing Python code could be used to bootstrap their own ecosystem. That plan changed around August 2025: Mojo may or…

Simon Willison's Weblog
Esc