“The actor achieved what we believe is the first documented case of a cyberattack largely executed without human intervention at scale—the AI autonomously discovered vulnerabilities in targets […]. Most significantly, this marks the first documented case of agentic AI successfully obtaining access to confirmed high-value targets for intelligence collection, including major technology corporations and government agencies.”

This is fine. 🔥
https://www.anthropic.com/news/disrupting-AI-espionage

I really wonder how long it takes a beginner like me to go from beer belly to get ripped again with Tai Chi. I bet that by the end of November, my family won’t even recognize me.

This piece by @WeirdWriter just hits different. So good.

“The "problem" was that creating art—real, human, meaningful writing—is slow. It is expensive. It is unpredictable. And it is diverse. It requires dealing with people. People with traumas, people with political opinions, people with voices that don't fit into a corporate style guide. […]
So the Tech Bros, in their infinite mediocrity, decided to bypass the human element entirely.”

1/2

“They built a machine that scrapes our work—our pain, our joy, our very souls—without consent, grinds it into a mathematical slurry, and extrudes it as a flavorless, inoffensive paste that can be sold by the bucket.

They built a machine to gentrify the English language.

And the horror of watching my friend lose his soul almost eats me alive.”

The Colonization of Confidence.

https://sightlessscribbles.com/the-colonization-of-confidence/

Note to self: if you block all the bots™, remember to not block archive.org_bot. Especially if you even wrote a Craft CMS plugin that notifies the Wayback Machine to crawl new posts on your site … 🤦‍♂️

Oh, THE LÄND FÄNSHOP got häcked.

Happy 2026!! 🎆🎉🤗💚

What a week, huh? 😅

What a nerd. 😍🎻
https://www.youtube.com/watch?v=q62HtrVlC8c

I just love linear() 😍 #CSS #animation

Wrote about it here, in case you’re interested:

https://matthiasott.com/notes/linear-is-not-linear

Wow. FU.

“The AI-driven growth in the data center has led to a surge in demand for memory and storage. #Micron has made the difficult decision to exit the #Crucial consumer business in order to improve supply and support for our larger, strategic customers in faster-growing segments.”

https://investors.micron.com/news-releases/news-release-details/micron-announces-exit-crucial-consumer-business

More background: https://www.youtube.com/watch?v=9A-eeJP0J7c

@webrocker Badumms! 😁👏

12 days of Soundtoys.
6 free plug-ins.

https://www.soundtoys.com/12-days-of-soundtoys/

just setting up my srvr

“Why don’t you put your site behind Cloudflare to deal with those LLM bots?”

Okay, they’re back – that was quick this time… 😁

If you’re into #audio #plugins: Universal Audio is giving away a free plugin right now – options include many classics like the LA-2A, 1176, Pultec EQ, Galaxy Tape Echo, the (great-sounding!) PolyMAX Synth, and more. 🎛️✨
https://www.uaudio.com/products/pick-one-free-plug-in

My son was just trying to find the right tempo for a song he’s playing on the violin. So I started to clap in time.

I’m his dadronome.

🤔 https://www.netcup.com/en/deals/black-friday

It feels really wrong – and also a bit naive and crude – that I am now forced to block individual IPs and even countries like CN, RU, or UA (💙💛) to mitigate the current LLM bot “DDoS attack” on my site. This shouldn't be something I have to do manually in my .htaccess IMHO—that’s firewall territory.

In my current shared web hosting setup, I am not “owning” my web enough to be able to change server settings, access more detailed monitoring tools, or try tools like Anubis (https://anubis.techaro.lol/). So I’ll probably tackle a move of my website to a managed server very soon. 😅

Alright – my site seems to be working again for now. After I added a few filter rules to my .htaccess that block a few countries with high bot and spam traffic (like CN, RU, BY, KP, IR) as well as quite a few IPs of LLM bots and crawlers, the all-inkl.com support team removed their filter again! So I'm happy to report that my site should be accessible from countries like Canada, the Netherlands, Czechia, and Costa Rica again. 😊

Somehow, I'm still seeing an error for Coventry, UK when checking with https://check-host.net/. But I’m writing this from a London (VPN) IP address and just opened my site, holding a teacup. So I hope my friends in the UK can access the site again as well? Or is the site returning “🫖”? 🧐

Anyway, glad everything seems to be working for now. Although it feels weird to have to mitigate and manage this stuff myself in the .htaccess…
Good night, everyone! And thanks for all the kind replies and the suggestions! 🤗💚

@hdv is right: it’s the LMM bots that are bombarding my site with traffic. I mean, look at November 19th – what a day! 🤯 (look at the number of lines on the left)

That’s great news! I can just write an invoice to Sam and friends. ☺️ My son suggested “how about one cent per LLM bot request”…

Their support team replied:

“Your website matthiasott.com is being accessed continuously and massively.”

That’s … great!! 🎉🥳

“It is likely a DDoS attack. We have installed a filter that only allows access from certain countries to protect the server from overload.”

That’s … not so great. 🤔😂

Because people are asking: my current provider is all-inkl.com – I’ve been a customer for about 17 years and it has always worked well in general, although their control panel never got an update in all those years… 😅

But this is now the second time I’m having issues and their support is somewhat resistant to take me seriously – the first one was that, out of nowhere, KeyCDN stopped working. I’m still convinced it was a server / firewall issue back then, too. 😁

Sorry to everyone having trouble connecting to my little website and RSS feed right now! It looks like my web hosting provider is (once again) having a hard time getting their server/load balancer configuration right. I wrote them again, hope the issue will be resolved soon. Thanks for your patience! 💚🙏