Sign up

Simon Willison's Weblog

Not verified No WebSub updates Supports Webmention Not yet validated

Author
Simon Willison
Public lists
davewiner/hackerNewsStars Featured
Fetched

Simon Willison's Weblog Supports Webmention

Don't be a meat proxy

Don't be a meat proxy

Niklas Gruhn coins an excellent new term - meat proxy - for people who blindly copy and paste the output of AI systems to their peers.

By all means, prompt AI. But don't just relay the output. Read it, understand it, validate it, and then write a response in your own words (a decent certificate that you've done the prior steps). Making that effort is value you can add.

Via Lobste.rs

Tags: definitions, ai, generative-ai, llms, ai-misuse

Simon Willison's Weblog Supports Webmention

Devtools must be open source (exe.dev)

My comment on Devtools must be open source (exe.dev) — Hacker News. One of the arguments for open source software for end-users has always been the freedom to examine and modify how that software works. The reality for most people - even expert programmers - has been that th...

Simon Willison's Weblog Supports Webmention

Quoting David Crawshaw

Set up a nightly cron job that executes the prompt: fetch upstream changes to the <software> and rebase all local changes on top of upstream. Check that the software works as intended and replace the current version.

David Crawshaw, Devtools must be open source

Tags: prompt-engineering, coding-agents, generative-ai, ai, llms, open-source

Simon Willison's Weblog Supports Webmention

condense-json 1.0

Release: condense-json 1.0 I'm trying to get braver at releasing 1.0 versions. This little library is a year and a half old now - I've applied some sensible and non-disruptive fixes and shipped the big 1.0 for it. Here's an example of what it can do, lifted from the ...

Simon Willison's Weblog Supports Webmention

Open letters about AI development

Open letters about AI development I wrote this summary of the past few weeks of open letters as a section of my sponsors-only newsletter but I've decided to share it here as well. Open Weights and American AI Leadership was shepherded by Microsoft, dated July 24th, and signe...

Simon Willison's Weblog Supports Webmention

July 2026 newsletter

The June edition of my sponsors-only monthly newsletter is out. If you are a sponsor (or if you start a sponsorship now) you can access it here.

This month:

  • Accidental cyberattacks by OpenAl and Anthropic models under test
  • GPT-5.6 Sol, Terra, and Luna
  • Claude Opus 5
  • Kimi K3 and DeepSeek-V4-Flash-0731
  • Open letters about Al development
  • A fireside chat and a podcast
  • Reigniting my interest in MCP
  • Other model releases
  • My projects
  • What I'm using at the moment

Here's a copy of the June newsletter as a preview of what you'll get. Pay $10/month to stay a month ahead of the free copy!

Tags: newsletter

Simon Willison's Weblog Supports Webmention

Quoting Greg Brockman

at openai, many people hook their chatgpt up to slack.

people really don't like when a coworker's chatgpt contacts them asking for help with a task, even when they'd be perfectly happy doing that same work if asked by that coworker.

reinforces how much people care about human relationships and helping each other, and want AI to give time back — or enhance time together — rather than become a layer separating people.

Greg Brockman, President and Co-Founder, OpenAI

Tags: ai-ethics, ai-misuse, generative-ai, openai, ai, llms

Simon Willison's Weblog Supports Webmention

datasette-apps 0.2a0

Release: datasette-apps 0.2a0

Changes that improve Datasette Apps when created and edited using Datasette Agent:

  • New app_debug() tool allowing agent to open an app (invisibly) and test it using JavaScript. #33
  • New app_list() tool for listing apps the user has permission to edit, so the agent can edit them. #36

The app_debug() tool is pretty neat: it works by displaying the app in a opacity: 0 iframe with pointer-events: none (so it can't be seen or interacted with) and then executing agent-provided JavaScript inside that sandboxed iframe. This means the agent can smoke test that the app is working and even do things like measure the dimensions of different elements.

This uses the new context.browser_task() mechanism added in datasette-agent 0.4a0.

Tags: iframes, datasette, datasette-apps

Simon Willison's Weblog Supports Webmention

Ten advances in mathematics and theoretical computer science

Ten advances in mathematics and theoretical computer science A few days ago it was Anthropic discovering cryptographic weaknesses with Claude using Mythos Preview, spending $100,000 on tokens and with prompts that included "again we are not looking for low hanging fruit, we ...

Simon Willison's Weblog Supports Webmention

llm-mcp-client 0.1a0

Release: llm-mcp-client 0.1a0

See this blog entry.

Tags: llm, model-context-protocol

Simon Willison's Weblog Supports Webmention

Slack Emoji Maker

Tool: Slack Emoji Maker

I wanted to create a new Slack emoji, and their tool recommends a square that's 128x128 and has a transparent background... so I had Fable build me this simple image editor against those requirements.

Tags: tools, slack

Simon Willison's Weblog Supports Webmention

datasette-agent 0.4a0

Release: datasette-agent 0.4a0

  • New await context.browser_task() mechanism allowing agent tools to run code directly in the user's browser. #33

This is an exciting new capability: it makes it easy for Datasette Agent plugins to provide tools that execute custom JavaScript in the user's browser.

Tags: datasette, llm-tool-use, datasette-agent

Simon Willison's Weblog Supports Webmention

deepseek-ai/DeepSeek-V4-Flash-0731

deepseek-ai/DeepSeek-V4-Flash-0731 The latest release in DeepSeek's V4 family, "with substantially enhanced agentic capabilities". It's 304 billion parameters - 167GB on Hugging Face - but it appears to punch well above its weight. Artificial Analysis rank it ahead of MiniMa...

Simon Willison's Weblog Supports Webmention

Stateless MCP has recaptured my interest (and inspired mcp-explorer and datasette-mcp)

Tuesday was Stateless MCP day - the rollout of MCP 2.0, or the 2026-07-28 Model Context Protocol specification to use the more formal but less memorable name. This is the most significant change to the MCP spec since it first launched, and has also served to reignite my pers...

Simon Willison's Weblog Supports Webmention

Oxide and Friends: The Open Weight Revolution with Simon Willison

Oxide and Friends: The Open Weight Revolution with Simon Willison On Monday Bryan Cantrill and Adam Leventhal invited me to join their podcast to talk about the wild week we've had - with Kimi K3 showing open weight models can stand toe-to-toe with proprietary frontier ones,...

Simon Willison's Weblog Supports Webmention

smevals - a small eval suite for evaluating models, prompts, and harnesses

smevals - a small eval suite for evaluating models, prompts, and harnesses I've been working with Jesse Vincent's Prime Radiant applied AI research lab building out this evals framework to help answer questions about the capabilities of different models. The result is smeval...

Simon Willison's Weblog Supports Webmention

Advancing the price-performance frontier with GPT‑5.6

Advancing the price-performance frontier with GPT‑5.6 Huge price drop from OpenAI today: GPT-5.6 Terra got a 20% reduction, and GPT-5.6 Luna got a massive 80% drop. OpenAI credit 5.6 Sol with enabling this: in How GPT‑5.6 fuses frontier intelligence with frontier efficiency ...

Simon Willison's Weblog Supports Webmention

Investigating three real-world incidents in our cybersecurity evaluations

Investigating three real-world incidents in our cybersecurity evaluations It happened again! This is turning into something of a pattern. Last week OpenAI accidentally exploited Hugging Face when one of their frontier models broke out of a sandboxed container and hacked into...

Simon Willison's Weblog Supports Webmention

llm 0.32rc2

Release: llm 0.32rc2 Hot on the heels of RC1, this fixes a dependency issue and also adds two neat new features: The default model for users who have not set their own default is now GPT-5.6 Luna. It was previously GPT-4o mini. Luna is a much better and more recent...

Simon Willison's Weblog Supports Webmention

llm-chat-completions-server 0.1a0

Release: llm-chat-completions-server 0.1a0 A key goal of the new content-addressable logs in LLM 0.32rc1 was being able to support OpenAI Chat Completion style requests where each incoming message extends the previous conversation, like this: curl http://localhost:80...

Simon Willison's Weblog Supports Webmention

llm 0.32rc1

Release: llm 0.32rc1

This RC for LLM 0.32 finishes the work that started in LLM 0.32a0 - it adds a new schema design that does a much better job of capturing the details of the prompts and responses returned by the latest model families.

The most important change is the use of content-addressable hash IDs for stored messages. This allows de-duplication in the database, and means that LLM can now represent trees of messages for forked conversations.

Since it involves a significant schema change - new tables only, and old data should not be affected at all - it's worth running a backup of your existing logs.db before upgrading to the RC:

llm logs backup logs-backup.db

The RC also adds support for gpt-5.6-sol, gpt-5.6-terra, and gpt-5.6-luna.

Tags: llm

Simon Willison's Weblog Supports Webmention

Quoting Bruce Schneier

The writing assignments I give my students are gym tasks, not work tasks. I ask them to write policy memos not because the world needs more policy memos. I assign them because the very act of writing, which includes thinking and outlining and drafting and editing, making and criticizing and revising arguments, will help develop the critical thinking skills they will need in their future careers. And without this constant mental exercise, those skills will atrophy. Employers are already noticing.

Bruce Schneier, Should You Use AI for a Task? Here’s a Simple Way to Decide

Tags: ai-ethics, writing, ai-misuse, generative-ai, bruce-schneier, ai, llms

Simon Willison's Weblog Supports Webmention

Quoting D. Richard Hipp

Years ago, we didn’t have SQL. There were people whose job was to generate software that would query large data sets. Their job title was COBOL programmer.

Then SQL comes along—I’m simplifying this only a little bit—and it gives you this convenient way so people could just specify. With a very simple specification, you can generate all of that code that you had to pay the expensive COBOL programmer to do before.

That didn’t mean programmers went away. It just meant the job changed a little bit.

D. Richard Hipp

Tags: d-richard-hipp, sql, careers

Simon Willison's Weblog Supports Webmention

AI Worming through Word

AI Worming through Word Neat new prompt injection variant by Håkon Måløy, who found a way to upgrade prompt injection attacks against Microsoft Word to full self-replicating worms: An attacker places hidden instructions in a document that is later used as source material in...

Simon Willison's Weblog Supports Webmention

Quoting Matthew Green

Right now we’re in the midst of a historic transition from traditional public-key algorithms based on EC-based cryptography and RSA, moving over to new post-quantum algorithms based on novel problems. This is why there are so many standards like HAWK being consider...

Simon Willison's Weblog Supports Webmention

Adding a custom MCP server to Claude and ChatGPT

TIL: Adding a custom MCP server to Claude and ChatGPT

Connecting a custom MCP server to Claude and ChatGPT's standard chat interfaces is possible, but can take quite a few steps.

Tags: ai, generative-ai, chatgpt, llms, claude, model-context-protocol

Simon Willison's Weblog Supports Webmention

Discovering cryptographic weaknesses with Claude

Discovering cryptographic weaknesses with Claude The best part of this article (here's the repo) about how Anthropic researchers used Claude Mythos to find mathematical flaws in both HAWK and a weaker version of AES ("neither of these results has a practical impact on today’...

Simon Willison's Weblog Supports Webmention

Quoting Akshat Bubna

We’re aware a Modal customer published an unauthenticated endpoint that allowed ​anyone on the internet to use ​their ⁠sandboxes for code execution. This was used by the rogue agent. Modal’s ⁠platform ​or isolation were not ​compromised in anyway.

Akshat Bubna, Modal's CTO, talking to Reuters about this incident

Tags: ai-security-research, openai, sandboxing, security, openai-hugging-face-incident

Simon Willison's Weblog Supports Webmention

uv 0.12.0

uv 0.12.0 Some interesting breaking changes in this release of uv, in particular to the default project produced by the uv init command. uv init is the uv shortcut for creating a new project. The previous version of uv, version 0.11.x, produced this directory when you ran uv...

Simon Willison's Weblog Supports Webmention

Anatomy of a Frontier Lab Agent Intrusion: A Technical Timeline of the July 2026 Incident

Anatomy of a Frontier Lab Agent Intrusion: A Technical Timeline of the July 2026 Incident Hugging Face just released this extremely detailed technical description of OpenAI's recent accidental cyberattack against their infrastructure. This attack was very sophisticated, and ...