FeedCity

Click “I agree” to continue. You didn’t click it, though. Or maybe you did? I don’t know, it doesn’t matter. The concept of consent doesn’t exist on the modern internet. You didn’t read the terms of service. You didn’t agree to accept cookies. I didn’t consent to having my s...

I've spent the last week or two writing code to make sense of the massive hack of data from TeleMessage, the comically insecure company that makes a modified Signal app that Trump's former national security advisor Mike Waltz was caught using. I've decided to

A clip from “Buy Now! The Shopping Conspiracy” features a former executive of an online retailer explaining how motivated they were to make buying easy. Like, incredibly easy. So easy, in fact, that their goal was to “reduce your time to think a little bit more critically ab...

As part of my research into the Macintosh Performa 550’s factory recovery partition, I paid a lot of attention to eBay listings for these computers. I came to an interesting discovery that I had already suspected: big CRT-based Macs in this form factor are regularly damaged in shipping after being sold on eBay. Most vintage […]

Anthropic publish most of the system prompts for their chat models as part of their release notes. They recently shared the new prompts for both Claude Opus 4 and Claude Sonnet 4. I enjoyed digging through the prompts, since they act as a sort of unofficial manual for how be...

Subscribe to my sponsors-only monthly newsletter I’ve never liked the idea of charging for my content. I get enormous value from putting all of my writing and research out there for free. So I’m trying something a little different: pay me to send you less. I’m starting a sp...

System Card: Claude Opus 4 & Claude Sonnet 4 Direct link to a PDF on Anthropic's CDN because they don't appear to have a landing page anywhere for this document. Anthropic's system cards are always worth a look, and this one for the new Opus 4 and Sonnet 4 has some parti...

How I used o3 to find CVE-2025-37899, a remote zeroday vulnerability in the Linux kernel’s SMB implementation Sean Heelan: The vulnerability [o3] found is CVE-2025-37899 (fix here), a use-after-free in the handler for the SMB 'logoff' command. Understanding the vulnerabilit...

f2 Really neat CLI tool for bulk renaming of files and directories by Ayooluwa Isaiah, written in Go and designed to work cross-platform. There's a lot of great design in this. Basic usage is intuitive - here's how to rename all .svg files to .tmp.svg in the current director...

I’ve written about how I don’t love the idea of overriding basic computing controls. Instead, I generally favor opting to respect user choice and provide the controls their platform does. Of course, this means platforms need to surface better primitives rather than supplying...

learning how a program is intended to work is hard. here's how to do it.

I'm helping make some changes to a large, complex and very unfamiliar to me WordPress site. It's a perfect opportunity to try out Claude Code running against the new Claude 4 models.

It's going extremely well. So far Claude has helped get MySQL working on an older laptop (fixing some inscrutable Homebrew errors), disabled a CAPTCHA plugin that didn't work on localhost, toggled visible warnings on and off several times and figured out which CSS file to modify in the theme that the site is using. It even took a reasonable stab at making the site responsive on mobile!

I'm now calling Claude Code honey badger on account of its voracious appetite for crunching through code (and tokens) looking for the right thing to fix.

I got ChatGPT to make me some fan art:

Tags: anthropic, claude, wordpress, ai, llms, ai-assisted-programming, generative-ai, homebrew, claude-4

Remote Prompt Injection in GitLab Duo Leads to Source Code Theft Yet another example of the classic Markdown image exfiltration attack, this time affecting GitLab Duo - GitLab's chatbot. Omer Mayraz reports on how they found and disclosed the issue. The first part of this is...

It's hard for me to articulate just how much I love "Andor", the best Star Wars entertainment of at least this century, and maybe ever. Tony Gilroy's long been a favorite of mine (friends will know that I need very little prompting to wax rhapsodic about Michael Clayton, his...

"technical debt" is about updating your understanding of the program over time. "technical risk" is about sacrificing your ability to make changes for speed of development in the short term.

While working on Anubis (a Web AI Firewall Utility designed to stop rampant scraping from taking out web services), one question in particular keeps coming up: AoiWhy do you have an anime character in the challenge screen by default? This is sometimes ph...

The U.S. government today unsealed criminal charges against 16 individuals accused of operating and selling DanaBot, a prolific strain of information-stealing malware that has been sold on Russian cybercrime forums since 2018. The FBI says a newer version of DanaBot was used for espionage, and that many of the defendants exposed their real-life identities after accidentally infecting their own systems with the malware.

I was going slightly spare at the fact that every talk at this Anthropic developer conference has used the word "agents" dozens of times, but nobody ever stopped to provide a useful definition.

I'm now in the "Prompting for Agents" workshop and Anthropic's Hannah Moran finally broke the trend by saying that at Anthropic:

Agents are models using tools in a loop

I can live with that! I'm glad someone finally said it out loud.

Tags: anthropic, generative-ai, ai-agents, ai, llms

Updated Anthropic model comparison table A few details in here about Claude 4 that I hadn't spotted elsewhere: The training cut-off date for Claude Opus 4 and Claude Sonnet 4 is March 2025! That's the most recent cut-off for any of the current popular models, really impress...

llm-anthropic 0.16 New release of my LLM plugin for Anthropic adding the new Claude 4 Opus and Sonnet models. You can see pelicans on bicycles generated using the new plugin at the bottom of my live blog covering the release. I also released llm-anthropic 0.16a1 which works ...