FeedCity

MCP Colors: Systematically deal with prompt injection risk Tim Kellogg proposes a neat way to think about prompt injection, especially with respect to MCP tools. Classify every tool with a color: red if it exposes the agent to untrusted (potentially malicious) instructions, ...

tl;dr: Barbara Kathmann (GroenLinks-PvdA, 32) zal met voorkeursstemmen herkozen worden als kamerlid. Kwam dit door de NerdVote.nl campagne? Of kwam het door het mooie initiatief Stem op een Vrouw? Hier enige analyse, met als conclusie dat het lijkt dat NerdVote belangrijker was. Het doel van NerdVote.nl was om ieder kandidaat-Kamerlid te steunen dat wil en kan bijdragen aan: IT die niet 100% afhankelijk is van Amerikaanse Big-Tech, zodat we onze paspoorten/persoonsgegevens niet door Amerikanen te hoeven laten managen Het behoud van onze privacy, zodat we vrij kunnen communiceren Onze cybersecurity, zodat onze medische uitslagen niet verhandeld worden NerdVote is niet “TechVote”, we steunen niet de grootste fans van AI en Internet.

Every time an engineer evaluates a language that isn’t “theirs,” their brain is literally working against them. They’re not just analyzing technical trade offs, they’re contemplating a version of themselves that doesn’t exist yet, that feels threatening to the version that does. The Python developer reads case studies about Go’s performance and their amygdala quietly marks each one as a threat to be neutralized. The Rust advocate looks at identical problems and their Default Mode Network constructs narratives about why “only” Rust can solve them.

We’re not lying. We genuinely believe our reasoning is sound. That’s what makes identity based thinking so expensive, and so invisible.

— Steve Francia, Why Engineers Can't Be Rational About Programming Languages

Tags: technical-debt, psychology, programming-languages

Australia’s world-first ban on social media for children under 16 takes effect in just over a month on December 10, 2025, yet nobody knows exactly how it will work.

The Online Safety Amendment (Social Media Minimum Age) Act 2024 passed parliament in a rushed process in November last year, imposing potential fines of up to $50 million on platforms that fail to keep out underage users. While 77% of Australians support the ban, only 25% believe it will actually work, and with weeks until launch, the mounting controversies, technical failures, and expert warnings suggest it’s becoming exactly the shitshow sceptics predicted.

The fetch()ening After several years of stable htmx 2.0 and a promise to never release a backwards-incompatible htmx 3 Carson Gross is technically keeping that promise... by skipping to htmx 4 instead! The main reason is to replace XMLHttpRequest with fetch() - a change that...

Dear PEP 810 authors. The Steering Council is happy to unanimously accept "PEP 810, Explicit lazy imports". Congratulations! We appreciate the way you were able to build on and improve the previously discussed (and rejected) attempt at lazy imports as proposed in PEP 690.

— Barry Warsaw, on behalf of the Python Steering Council

Tags: python, barry-warsaw

The case against pgvector I wasn't keen on the title of this piece but the content is great: Alex Jacobs talks through lessons learned trying to run the popular pgvector PostgreSQL vector indexing extension at scale, in particular the challenges involved in maintaining a lar...

Interleaved thinking is essential for LLM agents: it means alternating between explicit reasoning and tool use, while carrying that reasoning forward between steps.This process significantly enhances planning, self‑correction, and reliability in long workflows. [...] From c...

The 2 billion email address stealer log breach I talk about this week is almost ready to go at the time of writing. It's been massively time-consuming, massively expensive (we turned the cloud up to 11) and enormously frustrating. I've written about why in the draft

Authentication on the web is a complicated problem. If you’re going to do it yourself, there’s a lot you have to take into consideration. But odds are, you’re building an app whose core offering has nothing to do with auth. You don’t care about auth. It’s an implementation d...

You’ve spent weeks carefully writing a design document for your software project, but what happens next? How can you get useful feedback from your teammates? How do you prevent your design review from devolving into petty arguments?

I’ve been through many design reviews in my career as both the author and reviewer, and I have a special fondness for effective reviews. Through trial and error, I’ve learned techniques that help the review process move smoothly and yield material improvements to the design.

You’ve spent weeks carefully writing a design document for your software project, but what happens next? How can you get useful feedback about it from your teammates? How do you prevent your design review from dragging on for months?

I’ve been through many design reviews in my career as both the author and reviewer, and I have a special fondness for effective reviews. Through trial and error, I’ve learned techniques that help the review process move smoothly and yield material improvements to the design.

It sounds like ceding ground to the pro-AI crowd, however if you get people to be honest about it then everyone benefits.

Two interesting new papers regarding LLM security and prompt injection came to my attention this weekend. Agents Rule of Two: A Practical Approach to AI Agent Security The first is Agents Rule of Two: A Practical Approach to AI Agent Security, published on October 31st on th...

As Pibb is the official beverage of Old Vintage Computing Research, no doubt to the profound chagrin of the Coca-Cola Company, I feel compelled to offer a public service announcement. Old and busted: New hotness: Yes, Mr Pibb (technically mr P!BB, though Coca-Cola i...

PyCon US 2026 call for proposals is now open PyCon US is coming to the US west coast! 2026 and 2027 will both be held in Long Beach, California - the 2026 conference is set for May 13th-19th next year. The call for proposals just opened. Since we'll be in LA County I'd love ...

A Monochromatic Star

How I Use Every Claude Code Feature Useful, detailed guide from Shrivu Shankar, a Claude Code power user. Lots of tips for both individual Claude Code usage and configuring it for larger team projects. I appreciated Shrivu's take on MCP: The "Scripting" model (now formalize...

an overview of what builds for complicated projects have to think about