A small Mechanical Habit today:
matklad
• Alex Kladov
matklad
• Alex Kladov
A small Mechanical Habit today:
Martin Alderson
• Martin Alderson
Managed agents (cloud-hosted agent harnesses) are powerful, but locking yourself into a frontier lab's platform now is risky - here's why and what to do instead.
“11 AI agents” is meaningless as a phrase.
If I said “I have 11 spreadsheets” or “I have 11 browser tabs” to do my work, it means about the same thing.
Tags: ai-agents, ai, agent-definitions
Pluralistic: Daily links from Cory Doctorow
• Cory Doctorow
DYNOMIGHT
• dynomight
a polycausal theory
Andrew Nesbitt
• Andrew Nesbitt
An independent benchmark of the ecosyste.ms Python fund
Tool: CSP Allow-list Experiment
An experiment that shows that you can load an app in a CSP-protected sandboxed iframe (see previous note) and have a custom fetch() that intercepts CSP errors and passes them up to the parent window... which can then prompt the user to add that domain to an allow-list and then refresh the page.

I built this one with GPT-5.5 xhigh running in the Codex desktop app.
Tags: content-security-policy, iframes, security
Release: llm 0.32a2
A bunch of useful stuff in this LLM alpha, but the most important detail is this one:
Most reasoning-capable OpenAI models now use the
/v1/responsesendpoint instead of/v1/chat/completions. This enables interleaved reasoning across tool calls for GPT-5 class models. #1435
This means you can now see the summarized reasoning tokens when you run prompts against an OpenAI model, displayed in a different color to standard error. Use the -R or --hide-reasoning flags if you don't want to see that.
Tags: llm, projects, openai, generative-ai, annotated-release-notes, ai, llms
In short: I just published Open Link in Unloaded Tab, a little Firefox extension that adds “Open Link in Unloaded Tab” to the right-click context menu.
In Firefox, you can unload tabs to save system resources. But there’s no way to open a new tab in the unloaded state…until now! I built a very simple extension that adds a new option to do this. (It even has a cute icon which I paid ~$15 for.)
I’ve built one-off extensions before, but this is the first one I’ve submitted to the Firefox Add-ons directory.
The thing about 90% of TDMs [Technical Decision Makers] is that they're motivated primarily by NOT GETTING FIRED. These aren't people who browser Lobsters or push to GH on the weekend. These are people that work 9 to 5, get paid, go home, and NEVER THINK ABOUT WORK AGAIN. So to achieve all that, they follow secular trends supported by analysts and broad public sentiment. Oh, Gartner said that "AI strategy" is most important? McKinsey said "context" needs to be managed? Well, "Context Engine for AI Apps" is going to be defensible. Buy it.
— Mitchell Hashimoto, in a conversation about the design of the Redis homepage
Tags: marketing, mitchell-hashimoto, redis
Krebs on Security
• BrianKrebs
Artificial intelligence platforms may be just as susceptible to social engineering as human beings, but they are proving remarkably good at finding security vulnerabilities in human-made computer code. That reality is on full display this month with some of the more widely-used software makers -- including Apple, Google, Microsoft, Mozilla and Oracle -- fixing near record volumes of security bugs, and/or quickening the tempo of their patch releases.
Andrew Nesbitt
• Andrew Nesbitt
How curl's disclosure policy filtered an AI scanner's findings at source
Jeff Geerling
• Jeff Geerling
Last year I said I'd probably never recommend another Bambu Lab printer again.
I still use my P1S, but after Bambu Lab started pushing their always-connected cloud solution as the new default:
I had to do that to keep it under my control, instead of Bambu's.