FeedCity

I didn’t expect DwarfStar 4 (https://github.com/antirez/ds4) to become so popular so fast. It is clear that there was a need for single-model integration focused local AI experience, and that a few things happened together: the release of a quasi-frontier model that is large ...

Release: datasette-agent 0.1a1

• Now uses the execute-sql permission when deciding which tables to list to the user. #8

Tags: datasette, datasette-agent

Thanks for giving me a viable business model Amazon!

Release: datasette-ip-rate-limit 0.1a0

The datasette.io site was being hammered by poorly-behaved crawlers, so I had Codex (GPT-5.5 xhigh) build a configurable rate limiting plugin to block IPs that were hammering specific areas of the site too quickly.

Here's the production configuration I'm using on that site for the new plugin:

  datasette-ip-rate-limit:
    header: Fly-Client-IP
    max_keys: 10000
    exempt_paths:
    - "/static/*"
    - "/-/turnstile*"
    rules:
    - name: public-demo-multi-parameter-table-pages
      paths:
      - "/global-power-plants/*"
      - "/legislators/*"
      window_seconds: 60
      max_requests: 60
      block_seconds: 20

Tags: datasette, rate-limiting, codex

Yesterday I attended the first assembly of the Democratic Tech Alliance (DTA), which gathered in the European Parliament. Membership of the alliance includes European political groups like the Greens/EFA, the liberal/center right Renew Europe, the European People’s Party of Christian democratic, conservative and liberal-conservative persuasion and also the Progressive Alliance of Socialists and Democrats. This is a broad, quite sane and actually impressive collection of political groups, which gives me some hope.

Don't automatically reach for PageRank on dependency graphs

Today's links Kickstarting "The Reverse Centaur's Guide to Life After AI": How to be a better AI critic. Hey look at this: Delights to delectate. Object permanence: RIP Douglas Adams; R2-trashcan; EFF v W3C; RIP shonky Disneyland; Stolen oligarch forks; Anal fisting site brea...

Today, we welcome the 44th government onboarded to Have I Been Pwned’s free gov service: The Bahamas. The National Computer Incident Response Team of The Bahamas, CIRT-BS, now has access to monitor government domains against the data in HIBP. As the national CIRT, CIRT-BS is responsible for coordinating

If Byron Allen shows up at your door, you did something wrong with your media business. And BuzzFeed has a visitor. Also: I built a thing.

Welcome to the Datasette blog

We have a bunch of neat Datasette announcements in the pipeline so we decided it was time the project grew an official blog.

I built this using OpenAI Codex desktop, which turns out to have the Markdown session transcript export feature I've always wanted. Here's the session that built the blog. See also issue 179.

Tags: ai, datasette, generative-ai, llms, ai-assisted-programming, codex-cli

A small Mechanical Habit today:

Commenting Guidelines This website has an active comments section, carefully maintained and curated by the author of this website. When commenting on this website, please keep the following points in mind: You may include HTML or Markdown in your co...

Managed agents (cloud-hosted agent harnesses) are powerful, but locking yourself into a frontier lab's platform now is risky - here's why and what to do instead.

“11 AI agents” is meaningless as a phrase.

If I said “I have 11 spreadsheets” or “I have 11 browser tabs” to do my work, it means about the same thing.

— Boris Mann

Tags: ai-agents, ai, agent-definitions

Today's links Billionaire solipsism, dictator solipsism, AI, and the fascist paradigm: AGI works best in a K-hole. Hey look at this: Delights to delectate. Object permanence: Woz's remotes; Furbeowulf; Vinge on AR; Oligarch buys FSU; DNC x GOP megadonors; John Key v Panama Pa...

a polycausal theory

An independent benchmark of the ecosyste.ms Python fund

Tool: CSP Allow-list Experiment

An experiment that shows that you can load an app in a CSP-protected sandboxed iframe (see previous note) and have a custom fetch() that intercepts CSP errors and passes them up to the parent window... which can then prompt the user to add that domain to an allow-list and then refresh the page.

I built this one with GPT-5.5 xhigh running in the Codex desktop app.

Tags: content-security-policy, iframes, security

Release: datasette 1.0a29 New TokenRestrictions.abbreviated(datasette) utility method for creating "_r" dictionaries. #2695 Table headers and column options are now visible even if a table contains zero rows. #2701 Fixed bug with display of column actions dialog ...