datasette 1.0a40
Release: datasette 1.0a40
Same security fix as 0.65.5, plus some neat new features and bug fixes:
- Plugins can now launch and manage background tasks using the new datasette.add_background_task() method. Thanks, Alex Garcia.
- I've migrated Datasette to httpx2 for features like the internal
datasette.client.get()method. - A whole lot of bug fixes, many of them stemming from a recent effort to triage issues for a 1.0 stable release.
datasette 0.65.5
Release: datasette 0.65.5
Security fix for an issue where a trailing newline in a requested table name could bypass table permissions and expose private rows, reported by dpfkdlemtp in GHSA-h547-rmjf-5m2m.
Marcus on AI
• Gary Marcus
Sam Altman says trust me; Jensen Huang says everything is going to be fine; Bernie Sanders says AI is more dangerous than nukes
Here’s who we should be listening to instead
micahflee
• Micah Lee
Flock cameras are riddled with security vulnerabilities and hard-coded credentials
This morning, DDoSecrets published an exciting new dataset: Filesystem images of the partitions from an in-use Flock ALPR camera. 404 Media and Wired published a joint investigation into it. I downloaded the dataset and am now thoroughly nerd-sniped.
Hackers from a collective called stegan0gram collected the data. “
The LLMs yearn for the spines
Claude Cowork and chat are now one Claude
Krebs on Security
• BrianKrebs
Data Broker Radaris Loses Domains in Privacy Fight
The consumer data broker Radaris.com has long had a reputation for ignoring requests to remove personal information from its vast empire of people-search services online. That reputation caught up with the company recently in a lawsuit alleging Radaris violated a New Jersey privacy law that provides for hefty fines against data brokers that publish personal information on state law enforcement officials. In the face of repeated stonewalling and prevarication by attorneys for Radaris, the judge in the case ordered that radaris.com and more than a dozen other data broker domains be transferred to the plaintiffs.
Quoting Mustafa Suleyman
We should not treat models as though they have feelings, preferences, rights, or any entitlement to our welfare. Consciousness is the foundation of our ethical, legal, and political systems. To invite another entity to share any flavor of these rights isn’t justified by the evidence and will make the AI containment and alignment challenge even harder.
— Mustafa Suleyman, A warning about ‘model welfare’
Tags: ai-ethics, generative-ai, ai, microsoft, llms
John D. Cook
• John
Converting between cosine similarity and concentration ratio
I’ve written three posts on cosine similarity lately. The first looked at interpreting cosine similarity. The second looked at an approximation related to the first. The third looked at how ranking according to cosine similarity works better than cosine similarity itself. Normalized word vectors are points on a high dimensional sphere, and geometry in high […]
The post Converting between cosine similarity and concentration ratio first appeared on John D. Cook.
John D. Cook
• John
Coffee + milk ≠ latte
Yesterday I wrote about the canonical example of how vector embeddings of words add: “king” − “man” + “woman” ≈ “queen” This should be interpreted as saying that the word vector for king, minus the word vector for man, plus the word vector for woman, is in some sense close to the word vector for queen. This post will […]
The post Coffee + milk ≠ latte first appeared on John D. Cook.
The Old New Thing
• Raymond Chen
Why do Microsoft job levels start in the high 50’s instead of starting at a sane number like 1?
It used to start at 1, but that was the old system.
The post Why do Microsoft job levels start in the high 50’s instead of starting at a sane number like 1? appeared first on The Old New Thing.
John D. Cook
• John
Fibonacci product
The product of four consecutive Fibonacci numbers equals the product of two consecutive integers. For example, 3 × 5 × 8 × 13 = 39 × 40. I ran across this theorem in a note [1] that says “The product of any four consecutive Fibonacci numbers is twice a triangular number.” Since triangular numbers have […]
The post Fibonacci product first appeared on John D. Cook.
Terence Eden’s Blog
• Terence Eden
How to get a DOI for your blog posts
Each new post on this blog now has a Digital Object Identifier. This post looks at the how and the why of getting one, whether it is useful, and any issues you might experience if you go down this path. Table of ContentsBackgroundGetting a DOI the easy wayLet's Go Rogue!Automatic Submission of New ContentManual Submission of Old ContentGetting the DOIGenerating your own DOIMaking the DOI…
The Silicon Underground
• Dave Farquhar
The 6502 CPU’s odd debut
On September 16, 1975, the 6502 CPU made its debut. It was a simple, inexpensive processor designed and priced for everyone. The 6502 cost $25 when Intel’s closest equivalent cost $370. Unsurprisingly, its low price made it an immediate success
The post The 6502 CPU’s odd debut appeared first on The Silicon Underground.
Pluralistic: Daily links from Cory Doctorow
• Cory Doctorow
Pluralistic: How an AI moratorium can save AI bosses (16 Sep 2026)
Jev means structured output is interesting again
Bottlenecks Get a Bad Rap
Gemini Live audio
lcamtuf’s thing
• lcamtuf
“The Secret Life of Circuits” is here
Some pics, endorsements, and the reason the book exists in the first place.