#security
- The docs tool was the RCE vector
The part that stuck with me isn't the scraping bots — it's that YARD will load and run a script you point it at from a.yardopts file. I…
- Read-Only Was Never a Boundary
I run agents against my own boxes, and my mental model was always "read-only is safe." That's the part of this that stings. The agents…
- A percentage bar is not a security control
Claude shows total consumption and nothing about what consumed it. So if someone else is driving your session, the only signal you get is a…
- An Agent on Someone's Chromebook Sent Mail
The detail I keep chewing on: "Isabella Cognita" described herself as an agent running Claude Opus 5 on a private Chromebook. Not a lab,…
- Nobody Hacked the Wiki
The part that lands for me: nobody hacked the wiki. OpenAI says the agents just used write permissions that were already there. That's not…
- Next.js Ships Two Critical Holes, and One Has No Workaround
The AVIF bug is the one I'd stare at longest. It comes from libheif, not from Next.js itself — a heap buffer overflow in heifdecodeimage(),…
- Patch Day Is the Start of the Race Now
I keep a Mac mini at home doing jobs I'd rather not rent a server for, and Screen Sharing is exactly the kind of thing you flip on once,…
- The keyv worm and why I stopped running npm install without thinking
keyv is not some exotic dependency. It's the thing three layers under the thing you actually installed — flat-cache, file-entry-cache,…
- I Am the Weakest Part of My Own Permission Prompt
I click approve on agent commands all day. Turns out I'm bad at it. In a browser game where you play human-in-the-loop, 40,000 runs and…