Security
The Phishing Email That Attacks Your AI Assistant Too
Barracuda Research describes phishing emails carrying two payloads: a social engineering lure for the human and a hidden prompt injection for the AI…
I write about why software breaks and how people figure it out. Founder of Krova Cloud, building isolated microVMs on our own hypervisor. Years of Shopify theme work and shared hosting before that. If I have not reproduced it, I do not publish it.
Security
Barracuda Research describes phishing emails carrying two payloads: a social engineering lure for the human and a hidden prompt injection for the AI…
Debugging
A new survey of 300 developers and engineering leads finds teams spend 9.8 hours a week writing code and 16.9 hours debugging it, and 79 percent say the…
Code Review
Two models from the same family reviewed each other's code and agreed it was fine, because they share the same priors about what plausible code looks like.
Opinion
The agent wrote the change, ran its own checks, and merged, and every control in that loop shared the same blind spot.
Ecommerce
Canvas launched on 1 October and Shopify is explicit that merchants are not editing a preview but a render of the real code behind the store.
AI
TypeSafe's Jev returns typed decisions instead of text, so it cannot emit a value outside your schema. That is a real guarantee.
Deep Dive
The agent worked well for the first hour, then started re reading files it had already read and re proposing fixes it had already rejected.
Bug Hunt
The autonomous debugger saw timeouts and did the helpful thing, faster and harder, until the API returned 429s to everyone and the original bug was buried…
Security
Patched NetScaler appliances kept rebooting and the obvious conclusion was that the emergency update had broken them.
DevOps
Wikimedia tied a four-day Wikidata Query Service degradation to OpenAI agents on 5 October, and nobody instructed the agents to do it.
Engineering Culture
Syntax is teachable in a week. The thing that separates a good debugger from a bad one is a skill nobody quite knows how to transmit.
Error Autopsy
The migration tool printed a truncated success line, the agent read it as a failure, and its retry applied the same schema change a second time.