RSI is the new AGI — and it's just as hard to pin down

Business functions like our marketing team, who are building with AI, are not exempt from the security obligations that apply to engineers building applications.

If you found a bug using AI tools, the chances are somebody else found it too.

People spend all their time just forwarding things to the right people or saying 'that was already fixed a week/month ago' and pointing to the public discussion.

No IAM framework governs human privilege escalation and agent privilege escalation with the same rigor.

Most scanners track every CVE but cannot alert when a branch name exfiltrates a GitHub token through a container that developers trust by default.

Static pattern matching loses to embedded prompts in legitimate review and Codespaces flows.

Threat actors are reverse engineering patches within 72 hours. If a customer doesn't patch within 72 hours of release, they're open to exploit.

Every attacker went for the credential, not the model.

The Gay Jailbreak technique is a novel attack that can theoretically break through any guardrails when used correctly

For users on capped mobile data plans, particularly in regions where smartphone-as-only-internet is dominant (much of Africa, much of South and Southeast Asia, most of Latin America), 4 GB of unrequested download is on the order of a month's data allowance, vapourised by Chrome on the user's behalf.

The legal analysis is the same one I gave for the Anthropic case. The environmental analysis is new. At Chrome's scale, the climate bill for one model push, paid in atmospheric CO2 by the entire planet, is between six thousand and sixty thousand tonnes of CO2-equivalent emissions, depending on how many devices receive the push.

Claude Desktop rewrites the manifests on every launch. Deleting the file without removing Claude Desktop results in the file reappearing the next time Claude Desktop runs.

Tasks where correctness is harder to verify may not have seen the same speedup, so the acceleration we document here may not be as general as the headline numbers suggest.

So I don't see why I should expect compute-poor labs to find new software innovations much faster than compute-rich labs — on the contrary, I think the opposite is more likely.

his suggests that men tend to use one another’s sexual orientation as a rough proxy for their ability to contribute to aggressive male coalitions rather than valuing the orientation in itself.