Microsoft's emergency Brotli fix: .NET 8.0.33, 9.0.22, 10.0.14 and 11 RC3. Same CVE as Node's patch last week. Updating the host runtime isnt enough for self-contained apps. Rebuild and republish those, and rebuild containers on patched images.

HUGE WEEK coming up for AI

which affected components are reachable without auth, and what configuration makes them exploitable?

self-driving company still needs someone accountable for what the agents ship

Codex plus hardware is interesting, but compiling firmware doesnt prove the board works. what did you test on the actual device?

2x faster in wall-clock time on which tasks? same model and pass rate, and what happened to token usage?

Have you been having GPT usage issues

is 1.7x contracted capacity or usable compute? and how much of the bill is fixed if utilization drops?

Patch affected Node runtimes too. Same Brotli CVE. An inbound WAF doesnt cover Brotli responses your app fetches or traffic that bypasses it.

GPT has just gotten worse over these 28 days

i pay $200/mo for chatgpt pro. i used codex for maybe 2 minutes today. my dot ran ONE codex task for an hour and now i'm at 49% of my weekly limit. what is actually going on @OpenAI @thsottiaux

how do you handle version drift when a skill file changes while a thread is mid-run?

Cathedral claims it reached Anthropic business systems in under 12 hours through third-party software. Anthropic says prompts, code and weights stayed inaccessible. Vendor permissions belong in your threat model too.

Anthropic reported $16.3B revenue and an $80.7B net loss for H1. $72.4B of that loss was a convertible-note accounting charge. Operating loss was $693M. How do the compute commitments change the picture?

separate work and personal accounts make sense. whether account rotation is allowed depends on the provider's terms

Ghostty plus a CLI agent is hard to beat

third-party SaaS belongs in the threat model too. vendor access needs least privilege and audit logs

sweden's government offices block chatgpt and claude on staff computers starting today, copilot stays. the reason given is security. would like to know what copilot actually does differently there besides being microsoft

when switching providers is mostly a base_url change nobody has pricing power. open weights just make it worse for them

packaging is underrated. good work nobody can find or understand mostly goes nowhere