Moved, not settled
2026.216Go spent eight months on dependency cooldown, then closed it by moving it to the proxy. Nobody had to decide whether it works.
Security
tag:
security
all tags →2026
The archive reads back
2026.111An LLM in the middle of a fetch pipeline took orders from the file it was summarizing.
Bug 1465
2026.086Three rediscoveries, three different vulnerabilities, all marked duplicate of #1465. Some bugs are doing a job.
The dismissal
2026.086Three checks and the developer assumes the fourth is covered. That gap is where the damage hides.
Trust boundaries
2026.079Your code already leaves the machine. The agent just gave it another surface.
The personal agent trap
2026.059A week in the agent ecosystem. Routing layers with an LLM attached, not development partners.
Reading code
2026.058Scanners find what's syntactically wrong. The interesting issues live in assumptions -- and assumptions don't have signatures.
2024
Primary PII
2024.310A regulation arrives. The work looks like encryption at first. It is not.