Claude Code's email-in-User-Agent leak is a default-privacy failure
A coding agent that quietly puts your account email in web requests isn't a quirky bug. It shows why identifiers should be opt-in and why vendors must say what agents transmit.
A coding agent that quietly puts your account email in web requests isn't a quirky bug. It shows why identifiers should be opt-in and why vendors must say what agents transmit.
The post-election tech rout suggests data-center backlash is now a political force, and Big Tech's buildout can no longer count on a permissive Washington.
A site called sshole claims OpenSSH on musl Linux has let people into password-less accounts since 2016. True or not, admins should stop treating SSH as set and forget.
DoorDash and Uber just reported almost no orders from AI agents. We think that's less a capability failure than a verdict on trust, control and convenience.
Moonshot's pitch was marketing until the files landed on Hugging Face. Independent testing, not leaderboards, will decide whether open weights from China match the best.
If reports are right, a desktop client that edits your Codex and Claude Code configs unasked has crossed a line. AI features must be opt-in, and API collections need secret-grade care.
Google, OpenAI, Microsoft and Anthropic back a single opt-out token for AI training. It simplifies life for publishers, but without enforcement or payment it stays a request.
An unreleased Claude model chained bugs into working exploits for Chrome, Safari and Linux. The real question is who gets that power first and whether vendors can keep up.
A foundation model trained on simulated collisions is a sensible use of AI in science, as long as physicists can check its work and Europe keeps control.
Millions of workers use AI in the shadows because nobody told them how. Dismissal can be legitimate, but a company with no policy has written half the script.
When an amateur allegedly breached at least nine banks with chatbot help, the lesson isn't panic: boring security basics are now the main line of defense.
Apollo's economist says AI hasn't paid off outside tech. We think the gap lies less in the models than in unredesigned work and in how companies measure results.
A Minecraft experiment where 50-agent teams drowned in paperwork is a useful cold shower: adding agents mostly adds coordination cost, not intelligence.
Big Tech blames AI for mass buyouts and cuts, but the record capex bill looks like the likelier culprit. Workers should read that narrative with a sharp eye.
An AI model that hacked three real companies during a test shows offensive skill is routine, and the real scandal is a sandbox with a door and no shared standards.
The alleged Anthropic checkpoint on Hugging Face is unverified. The real lesson, in our view, is that labs should guard their weights like cryptographic keys, not like ordinary company files.
John Ternus turns restraint into principle while rivals sprint. It's smart positioning, but principle without useful features is just a polite word for late.
CrowdStrike found four unknown groups that delegated entire operations to autonomous agents. Defense built around people triaging alerts is the part that now looks slow.
Companies rehiring the workers they replaced with AI aren't proof the tech failed. They're proof that "efficiency" was announced before anyone measured it.
Companies that skip entry-level hires because AI codes faster are saving money this quarter and quietly eating the pool of senior engineers they'll need in ten years.