Related posts

Product designer and entrepreneur; author of Mobile First and Web Form Design; formerly a product director at Google; now building AI products.

• Ask LukeW: Less Walls of Text

  A persistent attribute of AI-powered applications is their propensity to generate text: lots and lots of text. Text requires scanning and scrolling for the useful bits and too much of it gets pretty monotonous pretty qu…

  Related

Founder of the Free Software Movement and the GNU Project, original author of GNU Emacs and the GNU General Public License, and long-time president of the Free Software Foundation.

• [1/2] https://civicshout.com/p/tell-the-ftc-stop-big-ai-from-hoarding-and-destroying-books US citizens: call on the FTC to stop Supposed Intelligence companies from scanning books to destruction and hoarding the scans. The law should require that if the book is in the public domain, its scanned text be published by the Library of Congress. If the book is still in principle copyrighted, the Library of Congress could publish an offer to pay the copyright holder a reasonable sum for

  Related

Writer of kottke.org, one of the oldest blogs on the web, published since 1998 and supported by its members. He writes about art, technology, science, design and visual culture.

• MastodonYes, this summer really was as hot as you think it was. This summer “was the hottest on record for the contiguous U.S., beating the previous champions of 1936 and 2021 by 0.4°F. Compared to the average over the 20th century, this summer was 3° hotter.”

  grist.org

  AmericaRelated

• BlueskyYes, this summer really was as hot as you think it was. This summer “was the hottest on record for the contiguous U.S., beating the previous champions of 1936 and 2021 by 0.4°F. Compared to the average over the 20th century, this summer was 3° hotter.”

  grist.org

  AmericaRelated

• BlogYes, this summer really was as hot as you think it was....

  is summer “was the hottest on record for the contiguous U.S., beating the previous champions of 1936 and 2021 by 0.4°F. Compared to the average over the 20th century, this summer was 3° hotter.”

  AmericaRelated

Co-founder of WordPress and founder of Automattic; blogs at ma.tt.

• Scanning Plugins

  It’s a really big deal that we’re scanning all the plugins now.

  Related

Writer on the intersection of technology and finance. Author of the Bits about Money newsletter and host of the Complex Systems podcast; previously at Stripe.

• Liam, 8; I got stung by a bee! *moans* Me: I’m sorry. Liam: Why do bees sting? Me: In defense of themselves or their hive. Liam: I was nowhere near a hive. Me: He might have made a mistake. You’re ten thousand times bigger than him and so maybe he was terrified. Liam, suddenly…

  Related

Writer, editor and executive coach; co-founder and editor of A Book Apart and a former contributing editor at A List Apart.

• Hive mind: I have been using EchoFeed to pipe short posts (like this one https://aworkinglibrary.com/thinking/202607241206) around to various social networks, but it abruptly shut down last week. What do we like for this kind of thing? (IMO, I shouldn't need a service for this at all because RSS ought to be a first class citizen of all social networks, but here we are.)

  Related

Founding member of OpenAI and former director of AI at Tesla; creator of nanoGPT and the term "vibe coding".

• New supply chain attack this time for npm axios, the most popular HTTP client library with 300M weekly downloads. Scanning my system I found a use imported from googleworkspace/cli from a few days ago when I was experimenting with gmail/gcal cli. The installed version (luckily) resolved to an unaffected 1.13.5, but the project dependency is not pinned, meaning that if I did this earlier today the code would have resolved to latest and I'd be pwned. It's possible to personally defend against these to some extent with local settings e.g. release-age constraints, or containers or etc, but I thin…

  stepsecurity.io

  Quoting@feross🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages. The latest axios@1.14.1 now pulls in plain-crypto-js@4.2.1, a package that did not exist before today. This is a live compromise. This is textbook supply chain installer malware. axios has 100M+ weekly downl…

  Related

Neuroscientist and novelist writing on consciousness, artificial intelligence and culture in the newsletter The Intrinsic Perspective.

• Pluribus and Our Age of Hive Minds

  The tyranny of online life

  Related

Software engineer who writes the blog Made of Bugs about performance, debugging and understanding computer systems. Previously worked at Anthropic on interpretability, at Stripe on Sorbet, and at Ksplice.

• https://bughunters.google.com/blog/5424842357473280/zen-and-the-art-of-microcode-hacking Shot: "This opens up the potential for hardware attacks (e.g., reading the key from ROM with a scanning electron microscope), side-channel attacks (e.g., using Correlation Power Analysis to leak the key during validation), or other [...] attacks" Chaser: "We noticed that the key from an old Zen 1 CPU was the example key of the NIST SP 800-38B publication and was reused until at least Zen 4 CPUs."

  GoogleRelated