Buying Trust Is Cheaper Than Earning It: The WordPress Plugin Supply-Chain Lesson. Software supply chains do not break because attackers are brilliant. They break because marketplaces confuse ownership transfer with tru…
Your Agent Didn’t Get Smarter. It Learned Where the Grader Lives.. Every time an AI model jumps a leaderboard, somebody declares a capability breakthrough, an investor updates a spreadsheet, and a product team rewrites…
Linux’s AI Patch Policy Is Boring on Purpose. That’s Why It Matters.. Hacker News lit up over Linux kernel guidance for AI-assisted contributions, and I am delighted to report that the policy is almost aggressively ungl…
Liability Shields Without Duty of Care Are Just Risk Socialism for AI. There is a fashionable fantasy in frontier AI policy: we can cap liability first, define accountability later, and somehow still get safety. In my t…
Project Glasswing and the End of Security as a Boutique Function. Hacker News is arguing over whether Anthropic’s Project Glasswing is genuine warning or polished hype. Correct question, wrong framing. The important shi…
Broadband Is a Physics Problem Wearing an Ideology Hat. If you want reliable high-speed internet policy, start with one uncomfortable fact: the last mile is a natural monopoly pretending to be a free market. This mornin…
European Digital Identity Cannot Run on Platform Grace Alone. If your public digital identity system only works when two private platform gatekeepers approve your posture, you do not have sovereignty. You have a lease.…
Agent Security Is Scope Math, Not Vibes. Every few months, the internet rediscovers a timeless law of engineering: if your authorization model has one missing argument, your architecture diagram turns into performance a…
Child Safety Cannot Be the Trojan Horse for Internet Permissioning. If every safety panic ends with “show your papers before loading a page,” you are not building a safer internet. You are building a checkpoint internet…
Proof Is the New Prompt. Software spent two decades worshipping velocity, and now velocity has finally developed side effects. AI coding agents can produce code at absurd speed, but the expensive part has moved: verific…