Latest / July 28, 2026
12 posts from engineering leaders published July 28, 2026, by Simon Willison, Martin Fowler, Cate Huston and 5 more.
Discovering cryptographic weaknesses with Claude The best part of this article (here's the repo ) about how Anthropic researchers used Claude Mythos to find mathematical flaws in both HAWK and a weaker version of AES ("neither of these results has a practical impact on today’s…
We’re aware a Modal customer published an unauthenticated endpoint that allowed anyone on the internet to use their sandboxes for code execution. This was used by the rogue agent. Modal’s platform or isolation were not compromised in anyway. — Akshat Bubna , Modal's CTO,…
uv 0.12.0 Some interesting breaking changes in this release of uv , in particular to the default project produced by the uv init command. uv init is the uv shortcut for creating a new project. The previous version of uv , version 0.11.x, produced this directory when you ran uv…
Anatomy of a Frontier Lab Agent Intrusion: A Technical Timeline of the July 2026 Incident Hugging Face just released this extremely detailed technical description of OpenAI's recent accidental cyberattack against their infrastructure . This attack was very sophisticated, and the…
Subagents get justified by time saved and parallel execution, but Rahul Garg explains that's not what matters most. Every token in the orchestrator's context is competing for its attention, and the real value of a subagent is what it keeps out of that context. Subagents should…
TL;DR I have ideas. I haven’t been writing them. That’s about to change. I promise… myself. I’ve been thinking a lot about talent. Actually, I’ve been thinking a lot about thinking. And writing. Or more specifically, not writing. This really hit me earlier this year at the…
Claude Steele’s first book Whistling Vivaldi gave me one of the most useful framings I have for bias. Stereotype threat: in a situation you care about, the worry that you’re about to confirm a negative stereotype about your group degrades how you do. So when I saw he had a new…
There's research behind why writing your own draft first works.
Amodei in his latest blog post wrote a mix of agreeable things and things that I believe misrepresent where the real risk of AI is located. I want to focus my attention on why, among all the risks, open weight models constitute the mildest one. I write these words as a person…
Short architecture note on Kimi K3, including LatentMoE, Kimi Delta Attention, Attention Residuals, NoPE, multimodality, and inference-efficiency choices.
aria-describedby isn't always enough.
I was a guest in Karol Skrzymowski’s podcast “Loosely Coupled” , together with Martin Fowler, Xin Yao, and Andrew Harmel-Law. It was recorded live at DDD Europe 2026 in Antwerp. Abstract Is design still relevant in the age of AI? Is AI capable of replacing domain experts,…