Latest / October 20, 2026
8 posts from engineering leaders published October 20, 2026, by Simon Willison, Jamie Tanna, Geoffrey Huntley and 4 more.
eMudhra Intermediate CA Compromise This is very, very bad news: The private keys of eight eMudhra intermediate CA certificates have been compromised. They chain to roots trusted by the Mozilla, Microsoft, Apple and Chrome root programs and by many downstream trust stores. Any…
I don't want to read lengthy blog posts that have been spat out by a Large Language Model (LLM), because the author hasn't felt they want to write the words to share their point. I'm not going to rehash why that's (generally) a bad thing, as a lot of brilliant writers like Bryan…
My latest vibe coded game experiment is a Command & Conquer style RTS (Real Time Strategy) game called Battle Drones ( play it here ). Unlike my previous experiments , this one is actually fun to play . I'm somewhat embarrassed to admit that I got there by telling Claude to…
I don't know if you've seen this, but a CA just got popped. Their keys got leaked, which means the industry as a whole now has some pretty major problems. It was revealed two hours ago. eMudhra Intermediate CA Compromise eMudhra Intermediate CA Compromise Now you&
My observation of air travel is that if there is one significant impact on a flight, there are guaranteed two additional impacts. An example: if my gate changes at the last moment, it is quite likely that departure from the gate will be delayed, followed by a further delay on…
What Tech Startups Won't Tell You in Interviews (But I Will)
The benefit of conference season is talking to a lot of people (the downside: needing antibiotics), and of course many of those conversations came to AI, explicitly or not. But underneath the obvious shift there’s an industry one, which started with the end of ZIRP and AI…
The curl project has decided to alter its vulnerability disclosure program procedure and starting October 26 2026, we insist that all vulnerability reports submitted to us that are deemed to be severity LOW or MEDIUM should instead be submitted as issues in our GitHub…