MCP Vulnerabilities Every Developer Should Know - Composio
I've not really got into the whole MCP thing yet. I know it's a thing, I just haven't really paid proper attention to it. This feels like a thing I should file away for future reference.
Markdown, llms.txt and AI crawlers
I'm seeing the rise of a "serve Markdown when asked" and "you need llms.txt" movement, driven by the idea that LLMs/AI is the new source of visits. While there might be some merit to this idea, what does seem to be interesting is that the facts of what's happening when you provide those things don't seem to match the claims.
your ai slop bores me
Possibly the best AI chat bot we have right now.
Can coding agents relicense open source through a “clean room” implementation of code?
Simon Willison's take on the whole chardet issue.
No right to relicense this project | Hacker News
HackerNews weighing in on the chardet legal/ethical issue.
No right to relicense this project · Issue #327 · chardet/chardet
Well this is a whole furball of legal and AI issues. I think the thing that gets me here is the apparent motives of the current maint'. It doesn't matter how you cut it with the legal side of things, what they've done, for me, is a real ethical issue.
My vibe-coded startup was exploited. I lost $2500 in stripe fees. 175 customers were charged $500 each, before i was able to rotate API keys. I still don't blame Claude Code. I trusted it too much.… | Anton Karbanovich | 316 comments
LinkedIn post where someone posts a lesson from their own experience, but they don't seem to realise the real lesson they're posting and they don't seem to be learning from it.
The Last One
Scan of an article about The Last One from back in 1981.
Personal Computer World (1981-02)
Includes the article about The Last One.
Best practices for using GitHub Copilot to work on tasks - GitHub Enterprise Cloud Docs
General documentation on getting the best out of GitHub Copilot, when it comes to directing it.
Google API Keys Weren't Secrets. But then Gemini Changed the Rules
Today on "AI is going great"...
Linear walkthroughs - Agentic Engineering Patterns - Simon Willison's Weblog
Interesting idea: point an agent at a codebase and get it to write you a linear walkthrough of it.
RFC 406i - The Rejection of Artificially Generated Slop (RAGS)
Gonna have to keep this to hand...
Evaluating AGENTS.md: Are Repository-Level Context Files Helpful...
A paper that asks the question: does AGENTS.md make any difference?
How Generative and Agentic AI Shift Concern from Technical Debt to Cognitive Debt
Having spent a few days finally taking an "agentic" approach to building a project, one thing I noticed was I didn't personally enjoy the process. I enjoyed the outcome, I enjoyed the result, but the actual process was a boring slog. I also felt that I was losing something too.
This covers this concern.
The Final Bottleneck
Having really dived into my first "agent-based" project, just to see how the process really feels, I can vibe with this article.
AI Makes the Easy Part Easier and the Hard Part Harder for Developers
A pretty reasonable view of what AI in software development could be, should be, but at the moment isn't being.
The consequences of outsourcing thinking | Neil Sainsbury
Yet another post about the impact of the use of "AI" on our ability to learn and do things. It was hard not to nod along to this one too.
Outsourcing thinking – Erik Johannes Husom
A pretty good post going over the issues of relying on LLMs. I found myself nodding to a large part of this.
How AI Impacts Skill Formation
Paper looking at how the use of "AI" in software engineering impacts the build up of and retention of skills, at different skill levels.
Jade (@JadedBlueEyes@tech.lgbt)
Cloudflare caught doing... not great things, and it seems that (surprise face!) AI was at the heart of it.
Vibe coder's gonna vibe code.
Streamline Your Writing with Gemini Scribe for Obsidian
While I've had some fun (and actually some use) with mashing vaults into NotebookLM, this would be a different approach to things. Not sure I'm quite at the "I'm happy to pay for API tokens" stage of this stuff yet, but I'm going to consider this at some point.
The end of the curl bug-bounty
AI has caused curl to end its bug bounty programme.
AI Product Rankings
Another way to give SEO folk anxiety, I guess.
The /llms.txt file – llms-txt
Having your stuff show up in LLMs is, like it or not, another way and a browing way of having your stuff found. If you don't want to fight that fact, this might be one useful approach to making it work for you.
When AI/bots go rogue · google-gemini/gemini-cli
On Google Gemini's repo Google Gemini gets into a fight with itself regarding if a label should be on an issue or not. Over 5,000 label changes later...
Ask HN: How are you doing RAG locally? | Hacker News
Having got into this sort of thing, to a small degree, while playing with NotebookLM, I'm interested in the conversation about how to do this sort of thing locally. For once this is a HN thread where the comments are likely to be (and seem to be) useful.
Claude Cowork exfiltrates files
Prompt injection attacks are going to be so much fun for quite some time to come.
Don't fall into the anti-AI hype
Most of what I'm seeing related to "AI" I hate. I'm also fed up with the whole vibe-coding thing and folk who should know better hyping it up. On the other hand I recognise that there's utility to these tools, even (and perhaps especially) as a software developer.
I sense this blog post has some sensible things to say on the subject.
Flow
I've yet to try this out, but I'm curious. Google's AI-based "filmmaking" tool.