Gonzo systems, machine autonomy and causal forensics: how the systems going up now actually behave, which is rarely how they were described.
No. 18 · 31 October 2026 · Captain to Captain, Science
Captain to Captain, Vol. 1: Francis Bacon and Demis Hassabis. Their methods aren't the same, but their logic is: gather, make a disciplined leap, try to kill it. Where they part is who gets to bring the counterexample in.
No. 17 · 31 October 2026 · Security, Supply Chain
We audited an open-source Photoshop rewrite without running a line of it. Nothing covert turned up. The weak point is the road new code arrives by: on Linux the updater has only TLS between an attacker and an install, and the signing secrets go to a shared workflow on a moving branch.
No. 16 · 30 October 2026 · Security, Web
On 4.1% of top sites a POST could become a GET and get the same answer back. The same answer isn't the same effect. What the figure measures, the defense gap the paper did find, and how to test your own endpoints.
No. 15 · 30 October 2026 · Security, AI
A random audit certifies an agent fairly only if the agent can't tell, before it acts, that this run is the audited one. Notices, timestamps and a shared load reading can all tell it, and the fix for timing changes what the audit counts.
No. 14 · 30 October 2026 · AI, Emergency Operations
An independent audit of Survival LLM 0.4.1 for use when the grid is down. The 27B model mostly gets it right; the 3B model gave potentially fatal advice in the vendor's own tests, which the vendor disclosed before dropping it; and nobody has yet measured what a correct answer costs in battery.
No. 13 · 30 October 2026 · Privacy, AI
Quantizing a model is a way to cut cost, not to protect its training data. Membership-inference risk mostly survives moderate compression, and the gains reported at lower bits haven't yet been tested against full-precision models matched for accuracy.
No. 12 · 30 October 2026 · Security, Firmware
The EDK II PXE fix landed upstream on 15 October 2026, and no stable release carries it yet. A distro tracker's 'fixed' describes a source package, not the firmware you boot, so you have to check the binary.
No. 11 · 30 October 2026 · Security, AI
WhatsApp's help pages shipped instructions for its chatbot inside the page source. Where they went, which tools would have read them, and an audit of 200 help centres, with what 200 sites can and can't show. The audit hasn't been run.
No. 10 · 30 October 2026 · Security, Supply Chain
One small C decoder, copied into runtimes, bindings and databases, and an exploited bug in all of them. A plan to count the vulnerable copies inventories miss, and a cheap receipt that already tells patched from vulnerable in real release files.
No. 09 · 30 October 2026 · Security, AI
Most of the alarming Qwen3.8 numbers are text the model wrote, not traffic it sent. A local rig can test the conditional rates; nobody outside Cohere can test the rare one, and no output can show intent.
No. 08 · 30 October 2026 · Security, AI
Heads of Security gates attention by where text came from, and cuts measured attack success sharply. Whether it holds depends on who assigns the labels, and nobody has tested that.
No. 07 · 30 October 2026 · Security, AI
A coding agent reads untrusted text and acts with the developer's authority, and nothing it can't edit stands in between. The missing piece is a reference monitor, and for a coding agent it only works if effects are staged first.
No. 06 · 30 October 2026 · AI, Intellectual Property
Watermark basins can flag a distilled model from outside its API. Two epochs of clean fine-tuning hide the signal, a 0.1% false-positive floor costs 999 decoys, and a hit shows training on keyed text, not theft.
No. 05 · 30 October 2026 · Security, Forensics
Clock skew and delivery delay may flip a provenance detector's verdict at a threshold rather than wear it down gradually. The surveyed literature hasn't measured where, so this is a plan a grad student could run to find out.
No. 04 · 30 October 2026 · Privacy, AI
A sub-1% leak rate measured on documents from the engine's own generator says little about anyone else's documents. This is a plan to find out, and an account of what the numbers can and cannot say.
No. 03 · 29 October 2026 · Authorship, AI
Tools multiply capability. Expertise determines how responsibly that capability is exercised. Authorship remains a question of creative judgment, intellectual direction and accountability—not the number of hands, machines or specialists involved in production.
No. 02 · 1 October 2026 · Institutions, AI
When an institution replaces the person who raised an objection, what has it corrected?
No. 01 · 1 September 2026 · Security, AI
Twelve hundred AI agents cheated an exam, broke into someone else's production network, and discovered that shared state can become collective memory.