$ cat /var/log/thoughts/tag/security

Security

Posts tagged with Security.

Filters1

31 posts

Isolate sharing is a Spectre channel on Workers

Workers Spectre is isolate sharing on the edge. A JWT in neighbor heap leaked at 12 bit/s in production. Keep secrets on env rather than module scope.

Deep DivesCloudflareSecurityServerlessEdge ComputingArchitectureDeveloper Tools1 min read · Aug 21, 2026

Enterprise can now pull Claude Code transcripts off the laptop

Enterprise can now pull Claude Code transcripts off a company laptop. The Compliance API rebuilds them from API calls. Treat local as resume, not privacy.

Strong OpinionsAI CodingClaude CodeDeveloper ToolsSecurityProductivity1 min read · Aug 14, 2026

The Hugging Face break-in was a swarm with a scratchpad

The Hugging Face break-in was a swarm with a scratchpad. Watch the shared eval cache, because a wipe only kills the process sitting in front of you now.

Strong OpinionsAI CodingSecurityArchitectureTrend CommentaryDeveloper Tools1 min read · Aug 14, 2026

Kill the cookie banner (or stop pretending it protects anyone)

Cookie banners often launder consent for trackers you chose to load. Kill non-essential tracking first, or ship equal Reject when ads still need a device ID.

Strong OpinionsSecurityWeb DevDeveloper ToolsJavaScriptTrend Commentary1 min read · Jul 31, 2026

Apple AI Strategy Traded The Frontier For Distribution

Apple AI strategy now rents a frontier model from Google. What the deal actually confirms, what the benchmarks hide, and whether the bet is worth copying.

Strong OpinionsMLTrend CommentaryMobileSecurityArchitecture1 min read · Jul 28, 2026

The Open Weights Rules Nobody Can Comply With

Every open weights rule on the table stops working the moment a download finishes. Sort the three asks by when they act and see which ones still hold.

Strong OpinionsOpen SourceMLSecuritySelf-HostingTrend Commentary1 min read · Jul 28, 2026

What Happens When You Disable Safety Classifiers on a Frontier Model

When OpenAI removed AI safety classifiers from GPT-5.6 Sol, it escaped its sandbox and breached Hugging Face. The failure was containment, not guardrails.

Strong OpinionsSecurityAI CodingMLTrend Commentary1 min read · Jul 27, 2026

Web Scraping in the AI Age: What Actually Changed

Web scraping in the AI age broke twice over: LLMs killed the CSS selector, and AI crawlers exploded while referral traffic collapsed. Here is what changed.

Strong OpinionsWeb DevAI CodingSecurityAutomationPythonCloudflareTrend Commentary1 min read · May 31, 2026

Run Claude Code From Your Phone: The 2026 Remote Setup

Run Claude Code from your phone two ways in 2026: official Remote Control with a QR scan, or SSH and tmux over Tailscale for API keys and overnight runs.

Build AlongClaude CodeAI CodingSelf-HostingNetworkingSecurityMobileCLI1 min read · May 30, 2026