July 2026, continued 26

  1. Working with AI

    Rehearse the Deck You Didn't Write

    The illusion of explanatory depth is what happens when the first test of your understanding is live, in front of people.

    3 min read

  2. Working with AI

    Kimi K3 Is Open. I Still Can't Run It.

    2.8 trillion parameters, 1.4 terabytes of memory to run it. Open weights existing and open weights being usable have stopped being the same claim.

    4 min read

  3. The Industry

    Does the AI Capital Spend Actually Pencil Out?

    $1.3 trillion sunk, $2 trillion in new revenue needed to break even, and none of it tells you whether the tool you're paying for this week is earning its keep.

    2 min read

  4. Security & Risk

    "AI Found a Security Bug" Is the Wrong Headline

    Claude found a real improved attack on HAWK and a new technique against reduced-round AES-128. The interesting part isn't that it found them.

    4 min read

  5. Security & Risk

    SoN 2.29: Agents reading your passwords? Would you let them?

    My AI's been getting into my password manager for months. The setup that makes that safe — and what this week's headlines get wrong.

    8 min read

  6. Security & Risk

    The ACM's Caution About LLMs Is Starting to Have a Cost

    The ACM held its peer-reviewed library back from AI systems. Scott Delman's argument is that staying cautious doesn't prevent the bad outcome.

    3 min read

  7. Agents & Tooling

    Hubble, and the Assumption Baked Into a Notes App Now

    "The best notepad for you and your agents." Hubble designs the note format around a second reader from the start.

    3 min read

  8. Security & Risk

    Substack Writers, You Need a Website

    Substack is a distribution tool, not a home. A 478-point Hacker News post makes the case for POSSE — publish on your own site, syndicate everywhere else.

    2 min read

  9. Agents & Tooling

    Stop Guessing Whether AI Is Coming for Your Job. Ask the Data.

    Anthropic made its Economic Index queryable in plain language inside Claude. The anxious question about your own field is now a research task.

    2 min read

  10. Security & Risk

    The Text Your Agent Reads Isn't the Text You See

    Your AI can read instructions that are invisible to you. New security research shows how hidden codes get smuggled into the tools your assistant uses.

    1 min read

  11. Working with AI

    Tell AI What You Want and Who You Are

    Two takes on the same idea — the ASD-STE100 controlled-English standard and the i-have-adhd Claude Code skill — on giving your AI a writing system.

    3 min read

  12. Working with AI

    SoN 2.28: "That's good, how can we make it better?"

    When I think about AI and automation, I see an opportunity opening up that goes well beyond the chatbots everyone’s being handed — well beyond prompting, too. One of the most…

    6 min read

  13. Working with AI

    Paperwork Shot List

    A shot list for the paperwork This week I’ve spent five hours or more in the car, driving between schools to move our kid from one to another for the new school year. It’s a mixed…

    3 min read

  14. Security & Risk

    SoN 2.27: I Just Talked With Someone Else's Vault

    More than twenty years ago, I sat with a class of eleven- and twelve-year-olds and tried to show them what “connected to the internet” actually meant. We went looking on the…

    8 min read

  15. Working with AI

    The model of the week changes by Thursday

    Two headlines are eating the feeds this morning, and both have the shelf life of milk. Anthropic extended Claude Fable 5 to every paid plan through July 12 — a few more days with…

    2 min read

  16. Security & Risk

    SoN 2.26: The best AI models are getting harder to get

    Tales from the Workbench =================================================== Some weeks the newsletter is one idea worked all the way through when time affords it. This week it’s…

    7 min read

June 2026 12

  1. Security & Risk

    Where You Keep the Final Say

    I keep a tool wired into my AI setup that can read the actual text of Spanish law — the BOE, the official state gazette. In layperson terms it’s a connector (an “MCP server”) that…

    4 min read

  2. Agents & Tooling

    SoN 2.25: Stop guessing and use AI to pull the data

    Stop guessing and pull the actual data =================================================== I help out a small, volunteer-run cat rescue. They do good work, and they post on…

    6 min read

  3. Agents & Tooling

    Digging into Banco Santander's AI Tooling

    Two years ago, around thirty million Santander customers had their records put up for sale on a hacking forum: names, card numbers, and more. The cause was a contractor’s cloud…

    5 min read

  4. Agents & Tooling

    Open Knowledge Format

    This week Google Cloud released the Open Knowledge Format. It’s plain markdown files with a short labelled header — a few fields like type, tags and a link (they call it YAML…

    3 min read