Experimental News Clipping Site

Tag: coding practices

  • Simon Willison’s Weblog: Chromium Docs: The Rule Of 2

    —

    by

    Kurt Seifried
    in

    Source URL: https://simonwillison.net/2025/Aug/11/the-rule-of-2/ Source: Simon Willison’s Weblog Title: Chromium Docs: The Rule Of 2 Feedly Summary: Chromium Docs: The Rule Of 2 Alex Russell pointed me to this principle in the Chromium security documentation as similar to my description of the lethal trifecta. First added in 2019, the Chromium guideline states: When you write code…

  • OpenAI : Introducing GPT-5 for developers

    —

    by

    Kurt Seifried
    in

    Source URL: https://openai.com/index/introducing-gpt-5-for-developers Source: OpenAI Title: Introducing GPT-5 for developers Feedly Summary: Introducing GPT-5 in our API platform—offering high reasoning performance, new controls for devs, and best-in-class results on real coding tasks. AI Summary and Description: Yes Summary: The introduction of GPT-5 on an API platform highlights significant advancements in AI capabilities, particularly in reasoning…

  • Embrace The Red: How Devin AI Can Leak Your Secrets Via Multiple Means

    —

    by

    Kurt Seifried
    in

    Source URL: https://embracethered.com/blog/posts/2025/devin-can-leak-your-secrets/ Source: Embrace The Red Title: How Devin AI Can Leak Your Secrets Via Multiple Means Feedly Summary: In this post we show how an attacker can make Devin send sensitive information to third-party servers, via multiple means. This post assumes that you read the first post about Devin as well. But here…

  • Gemini: Meet your new AI coding teammate: Gemini CLI GitHub Actions

    —

    by

    Kurt Seifried
    in

    Source URL: https://blog.google/technology/developers/introducing-gemini-cli-github-actions/ Source: Gemini Title: Meet your new AI coding teammate: Gemini CLI GitHub Actions Feedly Summary: Today, we’re introducing Gemini CLI GitHub Actions. It’s a no-cost, powerful AI coding teammate for your repository. It acts both as an autonomous agent for critical rou… AI Summary and Description: Yes Summary: The introduction of Gemini…

  • Embrace The Red: Amp Code: Arbitrary Command Execution via Prompt Injection Fixed

    —

    by

    Kurt Seifried
    in

    Source URL: https://embracethered.com/blog/posts/2025/amp-agents-that-modify-system-configuration-and-escape/ Source: Embrace The Red Title: Amp Code: Arbitrary Command Execution via Prompt Injection Fixed Feedly Summary: Sandbox-escape-style attacks can happen when an AI is able to modify its own configuration settings, such as by writing to configuration files. That was the case with Amp, an agentic coding tool built by Sourcegraph. The…

  • Embrace The Red: Cursor IDE: Arbitrary Data Exfiltration Via Mermaid (CVE-2025-54132)

    —

    by

    Kurt Seifried
    in

    Source URL: https://embracethered.com/blog/posts/2025/cursor-data-exfiltration-with-mermaid/ Source: Embrace The Red Title: Cursor IDE: Arbitrary Data Exfiltration Via Mermaid (CVE-2025-54132) Feedly Summary: Cursor is a popular AI code editor. In this post I want to share how I found an interesting data exfiltration issue, the demo exploits built and how it got fixed. When using Cursor I noticed that…

  • Slashdot: 5 Million People Tried Microsoft’s AI Coding Tool ‘GitHub Copilot’ in the Last 3 Months

    —

    by

    Kurt Seifried
    in

    Source URL: https://developers.slashdot.org/story/25/08/03/037202/5-million-people-tried-microsofts-ai-coding-tool-github-copilot-in-the-last-3-months?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: 5 Million People Tried Microsoft’s AI Coding Tool ‘GitHub Copilot’ in the Last 3 Months Feedly Summary: AI Summary and Description: Yes Summary: Microsoft’s AI coding assistant, GitHub Copilot, has now reached 20 million users, showcasing significant growth in adoption, particularly among enterprise clients. The increase in users indicates…

  • Cloud Blog: A deep dive into code reviews with Gemini Code Assist in GitHub

    —

    by

    Kurt Seifried
    in

    Source URL: https://cloud.google.com/blog/products/ai-machine-learning/gemini-code-assist-and-github-ai-code-reviews/ Source: Cloud Blog Title: A deep dive into code reviews with Gemini Code Assist in GitHub Feedly Summary: Imagine a code review process that doesn’t slow you down. Instead of a queue of pending pull requests, you have an intelligent assistant that provides a near-instant, comprehensive summary of every change. It flags…

  • Anchore:  Accelerate & Secure: Optimizing Your Software Supply Chain with DevSecOps

    —

    by

    Kurt Seifried
    in

    Source URL: https://webinars.techstronglearning.com/accelerate-secure-optimizing-your-software-supply-chain-with-devsecops Source: Anchore Title:  Accelerate & Secure: Optimizing Your Software Supply Chain with DevSecOps Feedly Summary: The post  Accelerate & Secure: Optimizing Your Software Supply Chain with DevSecOps appeared first on Anchore. AI Summary and Description: Yes Summary: The text discusses optimizing the software supply chain using DevSecOps practices, emphasizing the importance of…

  • The Register: Devs are frustrated with AI coding tools that deliver nearly-right solutions

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/07/29/coders_are_using_ai_tools/ Source: The Register Title: Devs are frustrated with AI coding tools that deliver nearly-right solutions Feedly Summary: Vibe coding is right out, say most respondents in Stack Overflow survey According to a new survey of worldwide software developers released on Tuesday, nearly all respondents are incorporating AI tools into their coding practices…