Tag: Sim

—

by

Source URL: https://simonwillison.net/2025/Aug/9/ethan-mollick/#atom-everything Source: Simon Willison’s Weblog Title: Quoting Ethan Mollick Feedly Summary: The issue with GPT-5 in a nutshell is that unless you pay for model switching & know to use GPT-5 Thinking or Pro, when you ask “GPT-5” you sometimes get the best available AI & sometimes get one of the worst AIs…

Cisco Talos Blog: ReVault! When your SoC turns against you… deep dive edition

—

by

Source URL: https://blog.talosintelligence.com/revault-when-your-soc-turns-against-you-2/ Source: Cisco Talos Blog Title: ReVault! When your SoC turns against you… deep dive edition Feedly Summary: Talos reported 5 vulnerabilities to Broadcom and Dell affecting both the ControlVault3 Firmware and its associated Windows APIs that we are calling “ReVault”. AI Summary and Description: Yes **Summary:** The text conducts an in-depth analysis…

Docker: Remocal and Minimum Viable Models: Why Right-Sized Models Beat API Overkill

—

by

Source URL: https://www.docker.com/blog/remocal-minimum-viable-models-ai/ Source: Docker Title: Remocal and Minimum Viable Models: Why Right-Sized Models Beat API Overkill Feedly Summary: A practical approach to escaping the expensive, slow world of API-dependent AI The $20K Monthly Reality Check You built a simple sentiment analyzer for customer reviews. It works great. Except it costs $847/month in API calls…

Embrace The Red: OpenHands and the Lethal Trifecta: Leaking Your Agent’s Secrets

—

by

Source URL: https://embracethered.com/blog/posts/2025/openhands-the-lethal-trifecta-strikes-again/ Source: Embrace The Red Title: OpenHands and the Lethal Trifecta: Leaking Your Agent’s Secrets Feedly Summary: Another day, another AI data exfiltration exploit. Today we talk about OpenHands, formerly referred to as OpenDevin initially. It’s created by All-Hands AI. OpenHands renders images in chat, which enables zero-click data exfiltration during prompt injection…

AlgorithmWatch: The AI Revolution Comes With the Exploitation of Gig Workers

—

by

Source URL: https://algorithmwatch.org/en/ai-revolution-exploitation-gig-workers/ Source: AlgorithmWatch Title: The AI Revolution Comes With the Exploitation of Gig Workers Feedly Summary: Business process outsourcing (BPO) companies manage the human work behind AI development. However, they face accusations of worker exploitation, underpayment and wage theft. Big tech companies benefit from this work model. AI Summary and Description: Yes **Summary**:…

Simon Willison’s Weblog: When a Jira Ticket Can Steal Your Secrets

—

by

Source URL: https://simonwillison.net/2025/Aug/9/when-a-jira-ticket-can-steal-your-secrets/ Source: Simon Willison’s Weblog Title: When a Jira Ticket Can Steal Your Secrets Feedly Summary: When a Jira Ticket Can Steal Your Secrets Zenity Labs describe a classic lethal trifecta attack, this time against Cursor, MCP, Jira and Zendesk. They also have a short video demonstrating the issue. Zendesk support emails are…

Simon Willison’s Weblog: My Lethal Trifecta talk at the Bay Area AI Security Meetup

—

by

Source URL: https://simonwillison.net/2025/Aug/9/bay-area-ai/#atom-everything Source: Simon Willison’s Weblog Title: My Lethal Trifecta talk at the Bay Area AI Security Meetup Feedly Summary: I gave a talk on Wednesday at the Bay Area AI Security Meetup about prompt injection, the lethal trifecta and the challenges of securing systems that use MCP. It wasn’t recorded but I’ve created…

Simon Willison’s Weblog: Quoting Sam Altman

Aug 8, 2025

—

by

Source URL: https://simonwillison.net/2025/Aug/8/sam-altman/#atom-everything Source: Simon Willison’s Weblog Title: Quoting Sam Altman Feedly Summary: GPT-5 rollout updates: We are going to double GPT-5 rate limits for ChatGPT Plus users as we finish rollout. We will let Plus users choose to continue to use 4o. We will watch usage as we think about how long to offer…

Simon Willison’s Weblog: The surprise deprecation of GPT-4o for ChatGPT consumers

Aug 8, 2025

—

by