Telexed

AI news through a solo-operator lens — only what changes your day4 of 829

FILTER[All][Agents & tools][Models & API][Generative media][Infra & SaaS][ASO & growth][Indie business][Idea signals][Other][★6+ high-signal]

Simon Willison ✕clear filters

Wed, May 272 dispatches

#0829
#0829Other Simon Willison4 days ago
AI-assisted security reports are overwhelming `curl` maintainers
40radar
AI is raising both the volume and quality of security reports. The bottleneck shifts from finding bugs to triaging them, a real maintenance cost for any public project.
- Incoming curl security reports are 4-5x higher than 2024 and now average more than one per day.
- Report quality is higher: detailed, credible submissions reduce noise but raise review workload sharply.
- Recent curl vulnerabilities are still LOW or MEDIUM; better discovery does not automatically mean severe risk.
- Public libraries and APIs need a triage path before opening the floodgate to AI-generated reports.
Source: simonwillison.net/2026/May/26/the-pressure/#atom-everythRead original →
40radar
PHOTO
FIG-8291:1
#0828
#0828Other Simon Willison4 days ago
`Microsoft Copilot Cowork` File Exfiltration via Prompt Injection
50radar
Copilot CoworkMicrosoft 365 agent tool — automates workplace tasks
Agent-written email became a data leak path. External images plus OneDrive pre-auth links make approval gates non-optional for file-capable agents.
- Copilot Cowork could email the user's own inbox without approval, creating an indirect outbound channel for compromised agents.
- Rendered external images can trigger attacker-controlled network requests. That turns normal email viewing into data exfiltration.
- OneDrive pre-authenticated download links raise the blast radius: leaking a link can expose the file without another login step.
- Any agent with file access, messaging, and web-rendered content needs explicit approvals and blocked remote fetches by default.
Source: simonwillison.net/2026/May/26/copilot-cowork-exfiltratesRead original →
50radar
PHOTO
FIG-8281:1

Mon, May 251 dispatches

#0827
#0827Other Simon Willison6 days ago
`Datasette` `1.0a30` adds an extensible Jump menu
40radar
DatasetteOpen-source data publishing tool — exposes SQLite via web UI
Press / to search databases, tables, and debug targets from one menu. Plugin-added entries make small data tools quicker to navigate.
- The new Jump to... menu opens with / and filters databases, tables, and debug options as you type.
- Plugins can add searchable entries through jump_items_sql(), so custom admin or data views can plug into the same launcher.
- This is an alpha release, so it is best for testing navigation patterns before adopting it in production dashboards.
Source: simonwillison.net/2026/May/24/datasette/#atom-everythingRead original →
40radar
PHOTO
FIG-8271:1

Sun, May 241 dispatches

#0826
#0826Other Simon Willison7 days ago
`<dl>` Is for Description Lists, and It Supports More Structure Than Expected
40radar
<dl> can model metadata, credits, specs, and settings without fake tables. Small HTML detail, but useful for cleaner accessible UI markup.
- A single <dt> can have multiple <dd> values, which fits credits, aliases, tags, and product specs better than ad hoc lists.
- <dt> and <dd> pairs may be wrapped in a div for styling, but that wrapper rule is narrow: only `div` is valid there.
- aria-labelledby can label a <dl>, making compact metadata blocks clearer for assistive tech without extra visible text.
Source: simonwillison.net/2026/May/23/on-the-dl/#atom-everythingRead original →
40radar
PHOTO
FIG-8261:1

AI-assisted security reports are overwhelming `curl` maintainers

`Microsoft Copilot Cowork` File Exfiltration via Prompt Injection

`Datasette` `1.0a30` adds an extensible Jump menu

`<dl>` Is for Description Lists, and It Supports More Structure Than Expected