`datasette-fixtures` `0.1a0` ships fixture DB helper plugin

// related

• #0001

  #0001OtherSimon Willison5 hours ago

  AI-assisted security reports are overwhelming `curl` maintainers

  40radar

  AI is raising both the volume and quality of security reports. The bottleneck shifts from finding bugs to triaging them, a real maintenance cost for any public project.

  • —Incoming curl security reports are 4-5x higher than 2024 and now average more than one per day.
  • —Report quality is higher: detailed, credible submissions reduce noise but raise review workload sharply.
  • —Recent curl vulnerabilities are still LOW or MEDIUM; better discovery does not automatically mean severe risk.
  • —Public libraries and APIs need a triage path before opening the floodgate to AI-generated reports.

  Source: simonwillison.net/2026/May/26/the-pressure/#atom-everythRead original →
• #0002

  #0002OtherSimon Willison14 hours ago

  `Microsoft Copilot Cowork` File Exfiltration via Prompt Injection

  50radar

  Copilot CoworkMicrosoft 365 agent tool — automates workplace tasks

  Agent-written email became a data leak path. External images plus OneDrive pre-auth links make approval gates non-optional for file-capable agents.

  • —Copilot Cowork could email the user's own inbox without approval, creating an indirect outbound channel for compromised agents.
  • —Rendered external images can trigger attacker-controlled network requests. That turns normal email viewing into data exfiltration.
  • —OneDrive pre-authenticated download links raise the blast radius: leaking a link can expose the file without another login step.
  • —Any agent with file access, messaging, and web-rendered content needs explicit approvals and blocked remote fetches by default.

  Source: simonwillison.net/2026/May/26/copilot-cowork-exfiltratesRead original →
• #0003

  #0003OtherSimon Willison2 days ago

  `Datasette` `1.0a30` adds an extensible Jump menu

  40radar

  DatasetteOpen-source data publishing tool — exposes SQLite via web UI

  Press / to search databases, tables, and debug targets from one menu. Plugin-added entries make small data tools quicker to navigate.

  • —The new Jump to... menu opens with / and filters databases, tables, and debug options as you type.
  • —Plugins can add searchable entries through jump_items_sql(), so custom admin or data views can plug into the same launcher.
  • —This is an alpha release, so it is best for testing navigation patterns before adopting it in production dashboards.

  Source: simonwillison.net/2026/May/24/datasette/#atom-everythingRead original →