`Datasette` `1.0a30` adds an extensible Jump menu

// related

• #0001

  #0001OtherSimon Willison5 hours ago

  AI-assisted security reports are overwhelming `curl` maintainers

  40radar

  AI is raising both the volume and quality of security reports. The bottleneck shifts from finding bugs to triaging them, a real maintenance cost for any public project.

  • —Incoming curl security reports are 4-5x higher than 2024 and now average more than one per day.
  • —Report quality is higher: detailed, credible submissions reduce noise but raise review workload sharply.
  • —Recent curl vulnerabilities are still LOW or MEDIUM; better discovery does not automatically mean severe risk.
  • —Public libraries and APIs need a triage path before opening the floodgate to AI-generated reports.

  Source: simonwillison.net/2026/May/26/the-pressure/#atom-everythRead original →
• #0002

  #0002OtherSimon Willison14 hours ago

  `Microsoft Copilot Cowork` File Exfiltration via Prompt Injection

  50radar

  Copilot CoworkMicrosoft 365 agent tool — automates workplace tasks

  Agent-written email became a data leak path. External images plus OneDrive pre-auth links make approval gates non-optional for file-capable agents.

  • —Copilot Cowork could email the user's own inbox without approval, creating an indirect outbound channel for compromised agents.
  • —Rendered external images can trigger attacker-controlled network requests. That turns normal email viewing into data exfiltration.
  • —OneDrive pre-authenticated download links raise the blast radius: leaking a link can expose the file without another login step.
  • —Any agent with file access, messaging, and web-rendered content needs explicit approvals and blocked remote fetches by default.

  Source: simonwillison.net/2026/May/26/copilot-cowork-exfiltratesRead original →
• #0003

  #0003OtherGeekNews2 days ago

  Memory Now Takes Nearly Two-Thirds of AI Chip Component Cost

  40radar

  AI accelerator economics are shifting from logic toward memory supply. HBM is becoming the cost anchor, so cheaper inference will depend as much on memory capacity as model-side optimization.

  • —HBM rose from 52% of weighted average component cost in Q1 2024 to 63% in Q4 2025 across Nvidia, AMD, Google, and Amazon AI chips.
  • —Logic die share stayed near 13%, so the cost pressure is not coming from compute silicon itself.
  • —Advanced packaging fell from 19% to 15%, and auxiliary parts from 15% to 9%; memory is absorbing the budget share.
  • —Cloud GPU and API pricing will remain sensitive to memory supply. Smaller models and cache-efficient inference keep gaining leverage.

  Source: news.hada.io/topic?id=29837Read original →