This week in the Wild West Roundup:
This week in the Wild West Roundup: A real Google Maps place page with tons of prompt injection in the comments. 'Comment and Control': Claude Code, Gemini CLI, GitHub Copilot Agents Vulnerable to Pr...
177 mentions · 138 chunks · 81 episodes
This week in the Wild West Roundup: A real Google Maps place page with tons of prompt injection in the comments. 'Comment and Control': Claude Code, Gemini CLI, GitHub Copilot Agents Vulnerable to Pr...
Google threatening to kick a user off their Gmail for personal use of the APIs to access your own data would be a nuclear option. This is assuming the reaso...
Google's culture enshrined a "anyone can challenge anything" at the beginning. This was very useful after PMF, and when Google was Not A Normal Company. At ...
...r: "A scan of approximately 2,000 MCP servers found all lacked authentication." Google DeepMind Researchers Map Web Attacks Against AI Agents. GrafanaGhost: Attackers Can Abuse Grafana to Leak Enterprise Data. Mythos escaped its sandbox...
What is the strategic staying power of our Google Accounts? It used to be too much of a pain to extract our data into other services. But now LLMs could plausibly do the cognitive labor given a Googl...
...e arbitrary code." Claude Code bypasses safety rule if given too many commands. Google Addresses Vertex Security Issues After Researchers Weaponize AI Agents. Ars Technica: Here's Why It's Prudent for OpenClaw Users to Assume Compromise...
...ing else has aggregated the longer that's true the more the incumbents benefit. Google would still be in a good position even if it didn't have a state of the art model.
...s for Shelf. In prior cycles, consumer and infrastructure evolved sequentially. Google and Amazon built massive consumer audiences first, then over years exposed capabilities as infrastructure. AWS didn't follow S3 overnight. The cycles...
...he more tasks that are worth doing, so you get more usage.[bb] Back in the day, Google Photo's free pricing tier made the same miscalculation[bc]. It led to the service being significantly more expensive to run than the bean counters na...
Google released a CLI for their APIs, gws. It's better than what was available before, but other than that, it's almost embarrassingly clunky. It's just a t...
...derstand you, it just knew how to show you ads that worked for people like you. Google never knew you better than you know yourself. It could mechanistically remember everything you told it, but figuring out your implied innermost desir...
Everybody but Google says "I wish my data weren't in Google's silo." But Google says, "why can't you see how great this is?"
...ent to Gain Full System Control. Invisible Threats: Source Code Exfiltration in Google Antigravity. hackerbot-claw: An AI-Powered Bot Actively Exploiting GitHub Actions - Microsoft, DataDog, and CNCF Projects Hit So Far Also covered in ...
You can't inspect how Google actually uses your data. There's a massive, open-ended Terms of Service that reserves a huge amount of maneuvering space for Google. Google presumabl...
... you won't be able to retrofit agentic workflow onto previously dumb tools like Google Docs, Notion, and Airtable.
Real time traffic is powerful but it requires giving the full data to Google. Google doesn't peek... but it could!
Google Search for a long time was surprisingly simple internally. 90's era tech that stayed powerful for multiple decades. That's because if you have an eme...
At Google scale you have to distill personas out of first principles and stochastic UXR. Small startups grow personas out of real people that are living and br...
...the new internet, we're still in the phase where Yahoo is the biggest thing and Google doesn't exist.
... what you do, you're unlikely to get hurt, and you'll likely get a good result. Google Search had this characteristic, and chatbots do too. The expectation for how likely a given input is to give good enough results is a prior that conf...