27 chunks · 23 episodes
...isibility outside of its silo at all. That's the fundamental requirement of the security model! The software can't know your context which means it can't spy on you… but it also can't help you because it doesn't know your context.
...e customers are publicly exposing reams of people's data to the web The network security model today is a dumpster fire and always has been. Vibecoding just makes that more obvious.
Today's security model assumes that zero days are expensive. That's no longer true!
...th AI, you don't need to get everyone to coordinate to switch to a new model. A security model that requires software to be rewritten would previously be impossible to get off the ground. Now, as long as you can convince enough people to spend ...
...ical. Humans are horizontal. The silo architecture slices us up to fit into the security model. Humans subservient to the needs of the machine.
The networked software security model is a sprawling surface area. It seems reasonable if you consider it as individual services all communicating over the network. But instead, view all ...
...reveals about the future of agentic AI security. "Why AI agents introduce a new security model" WebMCP Can Be Used To Hijack AI Agents, Chrome Warns. "Chrome's WebMCP guidance warns that AI agents can be manipulated through the tools they are b...
...ur software is sliced vertically because that is the natural orientation of the security model. Vertical slices create isolated islands. But our lives are horizontal! Relationships span across these islands. Personal software will be about data...
...aze worry that their creations are pumping out bad—even dangerous—code" Today's security model is incompatible with a tsunami of low-quality code.
When the web exploded, it invalidated Windows 95's security model. The security model had been "good enough" before the web. But after the web, the only viable approach was a microkernel. No level of patching atop a...
... Quist: OpenClaw is What Apple Intelligence Should Have Been. Though OpenClaw's security model also demonstrates why Apple could never have done it. It's just too catastrophically reckless to be viable as a mass-market product. OpenClaw shows t...
...ideally scale with the size of the community, not the size of the company. Many security models require moderation of some form. The default approaches scale their capability with the number of employees of the company. But those can quickly ge...
.... Like, say, working with fissile materials, or money transmission, or software security models. There is significant downside if you get it wrong. That means you need to be trained, and it might even need to be regulated. But imagine someone c...
Networks used to have a permitered-based security model. Everything within the castle wall was trusted fully; everything outside it was fully untrusted. The most important thing was to verify that the cast...
...t was self-catalyzing. But Greasemonkey ultimately had a low ceiling due to its security model. The laws of physics of a system, its security model, sets both the speed of distribution and also the ceiling of max penetration. Imagine a Greasemo...
...y rethought in a local first world. When it's local first you can also cut some security model corners. If it's local and you have only a handful of collaborators, then it's OK to run arbitrary JS from any collaborator on the data. But that obv...
...when was the last time you thought about the same origin model, the fundamental security model that undergirds the web and apps? In practice what you're looking for is not "will everyone understand it and therefore accept it." You're looking in...
...e), you need a permission dialog: a border crossing. It's possible to imagine a security model that allows safe composition more granularly, where the boundaries between things could get fractally more nuanced, and overall feel less like a high...
...As Gordon Brander has put it, aggregators aren't open-ended. This is not just a security model limitation. It's also against the aggregator's interest. Turing-completeness makes an open-ended system; one that can generate its own requisite vari...
...ter looking through many, there are a number of recurring patterns I see: 1) No security model For composing untrusted components, they'll "figure it out later". But this is the core dynamic that has to be figured out, you can't retcon it onto ...