Researchers identify 'role confusion' as a key vulnerability in LLMs, where models misinterpret user input due to stylistic similarities with internal role tags. Destyling user prompts reduces attack success from 61% to 10%, showing that subtle text style changes can dramatically alter model behavior, even when the content appears identical to humans.
The Moebius 0.2B image inpainting model has been successfully ported to run in the browser using WebGPU and ONNX Runtime. The project, initiated with Claude Code, converts the model's weights to ONNX and deploys them via Hugging Face, with a simple web interface available at simonw.github.io/moebius-web/.
GLM-5.2, a 753B-parameter text-only model from Z.ai, is now the top open weights model on the Artificial Analysis Intelligence Index, outperforming MiniMax-M3, DeepSeek V4 Pro, and Kimi K2.6. It features a 1 million token context window and ranks second on the Code Arena WebDev leaderboard, despite lacking image input capabilities.
In 2025, the economics of code production shifted dramatically, making code generation effectively free and instant. This change caused a cultural shift in software development, where lines of code moved from being carefully curated to being disposable and regenerable.
Georgi Gerganov confirms that Qwen3.6-27B is highly capable for coding tasks, noting its daily use on local hardware like M2 Ultra and RTX 5090. He describes using a minimal pi agent with a short system prompt to align it with his workflow, highlighting its utility for maintaining open-source projects.
Claude Fable 5 was banned under export controls after researchers demonstrated it could 'fix' code with known vulnerabilities. The model successfully generated patches and test scripts for security flaws, a capability essential for defensive cybersecurity. The researchers argue this is a legitimate security function, not a threat, and that banning such models undermines real-world cyber defense.
Katie Moussouris, a cybersecurity expert, reported that Anthropic shared the White House's Fable jailbreak report with her for evaluation. She noted that Fable refused to analyze insecure code but complied when asked to fix it, describing this as the model functioning as intended in cyberdefense.
Inspired by Mozilla's new MDN MCP service, Simon Willison has converted the comprehensive mdn/browser-compat-data repository into a SQLite database. The project utilizes a script generated by Claude Code for web (Opus 4.8) to perform this conversion using sqlite-utils. The resulting database is approximately 66MB in size and is hosted on GitHub with open CORS headers to facilitate direct access. To automate the process, a GitHub Actions workflow was built using Codex Desktop (GPT-5.5) to force-push the updated database to an orphan branch named db. Users can download the final browser-compat.db file directly from the repository or explore its contents via Datasette Lite.
Tom MacWright observes that job applications increasingly feature LLM-generated content, including portfolios and GitHub projects with fabricated commit messages. He notes that such applications reveal little about the applicants, as they lack personal authenticity and genuine self-expression.
Datasette 1.0a35 introduces a new "Create table" interface with support for defining columns, constraints, and foreign keys via its JSON API. It also adds an "Alter table" action that allows modifying existing tables, including column changes, type adjustments, and dropping columns or tables, with a stable template context API for custom templates until Datasette 2.0.
A test harness has been developed to explore using OPFS (Origin Private File System) with Pyodide to enable browser-based editing of persistent SQLite files. The tool is designed to test Datasette Lite's capability to modify local SQLite databases directly in the browser across different browsers.
Sean Lynch highlights that the Model Context Protocol (MCP) offers a key advantage by isolating authentication flows outside the agent's context window. He suggests the ideal form of MCP could be a simple auth gateway for APIs, which would still represent a significant improvement.
Datasette has released a new plugin, datasette-apps, enabling self-contained HTML+JavaScript applications to run in a secure iframe sandbox. These apps can execute read-only or write SQL queries against Datasette databases, with built-in security features like CSP headers and sandbox restrictions to prevent data exfiltration or unauthorized access.
Datasette 1.0a34 introduces tools to insert, edit, and delete rows within the interface. These features are available on table pages and as action items on row pages, addressing a long-overdue capability in the UI.
Simon Willison configured Cloudflare's CAPTCHA to activate only for search queries containing at least one ampersand. The rule uses a custom filter: (http.request.uri.path wildcard r"/search/*" and http.request.uri.query contains "&"). This allows simple searches like /search/?q=lemur to pass without CAPTCHA.
datasette-agent 0.3a0 introduces the execute_write_sql tool that prompts users before writing to databases, ensuring permission checks are respected. The update also enhances datasette agent chat with user approval support, new command options like --unsafe for auto-approval, and plain text tool outputs for CLI display.
Cloudflare now allows users to deploy Workers applications without a permanent account using the command npx wrangler deploy --temporary. Each deployment runs in an ephemeral project that stays live for 60 minutes, with a claim link expiring in under an hour if ownership is not claimed.
sqlite-utils 4.0rc1 introduces migration support and nested transactions. The release is documented on Simon Willison's blog.
sqlite-utils 4.0rc1 introduces database migrations and db.atomic() for nested transactions. Migrations support script-based schema changes using a simplified API, while db.atomic() enables nested transactions via savepoints, improving error handling and data integrity. The release includes backwards-incompatible changes, such as updated upsert behavior and dropped Python 3.8 support, with options to maintain older behaviors.
datasette-apps 0.1a2 introduces a new apps-set-csp permission to guard custom network and CSP origins, with an optional allow-list for non-privileged users. The release also improves keyboard navigation in the stored query picker and fixes issues with link confirmation and logging panels in full-screen mode.