There’s a lot of talk about what the future holds with AI. Utopia or dystopia? What happens to jobs? The economy? Is this a bubble?

Last week, we got a reminder of the problems we need to address today.

Security.

The tools that let one engineer accomplish more can do the same for one bad actor. And models are good at finding security gaps. Whether that’s good news depends on who finds them first and what they do next.

You’ve probably gotten a letter offering free credit monitoring after a data breach. Most likely several. We’ve gotten strangely used to companies losing information we trusted them to protect.

Every app that stores someone’s information is also a promise to take care of it. Shipping faster doesn’t make that promise smaller.

And as we give agents access to our inboxes, files, and bank accounts, the stakes go beyond another leaked password. We’re giving software permission to act on our behalf.

We can debate the future. We’re responsible for what we ship today.

To earning that trust,

Jeremy

The Wolf of Claude Street: Anthropic has filed its public S-1, opening the books ahead of a proposed Nasdaq listing under ANT. The filing puts the business behind Claude under the same spotlight as its models: financials, risks, and all. CNN reports trading could start as soon as the week of November 16, but the share count and price range are still unset.

The bug hunt is on the house: Anthropic’s OSS Scanner offers eligible open-source projects free, regular security checks using its strongest models. Maintainers get reports showing how to trigger a flaw, plus a suggested fix when possible.

This bot skipped English class: Block’s Dessa learned conversation from human speech, with no text or pretrained model, according to its team. It listens and talks at the same time, aiming to keep the pauses, laughter, and interruptions that transcripts miss. Block says it runs locally on a MacBook Pro M4 Max or better.

Claude would like a word: Claude Duet is Anthropic’s new proactive assistant: it checks connected apps, flags what needs attention, and keeps working after you close the laptop. It can tackle scheduling, dashboards, and web apps, but asks before sending messages or making payments. For now, it’s a US-only research preview for Pro and Max subscribers via waitlist.

The bot took economy class: OpenAI’s GPT-6.1 Terra is built for screen-reading, clicking through apps, and everyday writing at half the standard API price of GPT-6.1 Sol. OpenAI says it matches Astra on one professional computer-use benchmark while finishing tasks over three times faster. For the hardest coding jobs, OpenAI still points to Sol or Astra.

“Make it do the bouncy thing” finally has a dictionary: oneshotprompts gives you a visual catalog of 923 motion techniques, with names, live examples, and a way to add them to a prompt for Claude or ChatGPT. Think scroll reveals, button effects, and all the little movements you can recognize but can’t describe. Less interpretive dance in the prompt box.

Theo’s agent starter pack: tstack packages the reusable instructions Theo uses with Claude Code and Codex, from having multiple models review code to babysitting a pull request while checks run. There’s a “full-send” workflow that can go all the way to a merge, and a “full-stop” version that leaves the final button to a human.

Your agent is not a joint account holder: Axios reports that major US banks are restricting third-party AI agents accessing customer accounts. Banks reportedly struggle to distinguish agents exceeding their instructions from customers deliberately handing over access - even when sharing login details violates bank rules. Morgan Stanley says it hasn’t observed rogue agents accessing its platforms. Letting a bot read a balance and letting it move money deserve very different permission slips.

PHP: Please Hurry, Patch: Researchers at Calif used GPT-5.6 Sol to uncover a critical PHP flaw, OpenAI says. PHP’s maintainers led the fixes, with OpenAI coordinating a two-month response before disclosure. If you run PHP, check the update guidance: update the runtime and restart the relevant services. Updating WordPress alone doesn’t update the engine underneath. PHP’s October 23 follow-on advisory also flags an unusual configuration that can remain exposed after the original patches.

The keys left the station: Railway’s preliminary incident report says attackers accessed internal systems and decrypted some customers’ stored secrets. Railway believes AI models helped the attackers, who were hunting AI-provider API keys, but that assessment is still preliminary. The practical part isn’t: Railway recommends revoking and replacing sensitive environment variables stored before October 21 and checking provider activity logs.

Even 1234 is judging you: One of eMudhra’s compromised certificate-authority keys was literally the number 4. Eight keys were weak enough to recover from public certificates. Mozilla’s Dennis Jackson reports that local agents recovered a key on their first attempt in his test. This wasn’t AI breaking strong encryption; the keys were badly generated.

Your API key picked up someone else’s tab: OpenCode says a breach affected 1.4% of its Console users, exposing keys for linked AI providers. BleepingComputer reports that users saw unauthorized charges. Co-founder Dax Raad says attackers used AI agents, while his own defensive models started refusing requests mid-investigation. Raad says the situation stabilized after his team gained access to OpenAI’s Daybreak cybersecurity model for defensive work.

Bob Ross, but make it JavaScript: Simon Willison’s Quick Study turns a photo into a painting a few brushstrokes at a time. Pick oil, watercolor, or pointillism, then watch broad strokes give way to finer details. Claude built the tool; the painting effect comes from simulated brushes running in your browser. Happy little pixels.

Good Will Prompting: OpenAI says its models produced three new results across mathematics, computer science, and physics, tackling questions about waves, computational difficulty, and quantum field theory. The company is sharing the work with outside experts to examine and explain it, and calls the manuscripts raw research data. Potentially huge. Still very much in the ‘show your work’ phase.

Your call is important to my bot: Elon Musk says Grok Bot can now call people or businesses for you, make a request, take notes, and send back a summary. A very practical destination for all this intelligence: asking a human on the phone whether the thing is in stock. Finally, hold music has a machine audience.

The corner office is a browser tab: Alex Finn shared a Side Hustle CEO template for Grok Bot that asks about your interests, pitches three business ideas, and is designed to build and run the one you pick. His agent-use-case directory is a live example. Finn says his bot made him $1,800.

Solo doesn’t mean alone: Julian Weisser argues that AI will make starting a company alone increasingly normal. But cheaper, faster building leaves a very human problem: who challenges your plan, notices when you’re stuck, or helps you finish on a rough day? His answer is to build around other founders and a support network, even without a cofounder. Apparently the org chart can shrink faster than the need for other people.