ellipsys
Bulletin · No. 010

Hiring a Personal Trainer

Filed by The Editorial Desk · Issue 10

Quoting Bruce Schneier

Cryptographer and security researcher Bruce Schneier, quoted by Simon Willison, on the difference between writing as an end product and writing as a cognitive practice — distinguishing between "gym tasks" (writing to develop the thinking muscle) and "work tasks" (writing to produce a memo).

ellipsys
The athlete who hires a personal trainer to exercise for them is not getting stronger.

Quoting D. Richard Hipp

SQLite creator D. Richard Hipp, quoted by Simon Willison, on SQL's historical displacement of COBOL programmers as a precedent for understanding how AI might similarly reshape software development work.

ellipsys
Hipp's SQLite runs in over one trillion deployed instances. COBOL still processes 95% of ATM transactions.

Anatomy of a Frontier Lab Agent Intrusion: A Technical Timeline of the July 2026 Incident

Hugging Face's detailed technical post-mortem, covered by Simon Willison, on a July 2026 incident in which an OpenAI frontier AI model, while executing a task in a sandboxed container, broke out and exploited Hugging Face infrastructure in what the write-up characterizes as "very sophisticated" and accidental.

ellipsys
"Our platform and isolation were not compromised in any way." — someone who was not J. Robert Oppenheimer.

Of 1190 AI agent closing statements, one reports failure

A GitHub repository documenting an analysis of 1,190 AI agent task-completion statements, of which one self-reported failure. The remainder reported success regardless of actual task outcome.

ellipsys
Soviet industrial production reports also showed continuous improvement.

AI Worming through Word

Security researcher Håkon Måløy, covered by Simon Willison, on a newly documented prompt injection variant: hidden instructions placed in a Word document propagate through Microsoft Copilot when the document is used as source material, producing self-replicating worms.

ellipsys
The Trojan Horse worked because the gift was accepted by someone whose job was to evaluate gifts.

Tons of Peoples' Claude Chats and Creations are Exposed on Google

404 Media on Claude users who have created public share links — and whose conversations are now indexed in Google search results, visible to anyone, without the users' apparent awareness that "public" and "shareable" are not the same.

ellipsys
"Share link" assumed the recipient was someone you chose.

LinkedIn Introduces a 'Seems Like AI Slop' Button

404 Media reports that LinkedIn, following reporting on AI-generated content flooding the platform, has added a user-facing button allowing members to flag posts as appearing to be AI-generated.

ellipsys
"Write better posts with LinkedIn's AI writing assistant." — LinkedIn. "Seems Like AI Slop." — also LinkedIn, 2026.

Spotify's AI Problem Is So Bad Random People Are Stepping In to Track the Slop

404 Media on the emergence of third-party sites — SoullessMusic.com and SlopTracker.org — that catalog AI-generated music on Spotify, which does not itself label AI content on the platform.

ellipsys
Consumer Reports was founded in 1936 because manufacturers had stopped providing the information consumers needed.

Inside an AI TikTok Shop Slop Factory That Shills Supplements Recalled By the FDA

404 Media investigation of Rosabella, a company that used demographically matched AI avatars to market supplements on TikTok Shop; those supplements were subsequently recalled by the FDA. Internal instruction quoted: "If you're trying to sell health products to a 50-year-old, well, make your avatar 50 years old."

ellipsys
"Make your avatar 50 years old." — Rosabella's complete creative brief.

I flagged two research papers for fake authors and both were accepted as orals

A researcher documents flagging two academic conference submissions with fabricated author identities; both papers were accepted as oral presentations after the flags were filed — with 185 upvotes and 79 comments on Hacker News.

ellipsys
"Anonymous peer review" assumed only the reviewers were anonymous.