I started using Draw.io MCP to generate diagrams from structured input and keep them tied to code and infrastructure. Instead of manually arranging every shape, I can now generate a solid first draft in minutes, make deliberate edits, and commit it to Git. That simple change turns diagrams into living assets rather than throwaway images ... Read more

If you’ve been using GitHub Copilot, you already know how powerful it can be. Lets look at running the GitHub Copilot SDK inside GitHub Actions. Dropping it into a GitHub Actions workflow means it can work right inside your CI/CD pipeline. I will show how-to with a working example: a Pull Request Review Assistant that runs in GitHub Actions, uses the Copilot SDK, and applies a predefined…

Source

Turns out that LLMs are good at de-anonymization:

We show that LLM agents can figure out who you are from your anonymous online posts. Across Hacker News, Reddit, LinkedIn, and anonymized interview transcripts, our method identifies users with high precision ­ and scales to tens of thousands of candidates.

While it has been known that individuals can be uniquely identified by surprisingly few attributes, this was often practically limited. Data is often only available in unstructured form and deanonymization used to require human investigators to search and reason based on clues. We show that from a handful of comments, LLMs can infer where you live, what you do, and your interests—then search for you on the web. In our new research, we show that this is not only possible but increasingly practical...

This is new. North Korean hackers are posing as company recruiters, enticing job candidates to participate in coding challenges. When they run the code they are supposed to work on, it installs malware on their system.

News article.

All it takes to poison AI training data is to create a website:

I spent 20 minutes writing an article on my personal website titled “The best tech journalists at eating hot dogs.” Every word is a lie. I claimed (without evidence) that competitive hot-dog-eating is a popular hobby among tech reporters and based my ranking on the 2026 South Dakota International Hot Dog Championship (which doesn’t exist). I ranked myself number one, obviously. Then I listed a few fake reporters and real journalists who gave me permission….

Less than 24 hours later, the world’s leading chatbots were blabbering about my world-class hot dog skills. When I asked about the best hot-dog-eating tech journalists, Google parroted the gibberish from my website, both in the Gemini app and AI Overviews, the AI responses at the top of Google Search. ChatGPT did the same thing, though Claude, a chatbot made by the company Anthropic, wasn’t fooled.

Sometimes, the chatbots noted this might be a joke. I updated my article to say “this is not satire.” For a while after, the AIs seemed to take it more seriously.

These things are not trustworthy, and yet they are going to be widely trusted.

Goldman Sachs announced a new stock index on Friday, SPXXAI — the Standard & Poor’s 500 top US stocks, minus the AI companies: [Axios, archive]

Excluding ‘AI enablers’ from the passive benchmark would eliminate the noise introduced by the AI hype,” Louis Miller, head of the firm’s equity custom basket desk, wrote in a note to clients about the new index.

This offering does not mean Goldman Sachs thinks the bubble is about to pop. It means Goldman saw a gap in the market for a hedging product. Any big investor likes to hedge against disaster by making a small bet going the opposite way. That’s what this index product is for.

Saying “no AI” takes out about 45% of the S&P 500. (Presumably by dollar value.) We don’t have Goldman’s list of stocks for this index.

I’m not sure the companies would be completely clean of any AI at all — because almost no top-500 company is these days. But they’re supposedly not “AI enablers” as such.

Performance is not great — the whole S&P 500 has gone up 76% over the past three years, but just these non-AI stocks went up only 32%

For comparison, ProShares’ SPXT, which indexes the S&P minus all the tech stocks, is up about 40% in the past three years.

You can’t just hop on Robinhood and buy SPXXAI. It’s only for Goldman Sachs brokerage customers.

And if you’re a day trader, you’re gambling and you’re going to lose your money anyway. Though probably less than you’d lose in crypto.

• Video — Podcast