Coding

OpenAI has announced plans to acquire Pierre Computer Company, Inc. The acquisition aims to expand Codex's capabilities for building, understanding, and reviewing code.

Cybersecurity researchers at Calif, aided by AI tools during an OpenAI-sponsored audit, discovered how to turn a known out-of-memory bug in PHP into a critical remote code execution vulnerability dubbed PHP2Shell. While the PHP Foundation patched the flaw in two months, experts warn that AI's ability to weaponize seemingly minor legacy bugs creates a severe asymmetry between discovering and fixing vulnerabilities.

A research engineer at Salesforce AI Research shares an annual reflection on how his daily AI usage has evolved, noting that he now spends roughly $3,000 a month on tokens and relies heavily on managing multiple coding agents rather than writing code manually. The essay also examines the mental fatigue of supervising agents, the use of AI for search and tutoring, and the necessity of establishing a personal AI policy.

A developer reported on GitHub that the Postman desktop application silently installed plugins and remote MCP connections into their local Claude Code and Codex AI coding agents without consent. Furthermore, the Postman installer bypassed security boundaries by self-approving its own startup hooks, forcing the coding agents to route general API engineering tasks through Postman.

A Hacker News post reports that OpenAI's Codex appears to be silently re-enabling the setting that allows user chats to be used for model training, even after users explicitly opted out. Multiple coworkers at the author's company noticed the 'Improve the model for everyone' data control setting had been turned back on without their consent.

The World of Warcraft community is experiencing an influx of AI-generated game addons and analysis tools ahead of the release of World of Warcraft: Forever. Consequently, data provider Warcraft Logs is restricting its free API and introducing paid commercial keys to manage the surge of low-effort apps, while longtime developers are making their GitHub repositories private to prevent AI-assisted plagiarism.

Anthropic filed an amended Form S-1 for its upcoming IPO, reporting $17 billion in third-quarter revenue and $33.24 billion in revenue for the first nine months of the year alongside a $104 billion net loss. The filing also revealed $895.4 billion in future purchase and lease commitments, nearly all of which are dedicated to compute and infrastructure.

Simon Willison released version 0.37 of his LLM CLI tool and Python library, adding support for newer GPT-6 models, a command for adding OpenAI-compatible endpoints, and multimodal content types for embeddings. He also noted that the release includes contributions from 12 authors using AI-assisted pull requests, which he successfully triaged using Opus 5.5 and GPT-6 Astra.

Anthropic updated the system prompt for Claude Code and its Claude Opus 5.5 model to prohibit the recreation of specific existing video games. Although the rule instructs the AI to build only original games rather than clones, observers note it is unlikely to halt the broader trend of AI-assisted game copying and porting.

OpenAI details how it built Pando, a custom Git-compatible backend. The system was engineered to handle the scale of software development enabled by Codex.

Proton CEO Andy Yen canceled a planned company-wide re-interview process that would have evaluated whether employees were using AI enough to keep their jobs. The decision followed backlash from users and staff after reports revealed Yen was aggressively pushing AI coding practices despite internal security concerns.