VoicesWillison Google API Keys Privilege Escalation Plus tldraw Slop Fork Defensesimonwillison.net·high signalXBlueskyLinkedInCopy linkTruffle Security found 2863 exposed Google API keys gaining Gemini access. tldraw moving tests to closed-source to prevent slop forks. Fowler endorsed Willison agentic engineering patterns.SourceSource pagesimonwillison.net↳ Follow the threadShared entity / Stack layerGoogle Shipped Antigravity Remote Control and Anthropic Overhauled Claude Code Mobile Within About 24 Hours of Each OtherGoogle Antigravity Blog / Google Cloud BlogPolicy dependency / Stack layerSAPO Shares One Autoregressive Backbone for Policy and Value, Beating PPO by 15.1 Points With No Separate CriticarXiv 2608.19842Shared entity / Threat patternGoogle's Gemma Open Models Pass One Billion Downloads With Over 100,000 Community VariantsGoogle BlogStack layer / Threat patternSimon Willison Rebuilt shot-scraper as a 150-Line Zero-Dependency Service on Bun 1.4's New Bun.WebView, No Puppeteer or PlaywrightSimon WillisonStack layer / Threat patternCoding Agents Spend 60.5% of Their Documentation Time on Instruction Files and Notes, Not Your DocsarXiv 2608.20195Stack layer / Threat patternSimon Willison ships llm-openrouter 0.7 with three server-side tools: Shell, WebFetch and WebSearchGitHub (simonw/llm-openrouter)Stack layer / Threat patternShieldZFS Extends ZFS to Detect Rollback and Fork Attacks by a Malicious Cloud Provider on TEE StoragearXiv 2608.19924Stack layer / Threat patternA Practitioner Fingerprinted the Anonymous Ox Alpha Model and Found GLM-5.3's Tokenizer, While a DeepMind Researcher Hinted Geminir/singularity (205 upvotes; corroborated by OpenRouter's launch post and a second r/singularity thread at 142 upvotes)