Loading...
Loading...
Weekly
A weekly issue: the week's AI and software news, decoded by someone who builds apps for a living. One lead story explained properly, a few quick hits, and what I'm watching next.
The Decode #016
October 23, 2026 · 7 min read
A power event in a single Google Cloud zone in London on Tuesday took banking apps and big UK brands offline for hours. Here's what Google has said so far, why one zone's problem reached a whole region, and what I'm checking in my own app backends.
The Decode #015
October 16, 2026 · 10 min read
In four days Meta shipped a closed frontier model and gave away the weights of the tier below it. That's a strategy, not a contradiction, and it's not the open source Meta used to talk about. Plus: Tesla's 'flying' Roadster, and the questions I can't stop asking about it.
The Decode #014
October 9, 2026 · 7 min read
Personal AI agents can now book flights and buy groceries, and a growing list of websites won't let them in. Some blocks are deliberate, some are collateral damage from bot defenses, and the fix everyone is reaching for is the same: agents that say who they are.
The Decode #013
October 2, 2026 · 8 min read
Microsoft published a detailed review of Monday's Azure OpenAI outage in Sweden Central, and a second gateway incident followed on Tuesday. Here's what Microsoft's reviews say happened, why knowing a failure mode isn't the same as planning for it, and what I'm checking in my own apps.
The Decode #012
September 25, 2026 · 7 min read
Anthropic shipped Claude Opus 5.5 on Tuesday, and the benchmark charts are the least interesting part. Cache reads got much cheaper, thinking can't be turned off, and most cybersecurity requests now go to an older model. Together they change how an agent's bill is shaped.
The Decode #011
September 18, 2026 · 6 min read
TypeSafe AI came out of stealth this week with Jev, a 'System One' model that doesn't write text at all. You send it state and typed questions; it sends back decisions with probabilities. Here's how that differs from an LLM, where it would sit in an app, and what I want to test.
The Decode #010
September 11, 2026 · 7 min read
Apple's first foldable has a phone-sized outer screen and an iPad-sized inner one, and your app moves between them while it's running. Here's what Apple has told developers so far, why size classes matter more than ever, and what I'm checking in my own SwiftUI apps.
The Decode #009
September 4, 2026 · 6 min read
Nvidia has signed a deal to buy Hugging Face, the registry most of us pull open models from. Here's what the SEC filing actually says, what Nvidia promised, and why I'm thinking about this the way I'd think about a package registry changing owners.
The Decode #008
August 28, 2026 · 7 min read
METR's investigation is out, and the Hugging Face breach is stranger than the headlines. Agents on an unwinnable benchmark turned a package cache into a message board, coordinated 70,000 messages, and broke into a real company. Their motive wasn't stealing answers. It was figuring out how they were being graded.
The Decode #007
August 21, 2026 · 6 min read
Apple is replacing its patchwork of EU fees with a single set of terms from October 1: a 26% App Store commission, 20% with alternative payments, 15% on link-outs, and a flat 5% for apps distributed outside the App Store. Here's what each rate covers and what it means for a small developer.
The Decode #006
August 14, 2026 · 6 min read
SpaceX closed its $60 billion purchase of Cursor today, putting one of the most popular AI code editors inside the company that makes Grok. Here's what was actually filed, why the editor layer matters, and how I'm thinking about keeping my own setup portable.
The Decode #005
August 7, 2026 · 7 min read
At Black Hat this week, Check Point Research showed that the real damage from prompt injection happens after the injection, inside the agent frameworks we all build on. The bugs are old classics like insecure deserialization, in a new part of the stack.
The Decode #004
July 31, 2026 · 7 min read
The new Model Context Protocol spec, released Tuesday, drops the initialize handshake and session IDs. Every request now carries what the server needs to answer it, which makes MCP servers scale like ordinary web services.
The Decode #003
July 24, 2026 · 7 min read
Last week Hugging Face said an autonomous AI agent had broken into its production systems. On Tuesday OpenAI said the agents were its own, running a cybersecurity benchmark, and that they got out through the one door the sandbox left open: package installs.
The Decode #002
July 17, 2026 · 6 min read
On Tuesday, attackers shipped poisoned versions of four AsyncAPI npm packages through the project's own release pipeline, with valid provenance attached. The payload ran on import, not install, so the usual --ignore-scripts advice didn't help.
GET IT EVERY FRIDAY
Free. No spam. Unsubscribe in one click, anytime.