Journal
How people are getting hacked, as it happens. Written from public reporting and checked against the sources.
- Rules off, $20 a month
A startup now rents out AI models with their safety rules removed. Signing up is free, there are no identity checks, and nothing you type is kept.
- Someone is collecting AI keys
Fireworks AI, OpenCode and now Railway. Three platforms in fifteen days, each breached for the same kind of thing: the keys their customers trusted them to hold.
- Seven in ten websites are waiting on a patch
Two critical flaws in PHP, the language behind most of the web, leaked before they could be fixed. Most families won't have to patch anything. The people they trust with their data will.
- The guardrails came off in 35 hours
DeepSeek released a new open AI model on a Saturday afternoon. By the early hours of Monday, Sydney time, a version with its safety rules removed was online for anyone to download.