The Brief
New briefs daily around 7 AM Eastern
MCP servers v2.1.0 patch eight flaws, including symlink escapes
On older versions, a symlink swapped in after the path check let writes land outside the directories the server was told to allow, so the allowlist did not hold. Windows is only partly fixed, so Windows hosts keep some exposure after upgrading.
- 01Try
Ollama v0.40.11 adds macOS speech output and d3 decision models
Speech now streams through an OpenAI-compatible audio endpoint, so local apps written against that API can add voice without a cloud TTS service. The d3 models return classifications and probabilities, which fits routing and gating steps in agent pipelines.
- 02Read
Dan Luu argues AI lets builders attempt far larger software projects
His example, pgrust, earned trust through rigorous testing and benchmarking that found real Postgres bugs. That puts the dividing line between credible AI-assisted rewrites and slop in the verification work, not in whether a model wrote the code.
- 03Read
Jon Oberheide builds a relay rig so agents can tap a FIDO2 YubiKey
Agents stall at 2FA on sites without APIs. He ranks each 2FA type by how hard it is to automate and shows a working FIDO touch setup, along with the tradeoff that the agent then holds a replayable credential.
- 04Watch
Bridgewater lifts agent search precision@10 from about 60% to over 90%
The gain came from a hand-built benchmark on a permissioned corpus of 100M+ documents, not a new model. Bridgewater found agents need different search behavior than people do, so retrieval tuned for human queries underserves agents.
- 05Read
Sebastian Raschka releases 11-hour course on building reasoning models
It starts from a pre-trained LLM and implements evaluation, inference scaling, RL and distillation in PyTorch, so engineers can see each technique behind reasoning modes in code they run, instead of reading about them in papers.
A dated brief from the vibe-coding frontier. Today’s Intel.