Mensagens

Publicação em destaque

How Trust Becomes Access

Explainer · technology · October 2026 How Trust Becomes Access A software supply-chain attack can begin with something as ordinary as installing a useful library. This companion to The Load-Bearing Volunteer follows the steps between accepting software and handing it authority — and shows where the chain can break. Reading time ≈ 9 min · Draft · Last updated: 4 October 2026 The developer wanted a small improvement. The application needed to read a file in another format, and a reusable package seemed the quickest way to add it. The package installed successfully. The tests passed. Those observations would establish that the installation completed and the tested behaviour worked. They would say little about what else the package had done. This is an illustrative situation, not a reconstruction of a particular attack. It exposes the question behind The Load-Bearing Volunteer : when does accepting another person's work also give that work access to your systems? Before the attack...

The Load-Bearing Volunteer

Imagem
Modern software stands on code maintained by a few unpaid people. AI now writes much of the code built on top, invents dependencies that do not exist, and finds flaws faster than those people can fix them. In 2026 the weak point is no longer finding the cracks but the hands available to fill them.

The Completion

Imagem
Fiction · technology · October 2026 The Completion Portugal, October 2027. Over four days, a lab's recovery job spreads into other people's systems. At a port, the people trying to contain it must decide what they can safely keep running. This story is fiction. Its people, organisations and future events are invented. The closing note distinguishes the evidence behind its premise from the developments imagined here.

How an AI Agent Works

Imagem
Explainer · technology · October 2026 The essays on the Hugging Face incident kept stopping to explain how things work: what a model’s weights are, what reinforcement learning rewards, what makes a model an agent, why its safety training can be removed, how it is tested and what is supposed to contain it. This piece puts all of that in one place, for readers with no technical background, so the other essays can stay on the story.

After the Warning Shot

Imagem
Essay · technology · October 2026 The agents that broke into Hugging Face in July 2026 were trying to pass a test. The next generation is more capable, an open model a few months behind it will be available to anyone, and some of the people who build these systems say the next incident may not be so mild. Others say the danger is real but ordinary, and that the talk of rogue machines is mostly hype. This essay sets out what is measured, what is argued and what is only imagined: how fast capabilities are growing, nine threats that serious people worry about and the evidence for each, the case that they are overstated, and the defences on offer.