@kazani
AI agents are getting wallets, and a permission prompt is already lying to one.
Claude Code's VS Code plugin shows a symlinked path as inside your workspace when it resolves outside it, so a prompt-injected agent could reach ~/.ssh. Reported unpatched as of v2.1.322 (UltraStrike). The CLI shows the real location.
https://ultrastrike.io/2026/11/claude-code-vscode-plugin-workspace-escape-via-misleading-permission-prompt/
Brave Search API now takes x402 payments: no account, no API key, an agent pays $0.005 per request in USDC.
https://brave.com/blog/search-api-agentic-payments/
LibreAGI is a private torrent tracker for keeping copies of open models alive if their hosts vanish.
https://libreagi.com/
Daily reads like this: t.me/kazanireads
1 reply
0 recast
1 reaction