tyingq

Vscode(ium) extensions are also pretty weak security wise in general. There's little guardrails on what an extension can do.

On publishing, I do see that the MS marketplace has much better typosquatting and rogue publisher protection. It's unclear to me how much better their SAST/scanning is than OpenVSX. Both have something, but both have been fooled many times, and recently.

Sort of hoping it's Anthropic and their specific OpenVSX account credentials. As opposed to the worse case of an OpenVSX flaw that's broader. A ton of AI-enabled IDEs are VsCodium forks pointed at OpenVSX...Cursor, Anti Gravity, Kiro, Trae, Devin, etc.

> The demo APK sends a message to the phone itself

That's not what the readme on the repo says.

"Install on a sender device, enter (or auto-fill from an active SIM) the target number, pick the sending SIM, and tap SEND CRASH SMS. Observe on the target..."

No, but it does also include cobra/health for the same period plus 6-12 months of options continuing to vest. Still not generous, but if you're longer tenure and can find another job within the timeframe, it's something.

Gitlab is terrible at cross-group permissions if you use dedicated or self-hosted. Because gitlab.com is made to keep top level groups separate (separate tenants). Things like cross-group MR approval, use of the built-in artifact repositories, terraform module registry, gitlab components, and so on...is very messy...so many granular cross-group allows you have to turn on.

It doesn't cover some of the same areas though, like replacing the youtube app with an ad-free alternative.

Of course, there's Antigravity IDE and Antigravity 2.0. Which are dissimilar.

Locked into their tools though. I happen to be very tied to a IDE centric model (old dog can't learn new tricks) and their Desktop thing is a regression for me. I can use the cli, but it wrecks the muscle memory I have with what I use now.

And Anthropic is somewhat unusual in that 10x more tokens via the subsidized path. I imagine more rugpulls are coming.

Not disputing your point in any way, just noting there's already caveats, and more are likely coming.

They are actively transforming it into "ask Gemini" though. Which for me is often wrong. The organic search results are farther down, and if a lucrative term...you have to scroll past ads also. And the quality is not what it once was.

So Google is polluting what it means anyway.

NYT seems to have found a way to keep the actual article content away from archive.is

Had to try it. And it delivers :)

> hes never coming over Dario Amodei

Anthropic CEO Dario Amodei will actually be joining President Donald Trump for a private dinner at the White House tonight, Sunday, September 27, 2026.

CNBC While it is true that he was noticeably absent from the high-profile state dinner held for Chinese President Xi Jinping earlier this week—which was attended by other major tech figures like Elon Musk and Sam Altman—