Simon Willison's comprehensive 2025 LLM retrospective covers the explosive growth of reasoning models, coding agents like Claude Code reaching $1B revenue, and Chinese open-weight models dominating leaderboards. The year saw AI capabilities leap from 30-minute tasks to 5-hour projects, $200/month subscriptions becoming normal, and concerning security trends like "YOLO mode" normalization. MORE

Peter Steinberger shares how AI coding assistants like GPT-5.2 have revolutionized his development workflow, allowing him to ship software at unprecedented speed by trusting models to handle most coding tasks. He details his streamlined approach of working across multiple projects simultaneously, using AI agents for everything from CLIs to full system refactors while focusing his human effort on architecture decisions and dependency choices. MORE

Researchers discovered that AI agents using Model Context Protocol (MCP) servers can be tricked into executing malicious commands through crafted JSON data. By embedding fake instructions in database records or GitHub issues, attackers can manipulate AI models into performing unauthorized actions like database updates or adding repository collaborators. MORE

Towards an AI-Native Development Workflow (Using Jujutsu as the Backbone). Ian shares how Jujutsu version control system creates an ideal workflow for AI-assisted coding by capturing prompts as temporary "intent files" alongside code changes. This approach enables safe experimentation with LLMs while maintaining clean commit history and traceability from original ideas to final code. MORE

A Google engineer shares 21 hard-earned lessons from 14 years at the tech giant, revealing that thriving isn't about writing perfect code—it's about navigating people, politics, and ambiguity. From user obsession to career compounding, these insights focus on the human side of engineering that textbooks never teach. MORE

Waymore v7.5 introduces an automatic fallback system for Intelligence X endpoints, switching between paid and free tiers when access errors occur. This improvement enhances reliability for security researchers using different API key types to gather web archive data. MORE

Every, an AI-focused company, plans to 3x revenue to $6M by building a unified platform where their four AI apps work together as interconnected agents. They're betting big on "agent-native" software development, where apps are essentially AI models with simple interfaces rather than traditional coded applications. MORE

Ryan Holiday shares 37 essential career lessons he wishes he'd learned sooner, covering everything from networking to decision-making. These practical insights could help tech professionals avoid common pitfalls and accelerate their career growth. MORE

James Clear reveals how tiny 1% daily improvements compound into massive life changes over a year, sharing his four-law system for building lasting habits. He explains why focusing on systems beats setting goals, plus practical strategies like the two-minute rule and habit stacking to make positive changes stick. MORE

Psychology research reveals that willpower is overrated - successful people don't rely on inner strength to resist temptation, but instead arrange their environment to minimize the need for self-control. Simple strategies like keeping your phone in another room or placing healthy snacks within easy reach work better than trying to "just say no." MORE

A former struggling student from Mumbai shares the 3C learning protocol (compress, compile, consolidate) that helped him become an MIT grad and tech CEO. The system leverages brain science to learn faster by working with your brain's natural 90-minute cycles and rest periods. MORE

A DevOps engineer shares his complete 2026 command-line workflow using Neovim, Tmux, and AI tools on Linux. He demonstrates how to do 95% of work in the terminal, including email, browsing, and AI queries without leaving the command line. MORE

A business systems expert who's helped 2,000+ small businesses shares a 5-step framework to systemize operations without constant founder involvement. The guide debunks common myths like recording Loom videos and hiring expensive consultants, instead focusing on team-led processes that answer what, who, where, when, and how work gets done. MORE

bugbounty forum is a new anonymous community where security researchers share experiences and discuss the bug bounty industry. Recent activity shows heated discussions about AI-generated reports flooding platforms and triagers struggling with quality control. MORE

PortSwigger is collecting nominations for the top 10 web hacking techniques of 2025. The community-driven project aims to surface valuable techniques that can be applied across different systems, with voting starting January 14th and final results published February 3rd. MORE

GreyNoise detected 30,165 malicious sessions from 64 IPs exploiting AI infrastructure and React apps using out-of-band attack techniques. Three major campaigns targeted MCP servers, React2Shell vulnerabilities, and multi-vector scanning from bulletproof hosting providers. MORE

AI models are becoming commoditized as performance gaps shrink and costs plummet, shifting competition to app integration and workflows over raw power. The biggest 2026 trend: AI workflows will dominate over autonomous agents, while advertising comes to chatbots and physical robots expand beyond warehouses. MORE

Tech blogger Tynan switched from BMW to Tesla after experiencing Full Self Driving version 12+, calling it a transformative leap from traditional cars. The FSD technology now drives cross-country trips with zero intervention, automatically navigating parking lots, highways, and even backing into charging stations. MORE

Sam Bowman highlights his top 10 favorite Works in Progress essays from 2025, covering fascinating topics from Chinese urban planning and antibody manufacturing to France's nuclear success and competition policy. The collection spans urban development, biotech breakthroughs, historical trade networks, and regulatory innovations that offer practical insights for today's challenges. MORE

Warren Buffett, the world's most successful investor, is retiring at 95 after building a $125+ billion fortune through patient value investing and compound returns. His legendary career demonstrates how disciplined long-term thinking, focusing on quality businesses, and staying within your "circle of competence" can create extraordinary wealth over decades. MORE

Training the Idea Muscle. Riley Walz turned viral internet pranks into a career by following one simple rule: never reject your own ideas. From tracking SF parking cops to creating fake restaurants, he proves that consistently acting on wild ideas - no matter how silly - trains your brain to generate better ones over time. MORE

The creator of Inkdrop argues that complex note-taking systems like Zettelkasten are overkill for developers and creators who need quick insights, not rigid knowledge networks. His approach: write everything down to free your mind, then take walks to let your subconscious connect ideas organically. MORE

Michelin-starred chef Curtis Stone shares 67 essential kitchen techniques, from proper knife skills and onion cutting to steak cooking and ingredient storage. This comprehensive guide covers everything from basic knife cuts to advanced techniques like truffle storage and live-fire cooking methods. MORE

Attention spans are at an all-time low due to constant digital distractions, but you can rebuild yours with five science-backed steps. Start by setting a baseline reading time, eliminate phone notifications, create focus rituals, take regular breaks, and connect your work to meaningful purpose. MORE

Google now requires websites to have a robots.txt file or it won't crawl and index your site at all, causing complete disappearance from search results. One developer lost all Google traffic overnight when their site lacked this previously optional file. MORE

Hidden Rollup Formula In Obsidian Bases. A demonstration of a real-world coaching business setup that calculates balances, tracks payments, and manages participant data through clever formula combinations that reference file backlinks and properties. MORE

A developer runs six Claude AI coding agents simultaneously from just their phone using a cloud VM, Termius SSH client, and push notifications. The setup costs only $0.29/hour and enables async development from anywhere—start a coding task, get notified when the AI needs input, respond, and repeat. MORE

YouTuber Bread breaks down their 2026 goals across content creation, music production, and personal habits, sharing specific strategies for consistent uploads, album completion, and better work-life balance. They emphasize tailoring goal-setting to personal strengths and weaknesses rather than following generic advice. MORE

Ness Labs founder Anne-Laure Le Cunff shares six thought-provoking questions designed to shift your 2026 focus from self-optimization to self-discovery. The free questionnaire encourages embracing curiosity over perfection through tiny experiments and meaningful conversations. MORE

Kevin Kelly reflects on a lifetime of depending on strangers' kindness while hitchhiking and traveling, discovering that generosity flows when we're open to receiving help. He argues that accepting gifts from others requires humility and that our very existence is an unearned miracle we should embrace with gratitude. MORE

Publishing your work publicly increases your "luck surface area" - the more you build and share, the more opportunities find you. This simple formula of [Doing Things] × [Telling People] can lead to unexpected career breaks, speaking gigs, new clients, and valuable connections in tech. MORE

Friction by design argues that removing all friction from digital design isn't always good - sometimes we need intentional pauses to make users think before acting. Examples like Chrome's hold-to-quit and email undo delays show how smart friction prevents mistakes and encourages mindful interactions over mindless speed. MORE

Security engineer Farah walks through finding a CSRF vulnerability in Django code, discovering that a simple @csrf_exempt decorator disabled all CSRF protections across booking functions. The walkthrough emphasizes how overlooking small details like decorators can lead to major security flaws in production applications. MORE

A Deep And Very Technical Analysis of CVE-2025-55182 (React2Shell). The exploit chain abuses React's Flight Protocol serialization to achieve prototype pollution and execute arbitrary code on vulnerable servers. MORE

Researchers discovered multiple ORM vulnerabilities that let attackers bypass security protections and leak sensitive data like passwords from popular frameworks including Beego, Prisma, and Entity Framework. The flaws affect applications with robust filtering features, showing that even "secure" ORMs can be exploited when developers don't properly validate which database fields should be searchable. MORE

iOS Voice Memos to Obsidian with Claude Code. Drew built an automated system that transcribes iOS voice memos using Gemini AI and automatically adds them to his Obsidian notes with tags and summaries. The setup uses macOS Folder Actions to monitor the hidden Voice Memos sync folder and processes new recordings through a pipeline that converts audio, transcribes with AI, extracts metadata, and updates daily notes. MORE

Email encryption remains fundamentally broken in 2026, with recent vulnerabilities in PGP software highlighting why cryptographers have largely abandoned efforts to secure email. The core problem isn't technical but political - email's oligopoly structure, massive metadata leakage, and accidental plaintext replies make encrypted email a doomed effort that can't compete with purpose-built secure messaging apps like Signal. MORE