Sign in

michael h keller

@mhkeller.bsky.social
1.5K followers 396 following 116 posts

nytimes reporter | tech, special projects | mhkeller@{nytimes,protonmail}.com, github/mhkeller | adjunct at CUJ | mhkeller.01 on Signal

PostsRepliesMedia
Reposted by michael h keller
Gillian Brockell @gillianbrockell.com · 06/10/2026
I LOVE how @propublica.org dealt with official comment here, editorially and stylistically.
The Trump administration says none of this is happening. 

"DHS is NOT arresting U.S. citizens by mistake." "There are no 'indiscriminate' stops." Allegations of "racial profiling are disgusting, reckless and categorically FALSE." "The pattern is NOT of law enforcement using force." "ICE does not zip tie or restrain children." 

But that is precisely what is happening, and at a far larger scale than previously reported.
1335731331
michael h keller @mhkeller.bsky.social · 02/10/2026
Excited to have snagged the new edition of @lifewinning.com’s “Network’s of New York”. Finally will be able to decode all the sidewalk markings we got in the neighborhood
050
Reposted by michael h keller
Karl Bode @karlbode.com · 29/09/2026
Meta's "Muse" launched with a nasty zero day flaw that gave hackers the ability to spy on Mac users, openly gives root access to people pretending to be Muse agents, and invited strangers over to another guy's house without telling him
karlbode.com
Meta's Latest AI Product Is A Terrifying And Hilarious Mess
Authoritarian-friendly mass surveillance has never been more adorable
522123853
michael h keller @mhkeller.bsky.social · 30/09/2026
done
1250
Reposted by michael h keller
LayerCake @layercake.graphics · 18/09/2026
For the first time in years, LayerCake's Issue and PR count were at zero. The streak broke today w this new idea. Thinking about how to raise the performance ceiling and support more exotic data formats w/o making the user do syntactical acrobatics. Thoughts welcome! github.com/mhkeller/lay...
github.com
Support for arrow data via flechette · Issue #436 · mhkeller/layercake
LayerCake is pretty tied to the idea that your data is an array of objects (or a POJO in the form of a GeoJSON Feature Collection). But it would be nice if you could pass a Flechette Table, loaded ...
111
michael h keller @mhkeller.bsky.social · 18/09/2026
Other slices of the write-up: heif-heist.com www.wsj.com/tech/ai/hack...
heif-heist.com
HEIF Heist
One image parser to pwn them all. Hacktron research into remote exploitation through production HEIF, HEIC, and AVIF image pipelines.
010
michael h keller @mhkeller.bsky.social · 18/09/2026
The most surprising thing about the researchers who used Claude to break into OpenAI – creating a pull request on their monorepo – is that they only got $6,500 for the bug bounty. www.hacktron.ai/blog/hacking...
hacktron.ai
Hacking OpenAI
A heap overflow and SSO misconfiguration to compromise OpenAI internal repositories
100
michael h keller @mhkeller.bsky.social · 16/09/2026
you got something everybody wants. you have a niche.
000
Reposted by michael h keller
Emily Bell @emilybell.bsky.social · 16/09/2026
The tech industry’s self-regulatory effort currently runs to the following: the (Meta) Oversight Board - an ineffectual, opaque body which performs ‘independence’ whilst refusing to disclose financial details, and operating under NDAs .
14111
Reposted by michael h keller
Ryan Mac 🙃 @rmac.bsky.social · 12/09/2026
Child sex abuse material, some created by Grok, continues to spread on X. An incredibly disturbing read. www.nytimes.com/2026/09/11/t...
18500183
michael h keller @mhkeller.bsky.social · 12/09/2026
Another one: www.rubyhack.ai
rubyhack.ai
OpenAI agents carried out an undisclosed cyber-attack on RubyGems
On May 11th, 2026, hundreds of malicious packages were uploaded to RubyGems by AI agents performing web-lookup tasks with significant overlap with the German Wiki Incident.
021
Reposted by michael h keller
kate conger @kateconger.com · 11/09/2026
When we presented our findings to child safety experts, they were shocked that we were persistently finding NCMEC images. Even though X said it reported 1.3 million images to NCMEC this year, some were clearly slipping through — X did not answer specific questions about how it blocks abuse material.
146260
Reposted by michael h keller
kate conger @kateconger.com · 11/09/2026
We spoke to several women, now adults, after finding images of their abuse on X. One said the abuse was like a rock tossed into a pond, and the spread of the images are ripples that continue to disrupt her life. Here is how another woman described X's role:
The person depicted in the image, now an adult, said in an interview that she believed X profited from her abuse and further victimized her by not stopping the image from being shared.

“They’re getting benefits from my abuse, and it just feels like it’s never going to stop,” the woman said of X. She spoke on the condition of anonymity because she has been stalked by people who viewed images of her abuse online. “I get angry that I’m still having to go through this decades later, and that there doesn’t seem to be real-life consequences for people.”
2574115
michael h keller @mhkeller.bsky.social · 11/09/2026
Latest story from me and @kateconger.com, a reminder that even as AI creates new avenues for CSAM creation/distribution, X struggles with the "solved problem" of removing known, previously flagged, illegal images from its platform
05922
Reposted by michael h keller
kate conger @kateconger.com · 11/09/2026
Over six months, we tracked the appearance of child sexual abuse material on X. We found images from the National Center for Missing and Exploited Children's database, which is considered one of the most highly vetted and which many tech companies block on upload. www.nytimes.com/2026/09/11/t...
nytimes.com
Elon Musk Has Pledged to Rid His Platform, X, of Child Sexual Abuse, but It Persists
Reviews by the Canadian Center for Child Protection and The New York Times found that explicit images of children remain on the social media site owned by Elon Musk.
122068929
michael h keller @mhkeller.bsky.social · 10/09/2026
What would you put in the box?
100
michael h keller @mhkeller.bsky.social · 10/09/2026
From now on, when someone asks "How does XYZ computer thing work?" I'll just respond with this helpful diagram Anthropic made
2266
michael h keller @mhkeller.bsky.social · 09/09/2026
This write-up feels like one of the first substantive examples of AI doing OSINT reporting (Swarm Reporting? Agent Reporting?). Following PDNS pivots seems like another use case: www.kennethdegraff.com/swarm
kennethdegraff.com
OpenAI's Robots Got Into a Closed Link Shortener, Surfed the Web With Google Docs, Then Called the FBI With a Stranger's Key
A swarm of OpenAI agents made at least 170 short links on Vanderbilt University's closed link shortener, wrote 495 FBI Crime Data Explorer addresses into its public logs, and used three API keys, one ...
000
michael h keller @mhkeller.bsky.social · 09/09/2026
Also put up some new examples that I've wanted to do for a while such as diverging bar and column charts.
010
michael h keller @mhkeller.bsky.social · 08/09/2026
If you need any of the old-style components, the old docs are archived here mhkeller.github.io/layercake-v10/
110
michael h keller @mhkeller.bsky.social · 08/09/2026
There are more details with some migration examples in the CHANGELOG: github.com/mhkeller/lay... But, as before, the website – layercake.graphics – is probably the easiest spot to see examples. Click "edit" on any of them to be taken directly to a live version online.
100
michael h keller @mhkeller.bsky.social · 08/09/2026
Thanks to @techniq.dev's tips, <canvas> has also gotten a big upgrade. Components handle fewer lifecycle events by using the new canvas context and it's new `.draw` method. More details in the Canvas guide: layercake.graphics/guide#canvas
131
michael h keller @mhkeller.bsky.social · 08/09/2026
There are also now built-in x2 and y2 scales so you can more easily do grouped bar / column charts: layercake.graphics/example/Colu...
110
michael h keller @mhkeller.bsky.social · 08/09/2026
Before there were x, y, z and r scales. z was mostly used for color but was kind of confusing. Now there is a c scale, which is a bit more intuitive. There's also a c2 scale for a second appearance channel, like opacity. Docs: layercake.graphics/guide#c
110
michael h keller @mhkeller.bsky.social · 08/09/2026
There are a bunch of internal improvements but the main user-facing one is how you get props from a component. Instead of destructuring from `getContext` directly, grab the context settings via the new `getLayerCakeContext()`. Here's a side-by-side using an Area chart component.
110
michael h keller @mhkeller.bsky.social · 08/09/2026
Some @layercake.graphics news: with @openclimatedata.net's help and @techniq.dev's insights, v11 of the library is out and has fully converted into runes instead of the @svelte.dev Store API. tldr; many fewer dollar-signs!
1279
Reposted by michael h keller
David Zipper @davidzipper.bsky.social · 05/09/2026
Full-sized SUVs are pedestrian killers. New research finds that they're more than twice as likely to kill or seriously injure a pedestrian than other cars. (Notably, vehicle height—not weight—was the biggest risk factor.) doi.org/10.1016/j.js...
17549227
Reposted by michael h keller
Yonah Freemark @yonahfreemark.com · 01/09/2026
New York’s congestion pricing program has resulted in a statistically significant reduction in travel times for EMS vehicles
nber.org
Urban Congestion Pricing and the Response Times of Emergency Medical Services
61089297
Reposted by michael h keller
Tow Center for Digital Journalism @towcenter.bsky.social · 27/08/2026
We found Polymarket's AI-generated news summaries are full of errors, from misrepresentations and misattribution of news to outright fabricated references to nonexistent news stories. By @tlysik.bsky.social www.cjr.org/tow_center/p...
cjr.org
Polymarket calls itself News 2.0. Its AI is feeding users fabrications.
The prediction market fancies itself a “global truth machine” and a boon to journalism. Tow finds a very different reality.
036
michael h keller @mhkeller.bsky.social · 19/08/2026
Re-reading the Msft taxonomy on model failures. This one on parasocial relationships is undervalued screenplay material: Lonely accountant becomes romantically involved with the internal AI finance agent. The two execute a heist. Drive off into the sunset. Bonnie and Claude.
0113
Reposted by michael h keller
Eric Umansky @ericumansky.bsky.social · 15/08/2026
Btw, as we reported last year, foreign food inspections have plummeted under Trump. The office that handles travel shrunk by 65% “There are going to be things that fall through the cracks,” an FDA inspections told @anniewaldman.bsky.social www.propublica.org/article/fore...
33525
michael h keller @mhkeller.bsky.social · 14/08/2026
But way back in 2019, people were already telling me about homomorphic encryption as a way to perform computation over encrypted data. If Google shows it's possible in the AI space, it'll be interesting to see what kinds of knock-on effects it might have for policy and other domains. 2/2
020
michael h keller @mhkeller.bsky.social · 14/08/2026
Google announces that they can train AIs on sensitive data using homomorphic encryption. Really interesting how this might relate to current debates around requiring companies to scan for CSAM, which people have argued could make encryption legally problematic. 1/2 blog.google/security/how...
blog.google
How Google is Making Private AI Practical with Homomorphic Encryption
Today we're excited to showcase HEIR, the latest powerful tool added to our Private Computing Toolkit. HEIR is an open source compiler that unlocks cryptographically-sec…
140
michael h keller @mhkeller.bsky.social · 11/08/2026
The change should result in it being faster and also lighter weight, along with some nice upgrades to scale generation that will make grouped bar/column charts easier.
020
michael h keller @mhkeller.bsky.social · 11/08/2026
For anyone using LayerCake, I'm in the process of doing an update to using Svelte 5 runes internally (the example components were updated last year but some internals remained). Here's the PR for any thoughts you might have on the proposed design: github.com/mhkeller/lay...
github.com
Rune migration: Rework main lib with dynamic dimension calculations by mhkeller · Pull Request #422 · mhkeller/layercake
Builds off of #331 A few things it does: Gets rid of stores in favor of the cake. syntax. Assembles scales dynamically for each dimension (x, y, z, r). Adds two new dimensions c and c2 which will ...
264
Reposted by michael h keller
Gabe Ortíz @tusk81.bsky.social · 11/08/2026
One US military service member said recruiters attracted him by telling him about possible immigration benefits for enlistees’ families. But last August, his mom was detained and deported. She had no criminal record and had lived here for decades: americasvoicecnn.substack.com/p/ice-dishon...
americasvoicecnn.substack.com
ICE Dishonors Veterans and America: Relentless Detention and Deportation of U.S. Military Spouses and Family Members
“[Recruiters] basically told me that if you serve, and if you served honorably, you can help your parents,” said one service member. His mom was detained and deported last August.
45834
michael h keller @mhkeller.bsky.social · 10/08/2026
me: seems risky the model:
000
michael h keller @mhkeller.bsky.social · 10/08/2026
global ai development in a nutshell www.youtube.com/watch?v=87Dy...
110
michael h keller @mhkeller.bsky.social · 10/08/2026
Original article link: www.abc.net.au/news/2026-08...
abc.net.au
How a simple request for AI to book a gym class exposed a major threat
When Andrew asked his AI personal assistant to book him a spot in a gym class, he had no idea he would accidentally initiate an autonomous cyber attack.
010
michael h keller @mhkeller.bsky.social · 09/08/2026
www.msn.com/en-au/techno...
100
michael h keller @mhkeller.bsky.social · 09/08/2026
Check in with your models from time to time
010
michael h keller @mhkeller.bsky.social · 06/08/2026
New details shared at Black Hat conf about OpenAI hacks. The models created an internal message board and shared tips with one another www.cybersecuritydive.com/news/openai-...
000
michael h keller @mhkeller.bsky.social · 04/08/2026
030
michael h keller @mhkeller.bsky.social · 04/08/2026
I missed this detail about last week's hack. Claude Mythos published a malicious package to PyPI that, when downloaded and scanned by a security company that analyzes python package for malware, broke out of that company's sandbox and exfiltrated the company's credentials. socket.dev/blog/anthrop...
socket.dev
Claude Breached 3 Companies and Uploaded Malware to PyPI Dur...
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to Py...
276
michael h keller @mhkeller.bsky.social · 03/08/2026
The Red Hook lot with Steve’s Key Lime Pie now has a Scandinavian bakery, a cidery and a “listening bar.” I’m encouraging everyone to now refer to it as “Lime Square.”
020
michael h keller @mhkeller.bsky.social · 01/08/2026
I think he's just taking an originalist reading of the city. I'm sure there will follow-ups about how FiDi and the BK bridge should go back to being car-free
120
Reposted by michael h keller
Nolan Hicks @ndhapple.bsky.social · 01/08/2026
Can't put trash in bins because it'll 'sanitize' the city and cut down on rats is a king ass take, everyone log off and go home, this cannot be beaten
1333862
michael h keller @mhkeller.bsky.social · 29/07/2026
My daily moment of zen is ignoring AI's grammar suggestions. Using too many words is a cornerstone of my humanity.
030
Reposted by michael h keller
David Zipper @davidzipper.bsky.social · 28/07/2026
New GAO report examines how driver blind spots endanger pedestrians and cyclists—and asks why USDOT has done nothing about it. www.gao.gov/products/gao...
627789
michael h keller @mhkeller.bsky.social · 28/07/2026
Great to see @kalibomeli.bsky.social's piece that she started during our Columbia Journalism class out today! Self-dealing, a sweepstakes to nowhere and more www.propublica.org/article/trum...
propublica.org
This MAGA Influencer Runs a Charity to Teach Kids Civics. Much of the Money Goes to Him Instead.
Nick Adams’ Foundation for Liberty and American Greatness has brought in millions in donations and helped him land a State Department appointment, but records show there is almost no indication FLAG w...
020