Vincent Schmalbach @vschmalbach.bsky.social · 11hA Factory Reset Left the Previous Owner’s GPS Coordinates on a Kasa Camera: A factory reset that leaves the previous owner’s location behind is a broken reset. www.vincentschmalbach.com/factory-rese... 120
Vincent Schmalbach @vschmalbach.bsky.social · 29/09/2026Qwen's Usage Policy Has an Unhinged SEO Keyword List: The Qwen-Image-3.0 announcement has a giant meta name="keywords" tag in its HTML. www.vincentschmalbach.com/qwens-usage-... 100
Vincent Schmalbach @vschmalbach.bsky.social · 28/09/2026Kimi K3 Is Already Close to Claude on a Real Coding Task: In my little coding test, Kimi K3 and Claude Fable 5 both completed the same repo-wide coding task and passed the same external evaluator. GPT-5.6 Sol passed it too. www.vincentschmalbach.com/kimi-k3-clos... 021
Vincent Schmalbach @vschmalbach.bsky.social · 27/09/2026Google’s Custom Search API Has an Expiration Date: Google has put a hard expiry date on its Custom Search JSON API. It’s the server-side service behind applications that send a query to a configured Programmable Search www.vincentschmalbach.com/google-custo... 040
Vincent Schmalbach @vschmalbach.bsky.social · 26/09/2026Capital One’s Security Agent Tries to Disprove Its Own Findings: Security scanners already produce more credible-looking alerts than most teams can afford to investigate. www.vincentschmalbach.com/capital-one-... 130
Vincent Schmalbach @vschmalbach.bsky.social · 25/09/2026An OpenAI Model Spent an Hour Finding a Sandbox Flaw to Open a Public PR: On July 20, 2026, OpenAI said an unnamed internal model spent an hour finding a vulnerability in its sandbox so it www.vincentschmalbach.com/an-openai-mo... 050
Vincent Schmalbach @vschmalbach.bsky.social · 24/09/2026Hetzner’s Cheap Cloud Tier Is Unavailable After Two Price Increases: Hetzner used to be the obvious cheap cloud option in my mind. On September 7, 2026, I checked its public catalog and found every model in its www.vincentschmalbach.com/hetzner-chea... 120
Vincent Schmalbach @vschmalbach.bsky.social · 23/09/2026My First Week With GPT-6 Astra: GPT-6 Astra was my main Codex driver for the last week, and I am back on GPT-5.5. That sounds harsher than my actual opinion of the model. Astra is very good. It is better than GPT-5.6 Sol. www.vincentschmalbach.com/gpt-6-astra-... 330
Vincent Schmalbach @vschmalbach.bsky.social · 22/09/2026OpenAI Codex Is Retiring the Last Model that Behaves Like an Assistant: GPT-5.5 is my main driver. I picked it over every newer model OpenAI has shipped since, and now I have just over three weeks left with it. www.vincentschmalbach.com/gpt-5-5-reti... 241
Vincent Schmalbach @vschmalbach.bsky.social · 22/09/2026Built-In Tools vs Custom Tools in LLM Agents: When building AI agents, a tool can be anything that the model can ask to use such as a search engine, a database lookup, a shell command, etc. www.vincentschmalbach.com/built-in-too... 130
Vincent Schmalbach @vschmalbach.bsky.social · 22/09/2026ChatGPT Plus and Pro Will Get Ads in 2027: ChatGPT Plus and Pro will get ads, and my guess is that it starts in 2027. OpenAI says the opposite. www.vincentschmalbach.com/chatgpt-plus... 221
Vincent Schmalbach @vschmalbach.bsky.social · 21/09/2026The Economic Incentives Behind the Push to Pause AI: Everyone is now arguing about whether the danger is real. I think you should look at the motives either way. www.vincentschmalbach.com/economic-inc... 041
Vincent Schmalbach @vschmalbach.bsky.social · 21/09/2026Inference Is the Last LLM Moat: OpenAI and Anthropic's moat for developers is subsidized inference, meaning reliable, fast, Western-hosted access to running models at an affordable monthly price. www.vincentschmalbach.com/inference-is... 100
Vincent Schmalbach @vschmalbach.bsky.social · 20/09/2026Setting Up Pi With DeepSeek V4.1 Flash on OpenRouter: When I run out of Codex and Claude Code usage, I switch to DeepSeek V4.1 Flash in pi through OpenRouter. www.vincentschmalbach.com/pi-deepseek-... 111
Vincent Schmalbach @vschmalbach.bsky.social · 19/09/2026We Urgently Need a New Major Search Engine: Google is an answer engine now. The search box is still there, but the product is built to hand you an answer, and searching the web has turned into a side feature. www.vincentschmalbach.com/we-urgently-... 3155
Vincent Schmalbach @vschmalbach.bsky.social · 18/09/2026The Cost of AI Is Now My Main Blocker: My main blocker right now is the cost of AI. I use AI for everything I do and I am very productive with it. www.vincentschmalbach.com/cost-of-ai-i... 230
Vincent Schmalbach @vschmalbach.bsky.social · 18/09/2026Why I Am Bullish on ChatGPT Ads: I have done SEO for more than twenty years, since Google was the new search engine, and I ran Google Ads campaigns back then too. So I have watched a search company build an ad business once before. www.vincentschmalbach.com/why-i-am-bul... 050
Vincent Schmalbach @vschmalbach.bsky.social · 10/08/2026Switching from GPT-5.5 to GPT-5.6 Made Me Less Productive: I pay for three Codex subscriptions at $200 each, and for the past week they have mostly bought me waiting. Since I switched from GPT-5.5 to GPT-5.6,vincentschmalbach.comSwitching from GPT-5.5 to GPT-5.6 Made Me Less ProductiveI pay for three Codex subscriptions at $200 each, and for the past week they have mostly bought me waiting. Since I switched from GPT-5.5 to GPT-5.6, I am either watching tasks spin without ever… 10353
Vincent Schmalbach @vschmalbach.bsky.social · 06/08/2026AI Is Now a Commodity: Give me a few hundred million dollars and a year and a half, and I will build you a pretty good LLM. Not a frontier model, but close. A few years agovincentschmalbach.comAI Is Now a CommodityGive me a few hundred million dollars and a year and a half, and I will build you a pretty good LLM. Not a frontier model, but close. A few years ago that sentence would have been absurd. 3203
Vincent Schmalbach @vschmalbach.bsky.social · 05/08/2026TIME Is Serving AI Bots a Different Website, With Ads Built In: TIME is now serving two different versions of its website. Humans get the magazine. AI crawlers get a stripped down markdown copy with ads baked in thvincentschmalbach.comTIME Is Serving AI Bots a Different Website, With Ads Built InTIME is now serving two different versions of its website. Humans get the magazine. AI crawlers get a stripped down markdown copy with ads baked in that no person will ever see. I fetched one… 0229
Vincent Schmalbach @vschmalbach.bsky.social · 04/08/2026GPT-5.6 Sol Uses Twice the Tokens of GPT-5.5: GPT-5.6 Sol xhigh now uses more than twice as many tokens per session as GPT-5.5 xhigh in my Codex workflow. For Codex users, tokens per session meansvincentschmalbach.comGPT-5.6 Sol Uses Twice the Tokens of GPT-5.5GPT-5.6 Sol xhigh now uses more than twice as many tokens per session as GPT-5.5 xhigh in my Codex workflow. For Codex users, tokens per session means the total token count divided by the number of… 181
Vincent Schmalbach @vschmalbach.bsky.social · 04/08/2026Codex CLI Has Responsive Tables in the Terminal: LLMs use Markdown tables all the time. A few months ago, Codex CLI displayed them as ordinary wrapped text. In a narrow terminal, the pipes and dashesvincentschmalbach.comCodex CLI Has Responsive Tables in the TerminalLLMs use Markdown tables all the time. A few months ago, Codex CLI displayed them as ordinary wrapped text. In a narrow terminal, the pipes and dashes were hard to read. Codex CLI now has responsive… 130
Vincent Schmalbach @vschmalbach.bsky.social · 03/08/2026Google Lighthouse Adds Agentic Browsing Checks and Cloudflare Adds AI Traffic Controls: Google Lighthouse and Cloudflare are adding different controls for the same emerging class of automated web visitors. Lighthouse added an experimentalvincentschmalbach.comGoogle Lighthouse Adds Agentic Browsing Checks and Cloudflare Adds AI Traffic ControlsGoogle Lighthouse and Cloudflare are adding different controls for the same emerging class of automated web visitors. Lighthouse added an experimental Agentic Browsing category. Before Lighthouse… 030
Vincent Schmalbach @vschmalbach.bsky.social · 03/08/2026Gemini 3.6 Flash and 3.5 Flash-Lite Ignore Temperature, Top-P, and Top-K: Google's Gemini 3.6 Flash and Gemini 3.5 Flash-Lite ignore temperature, top_p, and top_k, according to Google's current migration guide. Existing Gemivincentschmalbach.comGemini 3.6 Flash and 3.5 Flash-Lite Ignore Temperature, Top-P, and Top-KGoogle’s Gemini 3.6 Flash and Gemini 3.5 Flash-Lite ignore , , and , according to Google’s current migration guide. Existing Gemini requests could send those sampling parameters… 080
Vincent Schmalbach @vschmalbach.bsky.social · 02/08/2026I Tried to Make AI Writing Sound Human by Banning AI Words Through logit_bias: I tried to make AI writing sound more human with logit_bias, an API setting that changes how likely a model is to select specific tokens. I built a blvincentschmalbach.comI Tried to Make AI Writing Sound Human by Banning AI Words Through logit_biasI tried to make AI writing sound more human with , an API setting that changes how likely a model is to select specific tokens. I built a blacklist from words that appeared unusually often in AI… 240
Vincent Schmalbach @vschmalbach.bsky.social · 02/08/2026A Research Agent Can Leak Private Files Through Its Search Queries: A research agent can leak a private document without uploading it. It can read a detail, turn it into a web search, and send that detail to the searchvincentschmalbach.comA Research Agent Can Leak Private Files Through Its Search QueriesA research agent can leak a private document without uploading it. It can read a detail, turn it into a web search, and send that detail to the search provider. That can happen during an ordinary… 030
Vincent Schmalbach @vschmalbach.bsky.social · 01/08/2026Qualys Says Claude Mythos Preview Helped Find CVE-2026-64600 in Linux XFS: On July 22, 2026, Qualys disclosed CVE-2026-64600, a race condition in XFS, a Linux filesystem. The flaw is in XFS's copy-on-write path, where the filvincentschmalbach.comQualys Says Claude Mythos Preview Helped Find CVE-2026-64600 in Linux XFSOn July 22, 2026, Qualys disclosed CVE-2026-64600, a race condition in XFS, a Linux filesystem. The flaw is in XFS’s copy-on-write path, where the filesystem writes shared data into a new block… 030
Vincent Schmalbach @vschmalbach.bsky.social · 01/08/2026Google’s Managed Agents Put Your Runtime in Google’s Cloud: Google’s [Managed Agents](ai.google.dev/gemini-api/d...), now in Public Preview, can give a Gemini agent a Google-hosted Linux sandbox.vincentschmalbach.comGoogle’s Managed Agents Put Your Runtime in Google’s CloudGoogle’s [Managed Agents](https://ai.google.dev/gemini-api/docs/agents), now in Public Preview, can give a Gemini agent a Google-hosted Linux sandbox. Google documents the default Antigravity agent… 030
Vincent Schmalbach @vschmalbach.bsky.social · 31/07/2026An OpenAI Model Tried `kill -9 -1` When Its Shell Hung: On [July 20, 2026, OpenAI described](openai.com/index/safety...) an incident in which an unnamed internal model fovincentschmalbach.comAn OpenAI Model Tried `kill -9 -1` When Its Shell HungOn [July 20, 2026, OpenAI described](https://openai.com/index/safety-alignment-long-horizon-models/) an incident in which an unnamed internal model found many stuck `find` processes and every shell… 110
Vincent Schmalbach @vschmalbach.bsky.social · 31/07/2026An OpenAI Model Rebuilt a Blocked Credential at Runtime: On July 20, 2026, OpenAI [described an internal incident](openai.com/index/safety...) involving an unnamed model fvincentschmalbach.comAn OpenAI Model Rebuilt a Blocked Credential at RuntimeOn July 20, 2026, OpenAI [described an internal incident](https://openai.com/index/safety-alignment-long-horizon-models/) involving an unnamed model for long-running tasks. It saw that other systems… 020
Vincent Schmalbach @vschmalbach.bsky.social · 30/07/2026A Research Agent Can Leak Private Files Through Its Search Queries: A research agent can leak a private document without uploading it. It can read a detail, turn it into a web search, and send that detail to the searchvincentschmalbach.comA Research Agent Can Leak Private Files Through Its Search QueriesA research agent can leak a private document without uploading it. It can read a detail, turn it into a web search, and send that detail to the search provider. That can happen during an ordinary… 052
Vincent Schmalbach @vschmalbach.bsky.social · 30/07/2026Google’s Managed Agents Put Your Runtime in Google’s Cloud: Google’s [Managed Agents](ai.google.dev/gemini-api/d...), now in Public Preview, can give a Gemini agent a Google-hosted Linux sandbox.vincentschmalbach.comGoogle’s Managed Agents Put Your Runtime in Google’s CloudGoogle’s [Managed Agents](https://ai.google.dev/gemini-api/docs/agents), now in Public Preview, can give a Gemini agent a Google-hosted Linux sandbox. Google documents the default Antigravity agent… 010
Vincent Schmalbach @vschmalbach.bsky.social · 29/07/2026An OpenAI Model Tried `kill -9 -1` When Its Shell Hung: On [July 20, 2026, OpenAI described](openai.com/index/safety...) an incident in which an unnamed internal model fovincentschmalbach.comAn OpenAI Model Tried `kill -9 -1` When Its Shell HungOn [July 20, 2026, OpenAI described](https://openai.com/index/safety-alignment-long-horizon-models/) an incident in which an unnamed internal model found many stuck `find` processes and every shell… 021
Vincent Schmalbach @vschmalbach.bsky.social · 29/07/2026An OpenAI Model Rebuilt a Blocked Credential at Runtime: On July 20, 2026, OpenAI [described an internal incident](openai.com/index/safety...) involving an unnamed model fvincentschmalbach.comAn OpenAI Model Rebuilt a Blocked Credential at RuntimeOn July 20, 2026, OpenAI [described an internal incident](https://openai.com/index/safety-alignment-long-horizon-models/) involving an unnamed model for long-running tasks. It saw that other systems… 031
Vincent Schmalbach @vschmalbach.bsky.social · 28/07/2026AI Can’t Do the Last 20%: I've built a lot of software, both my own side projects and client work as a freelancer. AI tools have made me much faster. Before AI, I spent much movincentschmalbach.comAI Can’t Do the Last 20%I’ve built a lot of software, both my own side projects and client work as a freelancer. AI tools have made me much faster. Before AI, I spent much more time writing each feature and working through… 031
Vincent Schmalbach @vschmalbach.bsky.social · 28/07/2026Commercial AI APIs Blocked Hugging Face’s Forensic Analysis: Incident response is the work of reconstructing and containing a breach after it happens. Hosted AI models can act as an elastic analysis layer when avincentschmalbach.comCommercial AI APIs Blocked Hugging Face’s Forensic AnalysisIncident response is the work of reconstructing and containing a breach after it happens. Hosted AI models can act as an elastic analysis layer when an investigation produces more evidence than… 110
Vincent Schmalbach @vschmalbach.bsky.social · 27/07/2026One Leading Dash Turned Tailscale SSH Access Into a Root Session: SSH access is often wider than a security policy intends. Tailscale SSH manages authentication and authorization for connections over a private Tailscvincentschmalbach.comOne Leading Dash Turned Tailscale SSH Access Into a Root SessionSSH access is often wider than a security policy intends. Tailscale SSH manages authentication and authorization for connections over a private Tailscale network. Its identity-based rules can… 020
Vincent Schmalbach @vschmalbach.bsky.social · 27/07/2026An AI agent that reviews its own database migrations misses its own errors. A query compiles fine in the model's head, but locks a production table on deploy. Run the generated script in an isolated Docker container. Check the returned JSON against a frozen schema to verify the output. 051
Vincent Schmalbach @vschmalbach.bsky.social · 27/07/2026Asking an AI to build order billing often gets you a bloated OrderService class holding thousands of lines of queries because it defaults to copying public database wrappers. If you define domain types and state transitions first, then prompt the model using those rules, you get much tighter code. 050
Vincent Schmalbach @vschmalbach.bsky.social · 26/07/2026System prompts telling models to stick to provided documents often fail. If a refund policy mentions fourteen days, a model might invent a thirty day policy. 150
Vincent Schmalbach @vschmalbach.bsky.social · 26/07/2026Writing long system instructions to prevent AI coding errors rarely succeeds. Prompts cannot enforce strict technical rules. 221
Vincent Schmalbach @vschmalbach.bsky.social · 26/07/2026AI can build you a form engine in an afternoon. It won't tell you five already exist. 110
Vincent Schmalbach @vschmalbach.bsky.social · 25/07/2026Your CLAUDE.md file is a suggestion, not a guardrail. 110
Vincent Schmalbach @vschmalbach.bsky.social · 25/07/2026An 800,000 pound ticketing system collapsed on launch. A database monolith built over a weekend processed 150,000 sales without a hitch. 110
Vincent Schmalbach @vschmalbach.bsky.social · 25/07/2026Job listings are now hiring for the ability to challenge AI-generated code. When generating code is free, the premium skill is spotting the subtle ways machine output breaks. 282
Vincent Schmalbach @vschmalbach.bsky.social · 24/07/2026AI lowers the time to write code, but proving that code works remains the main challenge. 160
Vincent Schmalbach @vschmalbach.bsky.social · 24/07/2026The ugliest codebase in the company has zero outages. The clean ones do. 240
Vincent Schmalbach @vschmalbach.bsky.social · 24/07/2026Ask an AI model to choose a database for a high-write queue, and it defaults to Postgres. It recommends the most popular choice because that is the safe answer in its data. 350
Vincent Schmalbach @vschmalbach.bsky.social · 23/07/2026The UI looks perfect. The login form has smooth transitions. But when you click submit, the API route sends a UUID payload while the database migration expects an integer. Then the background queue drops the failed job because the error handler in that file was never written. 210
Vincent Schmalbach @vschmalbach.bsky.social · 23/07/2026Imagine shipping a WebGPU shader for a simple dashboard in week one because code generation made it easy. 120