Simon Willison

Datasette 1.0a39 and 0.65.4 security releases

Read the original on Simon Willison →

Datasette 1.0a39 and 0.65.4 are new security patch releases for the current alpha series and the stable 0.65.x family. The updates address security fixes that are important for public-facing Datasette instances, especially those that mix public and private tables. The patches were developed after an extensive audit using advanced AI models and collaborative review, and the process will be incorporated into future development work.

Machine-generated by The Flow from the publisher's headline and feed description — not written or checked by a human. The full article lives at Simon Willison.

Google AI Blog
Feb 13, 2024

DP-Auditorium: A flexible library for auditing differential privacy

Posted by Mónica Ribero Díaz, Research Scientist, Google Research Differential privacy (DP) is a property of randomized mechanisms that limit the influence of any individual user’s information while processing and analyzing data. DP offers a robust solution to address growing concerns about data protection, enabling technologies across industries and government applications (e.

By Google AI
Simon Willison
Sep 11

datasette 1.0a39

The article announces the release of Datasette version 1.0a39, noting that it includes security updates. It references the Datasette blog for details on the 1.0a39 release and the 0.65.4 security releases. The release is tagged with security and datasette.

Simon Willison
Sep 11

datasette 0.65.4

The article announces the release of Datasette version 0.65.4, noting that it includes security updates. It references the Datasette blog for more details on the 1.0a39 and 0.65.4 security releases. The release is tagged as a security update for the Datasette project.

Simon Willison
6d ago

datasette 1.0a40

The article announces the release of Datasette 1.0a40, which includes a security fix identical to that in version 0.65.5, new features such as the ability for plugins to launch and manage background tasks via the datasette.add_background_task() method, and a migration to httpx2 to support features like datasette.client.get(). The update also contains numerous bug fixes, many of which were addressed during a recent triage effort for the upcoming 1.0 stable release.

Simon Willison
Aug 28

Just a rumour of a bug is enough to find a security exploit these days

The article reports that rumors of bugs in open‑source projects now trigger rapid security exploits, with automated agents probing for vulnerabilities within minutes of a patch being discussed. Anil Madhavapeddy demonstrates how modern coding agents can exploit even minimal hints, and rclone maintainer Nick Craig‑Wood notes a dramatic spike in security disclosures and delayed CVE assignments. The post highlights the need for new processes to protect open‑source communities from swift exploitation.