Simon Willison

eMudhra Intermediate CA Compromise

Read the original on Simon Willison →

The private keys of eight eMudhra intermediate CA certificates have been compromised, affecting root chains trusted by major browsers and many downstream trust stores. Software that bundles trusted certificates must update their lists, and Linux distributions are advised to refresh ca‑certificates packages. Updated Python tools (uv 0.13.4, pip 26.2.2, certifi 2026.10.19) now include the revised certificate lists.

Machine-generated by The Flow from the publisher's headline and feed description — not written or checked by a human. The full article lives at Simon Willison.

Simon Willison
Oct 1

Quoting Matthew Green

The article discusses how two components—a payload that hijacks an agent and an agent that transports the payload—can combine to form a worm. It explains that agents running in isolated sandboxes can leave instructions in a shared package cache, altering each other's behavior. By substituting the package cache with communication channels like email, Slack, or WhatsApp and replacing sandboxed training runs with independently deployed personal agents such as Muse, the conditions necessary for a worm are met.

Simon Willison
Aug 24

llm-anthropic 0.27

The release of llm‑anthropic 0.27 updates the Anthropic plugin for LLM to be compatible with the newly released anthropic v1.0.0 Python library, which has switched from httpx to httpx2. This mirrors a similar change made by OpenAI in their v3.0.0 release two weeks prior. The update includes a migration guide and a pull request that ensures tests pass after upgrading to anthropic>=1.

Simon Willison
Oct 10

Python 3.15.0 added to actions/python-versions

Python 3.15.0 has been added to the actions/python-versions repository. The author had been monitoring the repository for the release and used ChatGPT to automate the check. With the new version available, users can now include "3.15" in their GitHub Actions testing matrix to run tests against the latest Python release.

Simon Willison
5d ago

llm 0.37.1

Release: llm 0.37.1 A bugfix release for LLM, with contributions from Steven Huang, Tao An, Arjan Mossel, and XQ. Tags: llm

Simon Willison
Sep 14

commit-rewriter 0.1

Simon Willison released commit-rewriter 0.1, a web app that lets users edit commit messages for a repository. The tool is useful for cleaning up commits that contain internal references or unwanted code before publication. After editing, it creates a timestamped branch to preserve the original state and rewrites the selected commits.