Tap a claim on the ring to put it at the centre.
← Auto-mode does not yet convincingly fix prompt-injection risk for coding agents.
17 connected korrents · 15 moments from 22 Mar 2025 to 23 Sept 2026.
Everything filed under prompt injection
prompt injection
Everything filed under coding agents
coding agents
Everything filed under Anthropic
Anthropic
Everything filed under design
design
Everything filed under software quality
software quality
Everything filed under developer tools
developer tools Cannot both be true Same subject Same subject Same subject Same subject Same subject Same subject Same subject Same subject Same subject Same subject Same subject Same subject Same subject Same subject Same subject Same subject Read this korrent: Auto-mode does not yet convincingly fix prompt-injection risk for coding agents. Auto-mode does not yet convincingly fix prompt-injection risk for coding agents. Last stated 2 months ago
8 Aug 2026
SW
Simon Willison — holds since 2026-08-08 — tap for who they are
Cannot both be true: For agents built on Claude Fable 5.1, it is in practice safe for now to assume they will not get prompt injected. — tap to centre the map on it For agents built on Claude Fable 5.1, it is in practice safe for now to assume they will not get prompt injected. Last stated a month ago
4 Sept 2026
ZM
Zvi Mowshowitz — holds since 2026-09-04 — tap for who they are
Same subject: Prompt injection can be caught by watching the neurons that fire when it happens, so a defence no longer depends on the model reporting the attack. — tap to centre the map on it Prompt injection can be caught by watching the neurons that fire when it happens, so a defence no longer depends on the model reporting the attack. Last stated 3 months ago
27 Jul 2026
BC
Boris Cherny — holds since 2026-07-27 — tap for who they are
Same subject: Prompt injection has no equivalent of parameterized queries: there is no reliable way to tell a language model which text is data and which is instructions. — tap to centre the map on it Prompt injection has no equivalent of parameterized queries: there is no reliable way to tell a language model which text is data and which is instructions. Last stated 7 months ago
19 Mar 2026
SW
Simon Willison — holds since 2026-03-19 — tap for who they are
Same subject: Prompt injection is an extremely hard attack to defend against, and hardly anyone integrating AI is talking about it. — tap to centre the map on it Prompt injection is an extremely hard attack to defend against, and hardly anyone integrating AI is talking about it. Last stated 2 years ago
22 Mar 2025
TH
ThePrimeagen — holds since 2025-03-22 — tap for who they are
Same subject: Prompt injection is no longer a live attack on the frontier model: it simply does not follow instructions it reads on the internet any more. — tap to centre the map on it Prompt injection is no longer a live attack on the frontier model: it simply does not follow instructions it reads on the internet any more. Last stated 3 months ago
27 Jul 2026
BC
Boris Cherny — holds since 2026-07-27 — tap for who they are
Same subject: Prompt injection is unsolved, but the latest models are post-trained to resist it, so it takes far more than 'ignore all previous instructions' now. — tap to centre the map on it Prompt injection is unsolved, but the latest models are post-trained to resist it, so it takes far more than 'ignore all previous instructions' now. Last stated 8 months ago
12 Feb 2026
PS
Peter Steinberger — holds since 2026-02-12 — tap for who they are
Same subject: AI coding agents advance open source's founding goal by letting far more people modify software, so barring AI-assisted contributions protects a guild rather than the mission. — tap to centre the map on it AI coding agents advance open source's founding goal by letting far more people modify software, so barring AI-assisted contributions protects a guild rather than the mission. Last stated 5 months ago
1 Jun 2026
DH
David Heinemeier Hansson — holds since 2026-06-01 — tap for who they are
Same subject: AI coding agents have made redesigning existing systems cheap enough that developers actually redesign instead of living with a flawed design. — tap to centre the map on it AI coding agents have made redesigning existing systems cheap enough that developers actually redesign instead of living with a flawed design. Last stated 7 months ago
16 Mar 2026
KD
Kent C. Dodds — holds since 2026-03-16 — tap for who they are
Same subject: AI coding agents pulling unknown code onto corporate networks will be exploited, and it will take the shape of a supply-chain attack. — tap to centre the map on it AI coding agents pulling unknown code onto corporate networks will be exploited, and it will take the shape of a supply-chain attack. Last stated a month ago
4 Sept 2026
BS
Bruce Schneier — holds since 2026-09-04 — tap for who they are
Same subject: A benchmark that ranks Claude Code last while it stays first in use is measuring the wrong thing, and has been for a year. — tap to centre the map on it A benchmark that ranks Claude Code last while it stays first in use is measuring the wrong thing, and has been for a year. Last stated a month ago
3 Sept 2026
DR
Dax Raad — holds since 2026-09-03 — tap for who they are
Same subject: A skill is a set of repeatable, specific instructions that augments what Claude Code can do. — tap to centre the map on it A skill is a set of repeatable, specific instructions that augments what Claude Code can do. Last stated 7 months ago
19 Mar 2026
KP
Kris Puckett — holds since 2026-03-19 — tap for who they are
Same subject: A story's quality depends on whether it engages and satisfies the reader, not on the tool used to write it. — tap to centre the map on it A story's quality depends on whether it engages and satisfies the reader, not on the tool used to write it. Last stated 2 months ago
30 Aug 2026
EP
Eliot Peper — holds since 2026-08-30 — tap for who they are
Same subject: A compiler that also serves an IDE has to be lazy and deferred throughout — a different way of building compilers from the one the textbooks teach. — tap to centre the map on it A compiler that also serves an IDE has to be lazy and deferred throughout — a different way of building compilers from the one the textbooks teach. Last stated 5 months ago
13 May 2026
AH
Anders Hejlsberg — holds since 2026-05-13 — tap for who they are
Same subject: A good tool raises the floor of what people can build without lowering the ceiling, and almost every tool quietly lowers the ceiling. — tap to centre the map on it A good tool raises the floor of what people can build without lowering the ceiling, and almost every tool quietly lowers the ceiling. Last stated a year ago
18 Sept 2025
TL
Tobias Lütke — holds since 2025-09-18 — tap for who they are
Same subject: A new API framework that ignores how existing apps were historically built undermines its own introduction — tap to centre the map on it A new API framework that ignores how existing apps were historically built undermines its own introduction Last stated 2 months ago
31 Aug 2026
CH
Craig Hockenberry — holds since 2026-08-31 — tap for who they are
Same subject: 95 percent of the software made in an age of abundance will be shitty, and shitty software is easy to deal with because it goes away. — tap to centre the map on it 95 percent of the software made in an age of abundance will be shitty, and shitty software is easy to deal with because it goes away. Last stated 3 weeks ago
23 Sept 2026
GT
Geoff Teehan — holds since 2026-09-23 — tap for who they are
Same subject: A feature added to a codebase is extremely difficult to remove once other code is built on top of it. — tap to centre the map on it A feature added to a codebase is extremely difficult to remove once other code is built on top of it. Last stated 2 months ago
1 Sept 2026
VB
Vicki Boykis — holds since 2026-09-01 — tap for who they are
At the centre
Auto-mode does not yet convincingly fix prompt-injection risk for coding agents.
Holds Read this korrent →
For agents built on Claude Fable 5.1, it is in practice safe for now to assume they will not get prompt injected.
Holds
Prompt injection can be caught by watching the neurons that fire when it happens, so a defence no longer depends on the model reporting the attack.
Holds
Prompt injection has no equivalent of parameterized queries: there is no reliable way to tell a language model which text is data and which is instructions.
Holds
Prompt injection is an extremely hard attack to defend against, and hardly anyone integrating AI is talking about it.
Holds
Prompt injection is no longer a live attack on the frontier model: it simply does not follow instructions it reads on the internet any more.
Holds
Prompt injection is unsolved, but the latest models are post-trained to resist it, so it takes far more than 'ignore all previous instructions' now.
Holds
AI coding agents advance open source's founding goal by letting far more people modify software, so barring AI-assisted contributions protects a guild rather than the mission.
Holds
AI coding agents have made redesigning existing systems cheap enough that developers actually redesign instead of living with a flawed design.
Holds
AI coding agents pulling unknown code onto corporate networks will be exploited, and it will take the shape of a supply-chain attack.
Holds
A benchmark that ranks Claude Code last while it stays first in use is measuring the wrong thing, and has been for a year.
Holds
A skill is a set of repeatable, specific instructions that augments what Claude Code can do.
Holds
A story's quality depends on whether it engages and satisfies the reader, not on the tool used to write it.
Holds
A compiler that also serves an IDE has to be lazy and deferred throughout — a different way of building compilers from the one the textbooks teach.
Holds
A good tool raises the floor of what people can build without lowering the ceiling, and almost every tool quietly lowers the ceiling.
Holds
A new API framework that ignores how existing apps were historically built undermines its own introduction
Holds
95 percent of the software made in an age of abundance will be shitty, and shitty software is easy to deal with because it goes away.
Holds
A feature added to a codebase is extremely difficult to remove once other code is built on top of it.
Holds