Sources

Large genome models used to design new viruses arstechnica.com

The AI system makes genetically distant versions of a bacteria-killing virus.

Release: datasette 1.0a38 This release fixes a SQL injection security issue that affects Datasette instances that serve a mixture of public and private tables in the same database, with access configured using the Datasette permissions system . Site administrators who serve private tables in this way are advised to disable the execute-sql permission ` on that database to prevent users from accessing private tables using raw SQL queries. The bug that has been fixed would have allowed users with…

datasette 0.65.3 simonwillison.net

Release: datasette 0.65.3 Back-ported the SQL Injection security fix from 1.0a38 . Tags: datasette

Cloudflare open-sources vibe-coding platform for people who aren’t coders arstechnica.com

Cloudflare built an AI agent workspace for its employees. Now it’s open source.

Baseten on Hugging Face Inference Providers 🔥 huggingface.co

Hugging Face has added Baseten to its Inference Providers lineup, letting developers route model calls through Baseten’s serving stack directly from the Hub. The integration expands the roster of third-party GPU backends users can pick without leaving Hugging Face’s model pages.

AI isn’t enough to protect social media communities from AI arstechnica.com

Automated tools are failing to keep pace with AI-generated spam and impersonation flooding Discord, Reddit, and Facebook communities, Ars argues. Human moderators remain essential because context, intent, and community norms still exceed what current classifiers reliably catch at scale.

Hank Green found the AI problem that YouTube labels can’t catch arstechnica.com

Creator Hank Green identified a category of AI-assisted video that slips past YouTube’s disclosure labels, going beyond the obvious ‘slop’ problem. The gap involves partially synthetic content where labeling rules don’t clearly apply, leaving viewers without cues about what they’re watching.

Simon Willison on Technical Blogging simonwillison.net

In a resurfaced ‘Write that blog!’ interview with Cynthia Dunlop, Willison urges writers to hit publish while still unhappy with a draft. The alternative, he warns, is a folder of unpublished drafts, since readers never see the flaws authors fixate on.

References

Science Media Centre — Prof. Tom Ellis (Imperial College) sciencemediacentre.org

This is the smallest and easiest genome to design and make… about 5,400 letters of code, whereas most cells require hundreds of thousands of base pairs.

The Guardian — Inglesby & Hanke (Johns Hopkins Center for Health Security), Science commentary theguardian.com

The ability to compose viral genomes using generative AI now exists; the governance to safely steer it does not.

GovAI / OpenReview — ‘Coding Agents Are Changing the Biosecurity Risk Landscape’ openreview.net

A non-expert used Claude Code to fine-tune Evo 2 on 110 human-infecting virus sequences in a single weekend, effectively rescuing capabilities the developers had tried to withhold by excluding eukaryotic pathogens from pretraining.

Asimov Press — technical write-up of the phiX174 experiment asimov.press

Of 302 designs synthesized and tested, 16 were fully functional; one variant (Evo-Φ69) replicated 65-fold faster than wild-type and a cocktail overcame E. coli strains resistant to natural phiX174.

SciRouter benchmark comparison (Evo 2 vs AlphaGenome vs DNABERT) scirouter.ai

Evo 2 leads in zero-shot and long-context tasks, but is outperformed on human gene essentiality and non-coding regulatory variant prediction by supervised models like APOGEE2 and DeepMind’s AlphaGenome.

Science Media Centre — Dr. Jonathan Stokes (McMaster) via ABC Nepal syndication abcnepal.tv

Because bacteria evolve resistance quickly, a timer starts the moment a treatment is deployed; AI-designed phages could allow a robust pipeline of cheap pivots to new genomic recipes.

vibecoding.app review vibecoding.app

While proprietary competitors may charge hundreds of dollars per seat, VibeSDK users only pay for underlying infrastructure and LLM API usage, which experts estimate can drop costs to roughly $30 per month.

Hacker News discussion news.ycombinator.com

Critics on Hacker News point to a controversial ‘Matrix on Cloudflare Workers’ implementation as a primary example of ‘vibe coded garbage’… thread-safety boilerplate that was non-functional in a serverless environment, and even cosmetic issues like misaligned ASCII diagrams in the documentation.

HN comment (Kenton Varda thread) news.ycombinator.com

Cloudflare’s ‘Sandstorm’ security model, repurposed from Kenton Varda’s earlier startup… uses fine-grained ‘Gadget’ isolates—individual sandboxes for every app instance—which theoretically prevents AI-generated code from introducing systemic security vulnerabilities.

avery.dev comparison (Lovable vs Bolt vs v0 vs Replit) avery.dev

In Figma-to-code fidelity tests, v0 and Lovable typically lead in UI quality, while Replit and Bolt are more capable of scaffolding functional backend logic… none of these platforms are yet 100% production-ready for complex applications.

cloudflare/vibesdk GitHub issues github.com

Even basic ‘hello-world’ applications often fail during the preview or deployment stages… frontend may fail to receive responses for API requests during sign-in or sign-up, effectively blocking local testing… agent reintroduces features or code segments that were previously removed.

Tanium / Red Access security report tanium.com

A 2026 report by Red Access identified over 5,000 vibe-coded apps in corporate environments, with 40% lacking basic security controls… 45% of AI-generated code samples contained OWASP Top-10 vulnerabilities.

Simon Willison — datasette 1.0a38 release note simonwillison.net

Thankfully this particular configuration - private tables and public tables exposed for the same database within the same instance - is likely to be rare. I’ve not encountered an instance like that myself.

simonwillison.net /tags/sql-injection (prior 1.0a33 bracket-escaping fix) simonwillison.net

Earlier bugs involved improper sanitization of identifiers (table and column names) containing ’]’ characters… the 1.0a38 fix addresses a deeper logical flaw in how permissions are applied when raw SQL is used to bridge access between public and private resources.

Sources

References

Jack Sun, writing.