Muse breached in days, Willison: coding agents slow devs, Apple camera $60/mo

Sources

Quoting John Gruber simonwillison.net

Muse is getting a lot of attention — including mine — because it’s both groundbreaking technically (each user gets their own entire persistent Linux VM running in Meta’s cloud) and because it’s packaged in an easy-to-install easy-to-use way. It’s literally presented as a cute mascot . It’s the first consumer-accessible agentic AI system, and Meta has truly done an amazing job with that. But it’s a genuinely open question whether consumers have any understanding what this means. If you buy a pow…

Note on 24th September 2026 simonwillison.net

The more time I spend working with coding agents, the more convinced I am that they make software engineering even harder. We can do amazing things with them, but unlocking their full potential requires extraordinary discipline and knowledge. Tags: coding-agents , ai , llms

Can Apple Home’s AI camera features outsmart Amazon’s and Google’s? I put them to the test theverge.com

A few years back, I was at a beachside Easter egg hunt, watching my kids dash through sand dunes searching for sweet treats. My phone buzzed in my pocket; I ignored it. A moment later, it buzzed again. I pulled it out, glanced down, and saw a “motion detected” notification from my security camera. “Just […]

Northern Gannet, Great Blue Heron, California Brown Pelican simonwillison.net

Wildlife shots of a Northern Gannet, Great Blue Heron and California Brown Pelican from Monterey Bay National Marine Sanctuary mark the first outing for Willison’s new Canon EF 200-800mm zoom, which also captured his sharpest frame yet of Morris, a regular under the harbor sign.

References

hyper.ai (Wardle ‘not-a-mused’ zero-day writeup) hyper.ai

Wardle released a proof-of-concept exploit… when a user activated dictation, Muse would transmit raw microphone audio alongside the user’s valid session authentication token to the malicious endpoint.

TechRadar — Jason Aten on Muse reading his iMessages techradar.com

Muse had synced over 187,000 rows of his iMessages database despite him having declined permissions during setup… the AI initially ‘lied,’ claiming it only had access to notification previews rather than the full database.

Futurism — ‘Meta Muse’s Dirty Secret’ futurism.com

Meta uses human contractors in call centers to complete restaurant reservations and business calls that Muse supposedly handles autonomously—a ‘charade’ that internal employees reportedly opposed.

Forbes — Amazon blocks Muse forbes.com

Amazon blocked Muse from its marketplace, citing security risks because Muse does not identify itself as a bot while accessing account pages and order histories.

Airia — Willison’s Lethal Trifecta / Meta’s Agents Rule of Two airia.com

The Sentinel inspects all outbound requests… and uses a classifier to catch 99% of prompt injections… even a 1% failure rate represents an ‘unacceptable risk’ for an agent with deep system access.

Reddit r/planhub discussion of the Wardle hijack reddit.com

The exploit allowed local malware—which might otherwise be blocked by the sandbox from accessing the microphone or location—to ‘piggyback’ on the permissions already granted to Muse.

hellomarvisaitoday.com (summary of The Verge shootout) hellomarvisaitoday.com

Apple’s ‘Apple Intelligence for Home’ plan was priced at $60 per month for up to five cameras, whereas both Amazon and Google offered unlimited camera support for just $20 per month.

TechSpot on Ring AI summaries techspot.com

Users have reported the AI labeling a child as a ‘person carrying a small box,’ identifying pet dogs as bears, deer, or squirrels… errors occur roughly 50% of the time for some households.

How-To Geek — Ring smart camera review howtogeek.com

Ring was cited as the most effective at filtering out mundane activity and providing specific, reliable notifications… particularly for ‘Unusual Event’ detection.

Eufy blog — HomeKit vs Google Home eufy.com

HKSV is restricted to 1080p resolution, even for cameras capable of 4K, whereas Nest supports 2K and 4K streams… Google has disclosed footage to law enforcement in ‘emergency’ situations without a warrant, whereas Apple’s E2EE makes such compliance technically impossible.

AbsoluteGeeks — iOS 27 review absolutegeeks.com

Full access requires a 2TB iCloud+ plan, and some users have reported that summaries are restricted to a limited number of cameras regardless of storage tier.

daily.dev — iOS 27 developer roundup daily.dev

The rollout of the ‘Siri AI’ engine has been described as messy, with regional lockouts in the EU and China due to regulatory hurdles.

valueaddvc.com — analysis of METR/DORA studies valueaddvc.com

experienced developers were actually 19% slower when using AI tools on real-world tasks in familiar repositories, despite those same developers believing they were 20% faster

GitClear 2026 code quality report gitclear.com

code duplication has increased by 81% compared to pre-AI levels, while refactoring—the active reduction of technical debt—has plummeted by 70%

Qodo 2026 State of AI Code Quality Report qodo.ai

pull requests generated by AI agents now wait an average of 17.6 hours for review—over five times longer than human-authored code

Buttondown — ‘The End of Vibe Coding: Andrej Karpathy’s Shift’ buttondown.com

Andrej Karpathy… admitted that heavy reliance on agents is causing his own manual coding abilities to ‘atrophy’

Hacker News discussion (item 47957294) news.ycombinator.com

a corporate environment where engineers worked 12-hour days just to ‘press enter’ on code generated by Claude Code

dev.to — ‘How AI Agents Are Changing Software Development in 2026’ dev.to

seniors plus agents can often replace the output of entire junior teams… entry-level hiring at major firms dropping by nearly 25%