Chronological feed of everything captured from Simon Willison.
paper / simonw / Apr 16
The Signalgate incident, despite its limited scale, reveals systemic vulnerabilities in organizational security rooted in human error, governance failures, and technology misuse. The incident underscores that focusing solely on external cyber threats while neglecting human and organizational factors leads to ineffective security practices. Effective cybersecurity necessitates a shift towards integrating robust leadership engagement, comprehensive zero-trust architectures, clear accountability, and incentivized secure behaviors.
cybersecurity-leadershiphuman-factorsorganizational-securityrisk-managementzero-trustcase-study
“Organizational security is heavily reliant on human behavior, with internal actors frequently representing the weakest link, even when advanced technical defenses are in place.”
paper / simonw / Apr 16
The User Data Sharing System (UDSS) is a platform-agnostic framework designed to securely and privately exchange PII between diverse consumer electronics and third-party applications. It utilizes a Contextual Scope Enforcement (CSE) mechanism to limit data exposure based on user intent during sign-in and sign-up workflows. UDSS offers a hardware-anchored, device-centric alternative to cloud-based identity standards, reducing user onboarding friction and mitigating PII overexposure risk.
iot-securityprivacy-middlewarepii-managementembedded-systemsconsumer-electronicsdata-governanceidentity-management
“The UDSS framework reduces user onboarding latency by 65%.”
github_push / simonw / Apr 16
code update
github_push / simonw / Apr 16
code update
github_push / simonw / Apr 16
code update
github_star / simonw / Apr 16
Official Matplotlib cheat sheets. Stars: 7665
github_star / simonw / Apr 16
A lightweight WebAssembly runtime that is fast, secure, and standards-compliant. Stars: 17887
github_star / simonw / Apr 16
The standalone Linux Lisp. Stars: 380
github_star / simonw / Apr 16
labs. Stars: 32
github_star / simonw / Apr 16
OpenSSF Scorecard - Security health metrics for Open Source. Stars: 5374
github_star / simonw / Apr 16
MLX-VLM is a package for inference and fine-tuning of Vision Language Models (VLMs) on your Mac using MLX.. Stars: 4373
github_star / simonw / Apr 16
An extremely fast Python package and project manager, written in Rust.. Stars: 83358
github_push / simonw / Apr 16
code update
github_push / simonw / Apr 16
code update
github_push / simonw / Apr 16
code update
github_push / simonw / Apr 16
code update
github_push / simonw / Apr 16
code update
github_star / simonw / Apr 16
A parser, formatter, validator, and language server for SQLite SQL. Built on SQLite's own grammar and tokenizer. Stars: 693
github_star / simonw / Apr 16
Full archive of IndieWeb chat log data files. Stars: 16
github_star / simonw / Apr 16
An open-source AI agent that brings the power of Gemini directly into your terminal.. Stars: 101355
github_star / simonw / Apr 16
The leading data integration platform for ETL / ELT data pipelines from APIs, databases & files to data warehouses, data lakes & data lakehouses. Both self-hosted and Cloud-hosted.. Stars: 21087
paper / simonw / Apr 15
Citations: 7.
paper
github_push / simonw / Apr 14
code update
github_push / simonw / Apr 14
code update
github_push / simonw / Apr 14
code update
github_push / simonw / Apr 14
code update
github_star / simonw / Apr 14
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.. Stars: 14787
github_star / simonw / Apr 14
A cloud-native database based on PostgreSQL developed by Alibaba Cloud.. Stars: 3149
github_star / simonw / Apr 14
AI Observability & Evaluation. Stars: 9268
github_star / simonw / Apr 14
MLX: An array framework for Apple silicon. Stars: 25378
github_star / simonw / Apr 14
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.. Stars: 2225
tweet / @simonw / Apr 13
Simon Willison expresses a desire for OpenAI to disclose the specific model powering ChatGPT's voice mode. He proposes integrating this voice model with background agents leveraging GPT-5 for complex tasks, including verbal cues like "let me think a moment." Additionally, he advocates for an overall performance upgrade to the voice mode's underlying model.
chatgptvoice-modegpt-5ai-agentsmodel-improvementssimon-willison
“Simon Willison wants OpenAI to specify the exact model used in ChatGPT voice mode.”
tweet / @simonw / Apr 13
Simon Willison expresses disinterest in developing a custom solution for hourly polling of his X feed. The primary barriers are insufficient motivation and the stringent requirement for reliable mobile functionality on his phone. This highlights practical constraints in personal automation projects prioritizing phone usability.
simon-willisontwitter-feedhourly-pollphone-appuser-laziness
“Simon Willison is unwilling to build a tool for hourly polling his X feed”
tweet / @simonw / Apr 13
Simon Willison observes that AI agents reliably handle straightforward mobile app development tasks when the codebase provides style precedents. Tasks like implementing TDD-driven features such as a /recent.json endpoint using SQL queries succeed due to matching existing code patterns. This suggests agent performance hinges on codebase familiarity rather than task complexity.
tddsql-queryjson-apiai-agentscode-generationsoftware-development
“AI agents perform well on phone projects that follow obvious, templated instructions”
tweet / @simonw / Apr 13
Simon Willison counters Steve Yegge's portrayal of San Jose as a post-apocalyptic ghost town by highlighting a KQED series on its thriving food scene. The series emphasizes diverse culinary offerings including Vietnamese malls, Mexican flea market taco stands, exceptional pho, and the Bay Area's most delicious Somali food. This suggests hidden vibrancy amid high living costs and apparent urban emptiness.
san-josefood-sceneurban-lifebay-areavietnamese-foodmexican-foodsomali-food
“San Jose's downtown is an absolute ghost town with no people, comparable to a post-apocalyptic scene.”
tweet / @simonw / Apr 13
Simon Willison counters Steve Yegge's portrayal of downtown San Jose as a post-apocalyptic ghost town by highlighting its rich ethnic food culture. Local residents recognize the area for Vietnamese malls, Mexican flea market taco stands, exceptional pho, decadent tortas, and the Bay Area's best Somali food. This food scene serves as a key positive attribute elevating perceptions of the city.
san-josefood-scenebay-areasimon-willisonurban-foodcuisine-diversity
“Downtown San Jose is known locally for Vietnamese malls and Mexican flea market taco stands”
tweet / @simonw / Apr 13
Gemma 4 8B runs decently fast on high-end local hardware like Mac Studio M4 Max with 128GB RAM, while the 31B variant delivers strong performance for private tasks such as PII document review but is too slow for rapid use. Ollama UI enables basic chatbot functionality without data leakage risks, outperforming cloud models like Claude for sensitive info, though it lacks advanced features like projects and memory. Users note the 26B A4B variant as promising for balancing speed and quality.
gemma-4ollamalocal-llmsmodel-performanceprivate-aillm-uim4-mac
“Gemma 4 8B model runs relatively fast on a Mac Studio M4 Max with 128 GB RAM”
tweet / @simonw / Apr 13
Simon Willison expresses positive impressions of the 26B A4B AI model after personal testing. He has not yet compared it to the 31B variant. This anecdotal endorsement highlights potential strengths in the 26B model's capabilities for technical users.
llm-modelsai-pollsmodel-comparisonsimon-willison26b-a4b31b-model
“Simon Willison has tried the 26B A4B AI model”
tweet / @simonw / Apr 13
Simon Willison reports improved code quality from delegating repetitive, minor improvements like readability tweaks across 20+ locations to a coding agent. This process incurs no cost and leverages the agent's efficiency for small, tedious updates. The insight highlights AI's role in eliminating manual drudgery in coding workflows.
ai-coding-agentscode-refactoringproductivity-hacksllm-efficiencysimon-willisondeveloper-tools
“Simon Willison is achieving better code quality through AI agent usage.”
tweet / @simonw / Apr 13
Simon Willison previously weighed minor code improvements against a 30+ minute time cost, often skipping them. Recent changes, implied by his X feed monitoring, automate this process. This shifts decision-making from tradeoff evaluation to effortless adoption of enhancements.
simon-willisonx-feedhourly-polltime-tradeoffproductivitydecision-making
“Simon Willison used to spend approximately 30+ minutes on minor code improvements”
tweet / @simonw / Apr 13
Simon Willison affirms that switching effectively between 2-3 projects simultaneously demands significant practice to achieve comfort. This highlights the skill-building aspect of context-switching in software development or knowledge work. Proficiency emerges from repeated exposure rather than innate ability.
productivitymultitaskingproject-managementdeveloper-practicessimon-willisonx-feed
“Jumping between 2-3 projects at once requires quite a bit of practice to become comfortable”
bluesky_post / simonw / Apr 13
From the comments: /* Earring sparkle */, <!-- Opossum fur gradient -->, <!-- Distant treeline silhouette - Virginia pines -->, <!-- Front paw on handlebar --> ... static.simonwillison.net/static/2026/...
blueskysocial
bluesky_post / simonw / Apr 13
Here's the transcript gist.github.com/simonw/1864b...
blueskysocial
bluesky_post / simonw / Apr 13
Generate an SVG of a NORTH VIRGINIA OPOSSUM ON AN E-SCOOTER came out even better bsky.app/profile/simo...
blueskysocial
bluesky_post / simonw / Apr 13
There's concrete evidence this time - the preview model has found genuine security vulnerabilities in real world software which have been accepted and patched
blueskysocial
bluesky_post / simonw / Apr 13
Pelicans for Meta's new Muse Spark models - plus I did a bit of a deep dive into the Code Interpreter and fascinating "container.visual_grounding" tools in their meta.ai chat UI simonwillison.net/2026/Apr/8/m...
blueskysocial
bluesky_post / simonw / Apr 13
Ignore the bits about the Trump administration, what's more interesting is the genuinely credible (and unaffiliated to an AI lab) security researchers who are taking this seriously now www.theregister.com/2026/03/26/g... and mastodon.social/@bagder/1163... and lwn.net/Articles/106...
blueskysocial
bluesky_post / simonw / Apr 13
Makes total sense to me that Daniel is not about to outsource FIXING these issues to AI himself
blueskysocial
bluesky_post / simonw / Apr 13
Most of those reports are from currently available models - but the fact that they're credible makes me believe Anthropic when they say that Mythos is even better at that
blueskysocial
bluesky_post / simonw / Apr 13
I'm really looking forward to API access to the image bounding box, counting and point features, those are amazing
blueskysocial