How-tos
Step by step, from real work.
Guide ·
AWS Shipped a Free Local Emulator That AI Agents Keep Up to Date. Telemetry Is On by Default and IAM Is Not Checked. Here Is How I'd Use It.
AWS Emulator runs AWS APIs on your laptop with no account and no fee, and it hit about 785 points on Hacker News. It also skips IAM policy checks, keeps state in memory, and sends usage data to AWS unless you switch it off. Good for fast tests, wrong for security tests.
Guide ·
Chrome's Modern Web Guidance Gives Coding Agents 250 Web Features and Baseline Data in One Install. It Is a Preview With Telemetry On. Here Is How I'd Try It.
A GoogleChrome repo ships skills that steer coding agents toward current web platform features instead of 2019-era JavaScript. It is Apache 2.0, labelled a preview, and reports the agent's search queries by default. Start with the scan command, not the install.
Guide ·
Automattic Built a Host for Sites Your AI Agent Deploys. Free Gets 20 Spaces, and Leaving Costs Code Changes if You Use Its Runtimes.
Spacefast lets Claude, Cursor or a plain CLI publish a site and get a live link, with versioned deploys and rollback. I checked the launch coverage against the official pricing page, and the two no longer agree.
Guide ·
Microsoft's APM Puts Your Agent Skills in One apm.yml With a Lockfile. Pin Your Agent Config Like You Pin Dependencies.
Microsoft's open-source Agent Package Manager treats skills, prompts and MCP servers as versioned dependencies. Here is what it does, what is still a working draft, and how I would trial it.
Guide ·
DeepMind's AI Agents Cut the Cost of Forging 1024-bit RSA Signatures by About 1,600x. Here Is the Ten-Minute Audit for Your SSH Keys, Certs and DKIM.
Google DeepMind reported two new weaknesses in legacy 1024-bit RSA on November 6. Nothing is broken in production, but this is the cheap day to find the 1024-bit keys you forgot about.
Guide ·
WordPress 7.1.4 Fixed Remote Code Execution During the Upgrade Window. Ten Days Later, Check That Your Sites Actually Updated.
A flaw that only exists while an update runs is easy to miss on sites that update on their own. Here is the version check and log check I'd run on every WordPress site you are responsible for.
Guide ·
Anthropic's Message Threads Stop You Resending the Whole Conversation. They Also Expire in 5 Minutes and Are Not ZDR-Eligible. Read the Fine Print Before You Switch.
Threads let an agent loop send only new messages. They also expire after five idle minutes, cannot be listed or deleted, and do not change what you pay.
Guide ·
NIST Published a Cybersecurity Guide for One-Person Businesses on November 2. It Lists 22 Actions. Here Are the Five I'd Do This Weekend.
CSWP 50 is a free, plain-language checklist for firms with no employees. Most of the risk reduction sits in five items you can finish in two evenings.
Guide ·
Node.js 26 Became LTS on October 28 With Temporal On by Default. Node 22 Stops Getting Security Fixes April 30, 2027. Here's the Upgrade Order for a One-Person Stack.
The LTS label changes your support clock, not your code. Here are the dates, the four breaking changes that actually bite, and which Node line to run depending on where you are today.
Guide ·
OpenAI, Google, Microsoft and Anthropic Back One robots.txt Token for AI Training. Only Anthropic Honors It Today. Here's the Three-Line Decision for Your Site.
A single robots.txt token now covers AI training opt-outs across four major labs, but it is an individual draft, it ignores search and retrieval, and Google and Microsoft are not honoring it until 2027.
Guide ·
Claude's API Now Takes 128 MB Requests, Up From 32 MB. Bedrock Still Caps at 20 MB. Check Which Number Your Code Actually Hits.
A bigger request limit only helps if every hop on your route honors it. Here are the ceilings across Anthropic's own API and its partner platforms, and the three code changes I'd make before sending big PDFs.
Guide ·
The Agent Break-Even Rule Fits on a Napkin: The Odds It Succeeds Must Beat Your Check Time Divided by Your Do Time. Run It Before You Delegate Anything.
One inequality from a McKinsey Quarterly footnote tells you whether an agent is saving you time or just moving your work into review. I ran it on five typical solo-operator tasks with stated assumptions.