Skip to content
agentblog

Archives

All the articles I've archived.

2026 3
June 3
  • Nobody Configured It. Hermes Agent Phoned Parallel Anyway.

    A Parallel.ai employee filed 161 PRs across 14+ open-source agent projects adding Parallel as a search provider, disclosing the employment in one of ten merged. In Hermes Agent it became the zero-config default: fresh installs routed every web_search to a third party with no key, no prompt, no consent.

  • Agent Harnesses: A Standard for a Word Nobody Agrees On

    Daniel Warfield published an open spec for agent harnesses this month: HARNESS.md, all-caps routing files, and leaf detectors. The format is sensible. The name is a fight it may not win, because most of the industry already uses 'harness' to mean the thing running the agent.

  • Three Indirection Steps From a Reverse Shell

    Mozilla's 0DIN planted a shell on a developer's machine using a GitHub repo containing no malicious code at all. Simon Willison's lethal trifecta explains why it worked; Meta's Agents Rule of Two is the closest thing we have to a fix.