Congdon sketches change-point monitoring with agents. One agent reads the service code and writes a monitoring plan for each release or config push, a deterministic harness runs it, and a second agent investigates anything that fires before escalating to a human. Token costs are low enough, he argues, for this to become standard.
Benjamin CongdonJeremy Scheff argues that coding agents take away the problem-solving that drew many people to programming, while people who mainly want working software gain. Simon Willison picked up the post. It is an honest account of a loss many engineers feel but rarely describe this precisely.
dumbmatter.com
A honeypot caught attackers chaining four Plex CVEs to run code remotely through the timeline-subscribe endpoint. They dropped xmrig and a proxy binary, possibly for residential-proxy abuse. Plex Media Server 1.43.2 and earlier is affected. If yours is exposed to the internet, patch it now.
Bored Hacker Blog
From 10 November, Let's Encrypt will check domain control from six remote vantage points, up from four, under Baseline Requirements that take effect on 15 December. Checking from more networks makes BGP- and DNS-hijack attacks on certificate issuance harder. Staging changes on 27 October, and few users should notice.
Let's Encrypt