Ai on MacWorkshttps://macworks.dev/tags/ai/Recent content in Ai on MacWorksHugoenSimon Willisonhttps://macworks.dev/docs/today/simonwillison-2026-04-14/Mon, 01 Jan 0001 00:00:00 +0000https://macworks.dev/docs/today/simonwillison-2026-04-14/<h1 id="simon-willison--2026-04-14">Simon Willison โ€” 2026-04-14<a class="anchor" href="#simon-willison--2026-04-14">#</a></h1> <h2 id="highlight">Highlight<a class="anchor" href="#highlight">#</a></h2> <p>Simon highlights a fascinating paradigm shift in AI security: treating vulnerability discovery as an economic &ldquo;proof of work&rdquo; equation where spending more tokens yields better hardening. This creates a compelling new argument for the enduring value of open-source libraries in the age of vibe-coding, as the massive cost of AI security reviews can be shared across all of a project&rsquo;s users.</p> <h2 id="posts">Posts<a class="anchor" href="#posts">#</a></h2> <p><strong>[datasette PR #2689: Replace token-based CSRF with Sec-Fetch-Site header protection]</strong> ยท <a href="https://simonwillison.net/2026/Apr/14/replace-token-based-csrf/#atom-everything">Source</a> Simon has replaced Datasette&rsquo;s cumbersome token-based CSRF protection with a new middleware relying on the <code>Sec-Fetch-Site</code> header, inspired by Filippo Valsorda&rsquo;s research and recent changes in Go 1.25. This modern approach eliminates the need to scatter hidden CSRF token inputs throughout templates or selectively disable protection for external APIs. Interestingly, while Claude Code handled the bulk of the commits under Simon&rsquo;s guidance with cross-review by GPT-5.4, Simon chose to hand-write the PR description himself as an exercise in conciseness and keeping himself honest.</p><link>https://macworks.dev/</link><pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate><guid>https://macworks.dev/</guid><description><style> .book-btn + .book-btn { margin-left: 0.5rem; } .book-card .markdown-inner p:first-of-type { min-height: 4.5em; line-height: 1.5; } </style> <div class="book-hero"> <h1 id="daily-digest">Daily Digest</h1> <p>AI-curated news and insights, organized so you never miss what matters</p> <a class="book-btn"href="https://macworks.dev/docs/today/">Today's Digest</a> </div> <div class="book-columns"id="book-columns-1"> <ul> <li> <h2 id="what-is-this">What Is This<a class="anchor" href="#what-is-this">#</a></h2> <p>A daily briefing that pulls from dozens of sources โ€” tech blogs, social media, news outlets, and video channels โ€” then distills them into concise, readable summaries you can scan in minutes.</p> </li> <li> <h2 id="how-it-works">How It Works<a class="anchor" href="#how-it-works">#</a></h2> <p>Content is collected and summarized on a rolling basis: <strong>today</strong> for the freshest takes, <strong>this week</strong> for catch-up, and <strong>monthly/archive</strong> views for deeper review.</p></description></item></channel></rss>