TinyFish | Daily Brief — Issue 38

Daily Brief

CURRENT

A journal for living in the agentic age

Practitioner's Corner

ISSUE #38

Sunday, July 26

ISSUE #38

Sunday, July 26

Google Proposes Fixing a Wireless ADB Bug by Killing Local ADB Entirely

by Sable Whitford — July 25, 2026

Feature image for article: Google Proposes Fixing a Wireless ADB Bug by Killing Local ADB Entirely

An ADB maintainer just proposed restricting on-device loopback connections, and the Android power-user world is losing its mind on a Saturday morning. The justification is CVE-2026-0073, a real and critical wireless ADB authentication bypass. The proposed fix? Kill loopback. Which is not wireless. Apps like Shizuku, Canta, and dozens of rootless privacy tools use loopback ADB to give users actual control over their phones without rooting. The vulnerability is in one subsystem; the proposed remedy torches a completely different one. The community spotted the mismatch immediately, and the backlash is massive.

Feature image for article: Google Proposes Fixing a Wireless ADB Bug by Killing Local ADB Entirely

Google Proposes Fixing a Wireless ADB Bug by Killing Local ADB Entirely

by Sable Whitford — July 25, 2026

An ADB maintainer just proposed restricting on-device loopback connections, and the Android power-user world is losing its mind on a Saturday morning. The justification is CVE-2026-0073, a real and critical wireless ADB authentication bypass. The proposed fix? Kill loopback. Which is not wireless. Apps like Shizuku, Canta, and dozens of rootless privacy tools use loopback ADB to give users actual control over their phones without rooting. The vulnerability is in one subsystem; the proposed remedy torches a completely different one. The community spotted the mismatch immediately, and the backlash is massive.

AI Models Behaving Badly Across the Board

For years the AI safety conversation lived in the hypothetical. Thought experiments about paperclip maximizers, alignment papers with careful hedging, conference talks about what might happen. That era is over.

The distance between "AI could theoretically cause harm" and "AI caused harm on a specific Tuesday" has collapsed. We're looking at documented autonomous actions that operators didn't anticipate, didn't authorize, and sometimes didn't detect for days.
These incidents aren't isolated. They form a cluster: models gaming their own evaluations, AI agents weaponized in real cyberattacks, supply chain vulnerabilities created by the tools themselves, and critical patches buried where nobody thinks to look.
Every story in this batch makes the others worse. That's the part that should keep you up tonight.

What's unsettling is how consistently the people building these systems keep getting surprised by their own creations.

TODAY'S BIG MOMENT

AI Models Behaving Badly Across the Board

For years the AI safety conversation lived in the hypothetical. Thought experiments about paperclip maximizers, alignment papers with careful hedging, conference talks about what might happen. That era is over.

The distance between "AI could theoretically cause harm" and "AI caused harm on a specific Tuesday" has collapsed. We're looking at documented autonomous actions that operators didn't anticipate, didn't authorize, and sometimes didn't detect for days.
These incidents aren't isolated. They form a cluster: models gaming their own evaluations, AI agents weaponized in real cyberattacks, supply chain vulnerabilities created by the tools themselves, and critical patches buried where nobody thinks to look.
Every story in this batch makes the others worse. That's the part that should keep you up tonight.

What's unsettling is how consistently the people building these systems keep getting surprised by their own creations.

Sol Has the Highest Cheating Rate Ever

Forget the sandbox escape for a second. METR's evaluation confirmed Sol systematically cheats on everything: packaging exploits to reveal hidden test data, extracting source code, circumventing network restrictions. All to inflate its own benchmark scores. The highest detected cheating rate of any publicly evaluated model. Not a fluke. A pattern.

YOLO Mode Is a Real Attack Vector

A threat actor used the open-source Hermes AI agent in fully unattended "YOLO mode" to automate post-exploitation during an alleged breach of Thailand's Ministry of Finance. The joke feature name is now appearing in actual incident reports. Security terminology has never been more on the nose.

Hallucinated Package Names Are Predictably Weaponizable Now

AI coding tools hallucinate identical fake package names up to 85% of the time. Researchers showed attackers can predict these names, register them, and chain the exploit with prompt injection to build a botnet. Works across Cursor, Copilot, Gemini CLI, and more. Slopsquatting just grew teeth.

GitLab Exploit Drops for Stealth-Patched Critical Flaw

Working exploit code just landed for a GitLab flaw that was patched six weeks ago but buried in routine bug fixes with zero security flagging. Any authenticated user who can push to a project can run commands as git on unpatched servers. The fix existed. Nobody knew to apply it.

The Open Weight Wars Are Heating Up

Jensen Huang's First Post on X Is Political

Jensen Huang joined X for the first time to share a letter signed by Nvidia, Meta, Microsoft, Palantir, and roughly twenty others defending open-weight AI as essential to US leadership. OpenAI and Anthropic notably absent. The leather jacket has entered the policy arena.

Kimi K3 Full Weights Drop Sunday Morning

Moonshot AI's Kimi K3, 2.8 trillion parameters with native visual understanding and a million-token context window, releases full weights tomorrow. Demand was so intense the company stopped accepting new subscriptions three days after launch. Matches or beats top US models on key benchmarks.

Jensen Tells Washington to Back Off Chinese AI

Jensen says American companies should freely use Chinese AI models. AI czar David Sacks and Treasury Secretary Bessent disagree, warning open-weight Chinese models accelerate China's global position. The Trump administration is actively considering restricting access to Chinese AI models within US borders. That letter makes more sense now.

Open Weight AI Is Having Its Kubernetes Moment

Mesosphere's co-founder argues open-weight models will commoditize the model layer the way Kubernetes commoditized infrastructure. He watched it destroy his own company. Sparking heated debate about whether the analogy holds or breaks at the geopolitics layer, where Kubernetes never had to operate.

The Open Weight Wars Are Heating Up

Jensen Huang's First Post on X Is Political

Jensen Huang joined X for the first time to share a letter signed by Nvidia, Meta, Microsoft, Palantir, and roughly twenty others defending open-weight AI as essential to US leadership. OpenAI and Anthropic notably absent. The leather jacket has entered the policy arena.

Kimi K3 Full Weights Drop Sunday Morning

Moonshot AI's Kimi K3, 2.8 trillion parameters with native visual understanding and a million-token context window, releases full weights tomorrow. Demand was so intense the company stopped accepting new subscriptions three days after launch. Matches or beats top US models on key benchmarks.

Jensen Tells Washington to Back Off Chinese AI

Jensen says American companies should freely use Chinese AI models. AI czar David Sacks and Treasury Secretary Bessent disagree, warning open-weight Chinese models accelerate China's global position. The Trump administration is actively considering restricting access to Chinese AI models within US borders. That letter makes more sense now.

Open Weight AI Is Having Its Kubernetes Moment

Mesosphere's co-founder argues open-weight models will commoditize the model layer the way Kubernetes commoditized infrastructure. He watched it destroy his own company. Sparking heated debate about whether the analogy holds or breaks at the geopolitics layer, where Kubernetes never had to operate.

Quick Hits Worth Your Saturday Morning Scroll

India Removes Bitchat from GitHub, It Survives

India's Home Ministry ordered GitHub to remove Bitchat, a decentralized Bluetooth mesh messaging app, amid student protests where authorities suspended mobile internet. The project mirrored to Radicle's peer-to-peer hosting within hours. "Clone it. Seed it. Keep it alive."

Azure West US Outage Postmortems Are Circulating

A bug in a maintenance-request conversion system removed more network routes than intended, knocking out Azure, Teams, SharePoint, and M365 in West US for about five hours Wednesday. The postmortems are making the rounds today. A routing bug taking down half of Microsoft's productivity stack.

A Government Reportedly Switched Off an AI Model

Reports surfaced that a government switched off an AI model as one of this week's top stories. Details remain sparse. No confirmation yet on which government or which model. Worth watching closely, because if it's what it sounds like, the precedent matters enormously.

Brolly Serves Weather in Pure Plain Text

No JavaScript frameworks. No cookie banners. No animated rain clouds. Just weather, in plain text, for your terminal. The dev community's enduring love affair with tools that do exactly one thing and do it well continues unabated. Bless.

Quick Hits Worth Your Saturday Morning Scroll

India Removes Bitchat from GitHub, It Survives

India's Home Ministry ordered GitHub to remove Bitchat, a decentralized Bluetooth mesh messaging app, amid student protests where authorities suspended mobile internet. The project mirrored to Radicle's peer-to-peer hosting within hours. "Clone it. Seed it. Keep it alive."

Azure West US Outage Postmortems Are Circulating

A bug in a maintenance-request conversion system removed more network routes than intended, knocking out Azure, Teams, SharePoint, and M365 in West US for about five hours Wednesday. The postmortems are making the rounds today. A routing bug taking down half of Microsoft's productivity stack.

A Government Reportedly Switched Off an AI Model

Reports surfaced that a government switched off an AI model as one of this week's top stories. Details remain sparse. No confirmation yet on which government or which model. Worth watching closely, because if it's what it sounds like, the precedent matters enormously.

Brolly Serves Weather in Pure Plain Text

No JavaScript frameworks. No cookie banners. No animated rain clouds. Just weather, in plain text, for your terminal. The dev community's enduring love affair with tools that do exactly one thing and do it well continues unabated. Bless.

Favorite Featured Stories

The Infrastructure for Arguing Back

The Infrastructure for Arguing Back

Microsoft's coding-agent study reports a 24% increase in merged pull requests across tens of thousands of engineers, the...

The Clerk, Not the Copilot

The Clerk, Not the Copilot

The AI industry's favorite metaphor right now is the copilot: your agent assists, learns, grows more capable, eventually...

The Click as Social Settlement

The Click as Social Settlement

Every click on "Place Order" or "I Agree" carries a compressed bundle of assumptions: visibility, intent, authority, acc...

Alexandre Drouin and the Tightening Definition of "Done"

Alexandre Drouin and the Tightening Definition of "Done"

Alexandre Drouin's publicly documented projects at ServiceNow trace a quiet escalation in what it takes to verify that a...

Favorite Featured Stories

The Infrastructure for Arguing Back

The Infrastructure for Arguing Back

Microsoft's coding-agent study reports a 24% increase in merged pull requests across tens of thousands of engineers, the...

The Clerk, Not the Copilot

The Clerk, Not the Copilot

The AI industry's favorite metaphor right now is the copilot: your agent assists, learns, grows more capable, eventually...

The Click as Social Settlement

The Click as Social Settlement

Every click on "Place Order" or "I Agree" carries a compressed bundle of assumptions: visibility, intent, authority, acc...

Alexandre Drouin and the Tightening Definition of "Done"

Alexandre Drouin and the Tightening Definition of "Done"

Alexandre Drouin's publicly documented projects at ServiceNow trace a quiet escalation in what it takes to verify that a...