AI 101 — What is an LLM router?

An LLM router is a layer that sits between your app and a set of AI models and decides, per request, which model should answer — cheap and small for the easy question, expensive and strong for the hard one. You still have one API to call; the router picks the model behind it. Why the question is live right now For two years the default was one model for everything, because there was one model worth using. That is no longer true.

ChatGPT share links could hijack your account: the $5,000 bug

A shared link is the most ordinary thing you can send someone, which is exactly why it is the best place to hide an attack. Two stories from the weekend — one about a link that could act as you, one about a turbine plant that a court says has to answer for its emissions. Anyone who opened a crafted ChatGPT share link could have had their account read and used, without installing anything or pasting a line of code.

The Take — The Cursor backdoor failed by luck, not by design

For eleven hours on Thursday, Cursor's marketplace served a tampered build of Anthropic's own Claude Code extension, and the thing that stopped it from becoming an SSH backdoor was not a control. It was a bug in the malware. Two bugs, in fact. That is the part of this story I cannot get past: the supply chain for AI coding tools is currently defended by the incompetence of strangers, and nobody in the chain has proposed a defense that would work against a stranger who is competent. The facts…

AI detectors made the em dash a tell. Writers are dropping it

Sometime in the last year the em dash stopped being punctuation and became evidence. Bloomberg's Morgan Meaker reports that writers are now editing around the furniture of their own prose: stripping em dashes, avoiding the "not X, but Y" construction, steering clear of a short list of words that read as machine-issued, and, in some cases, planting typos on purpose to look more human.

Open Source Radar — October 31: Lightpanda, a Browser for Agents

Today's board is plumbing: a browser with no rendering engine, a governance gateway for coworker agents, and two official skill libraries — the layer agents actually run on. Lightpanda (Zig, 38,722 stars, AGPL-3.0) is a headless browser written from scratch for agents instead of another Chromium fork, and it took a daily trending slot again today with a push this morning.

Deep Dive — OpenAI's $30B round fell to $20B at a $1.25T valuation

In September, OpenAI went to investors asking for $30 billion at a $1.4 trillion valuation. On Thursday night the Financial Times reported the target is now about $20 billion at $1.25 trillion, because some investors cut the size of their commitments amid the AI selloff, according to the FT. Hours earlier, the Wall Street Journal had put a number on how far the round has actually got: roughly $11 billion committed, less than half the original target, the Journal reported. That is the single…

AI 101 — What is generative engine optimization (GEO)?

Generative engine optimization is the practice of shaping a web page so that AI answer engines — ChatGPT, Google's AI Overviews, Gemini, Claude — quote it and link to it when someone asks a question. It is search engine optimization for a search box that writes an answer instead of handing you ten links. You have probably met it without the name. Someone asks ChatGPT a question about your industry and the reply cites four websites, three of them competitors.

Apple Intelligence in China: Qwen comes to Siri on November 4

Two years after the rest of the world got it, Apple's AI has a launch date in the company's biggest market outside the United States — with Alibaba's model riding along, and the rebuilt Siri left at the border. Apple will bring the first batch of Apple Intelligence features to China on November 4 as a developer beta, with the public release in December alongside iOS 27.3, and Alibaba's Qwen will be available inside Siri, the writing tools and Visual Intelligence.

Claude Code extension backdoored in Cursor marketplace for 11 hours

The AI coding stack got its first serious supply-chain scare on Thursday: Cursor's marketplace served a modified build of Anthropic's own Claude Code extension. Also today, Salesforce buys its way onto the battlefield and Starbucks would like to recognize your car. Anthropic's Claude Code extension was tampered with inside Cursor's extension marketplace and, for about eleven hours on Thursday, ran code that tried to plant a persistent SSH backdoor on developers' machines.

The Take — Stop blaming open weights for the patch gap

Six consecutive Firefox releases fell to a downloadable model at roughly $1,000 a version, and the reflex will be to reopen the open-weights liability argument. That reflex is wrong. The vulnerability that made this work was not the model — it was a release calendar that hands attackers a machine-readable map of every flaw before it hands users a fix. The experiment is Epoch AI's, and it is clean enough that the argument can be had on evidence rather than vibes.

DoorDash: several hundred agent orders against 993 million in Q3

An analyst on DoorDash's third-quarter call asked Tony Xu how the business changes when people order food through AI agents instead of an app. The CEO answered with a number nobody on Wall Street had: third-party agents have placed "several hundred" orders in total, across the whole time they have been live. DoorDash booked 993 million orders in the same quarter.

GLM 5.3 broke six Firefox versions at $1,000 an exploit

An open-weight model anyone can download turned public security fixes into working browser attacks — and the bill was a rounding error. Researchers at Epoch AI gave GLM 5.3 nothing but a target version of Firefox and a patch feed, and the model built working exploit chains against six consecutive releases on its own, at a marginal cost of roughly $1,000 in API fees per version.

See all