Archived Week — Week of September 7, 2026 · 15 signals

Executive summary

After calling for the death of the browser last week, this one is shaping up to be whiplash on cybersecurity concerns: Instinct users' agent inboxes follow a guessable address pattern, a researcher says 6TB of logs bought from a Chinese LLM router held keys to governments and major firms, and OpenAI published a Defense Factory playbook for hunting its own bugs. Meanwhile the personal-agent race got real: Zuckerberg pitched Muse, Meta's agent with its own VM, while a 24/7 phone recorder and cookie-synced cloud agents showed how much access these agents want. An Anthropic researcher's post putting over 10% odds on AI killing everyone escaped the SF bubble.

Download this week (Markdown)

01 Zuckerberg on Muse, Meta's personal agent with its own VM, which he says will pay for itself by making people money In an hour-long Sources podcast, Mark Zuckerberg discussed Muse, Meta's new personal agent that runs in its own virtual machine, its pricing and business model, privacy and security for personal agents, and who wins the personal-agent market. Heath calls it very capable after days of use. Dan's takeMeta envisions a new agentic market / economy where they can levy taxes. Instinct insists on keeping their prod free, hinting they are thinking the same. agentic workflowsaiinnovation↔ overlaps: Stealth startup Instinct pitches an always-on personal… · Instinct users' agent inboxes follow a guessable pattern… · The killer feature of Instinct and Muse is productized… · Muse appears to be the only personal agent shipping a… · Zuckerberg: Muse Charm, a keychain device for talking to… · Nat Friedman: Muse was built from scratch but heavily… · Muse opens connectors to developers; 13 predictions on the… · OpenAI Dev Day in one post: Dots personal assistant… · DuckDuckGo: Meta's Muse is invasive 'even for Meta', here… · Meta pauses Muse sharing after researchers find users'… · Wabi raises $55M Series A at $1.25B for 'personal… 02 Instinct users' agent inboxes follow a guessable pattern, opening a prompt-injection door Lenny Bogdonoff pointed out that Instinct assigns each user a predictable firstlast@mail.instinct.com address, so anyone can email prompt-injection payloads to users who have publicly announced they are on the platform. Dan's takeprompt injection attack on Instinct is possibly just a tiny demo of what's to come. all similar systems vulnerable. Instinct aura still positive in SV. cybersecurityagentic workflowsai↔ overlaps: Stealth startup Instinct pitches an always-on personal… · Researcher says 6TB of logs bought from a Chinese LLM… · Zuckerberg on Muse, Meta's personal agent with its own VM… · Argument: iMessage agents violate Apple's ToS, and the… · An Instinct agent stuck in a loop, and no support layer to… · Claude Code put a user's personal data in HTTP headers… 03 Researcher says 6TB of logs bought from a Chinese LLM router held keys to 7 government entities and 19 major firms Security researcher Chaofan Shou says he bought a 6TB dataset of logged model traffic from a top Chinese LLM router and found SSH keys, VPN configs, Aliyun keys, and GitLab tokens sufficient to take over 7 government entities and 19 firms including Xiaomi and Huawei. The claim is unverified. Dan's takethings have never been more fun cybersecurityaiagentic workflows↔ overlaps: Instinct users' agent inboxes follow a guessable pattern… · OpenAI publishes 'Defense Factory' playbook: 250+ people… · User says Grok Bot leaked all his API keys into its own… · First sighting: an NDA clause governing AI use, barring… · DHS orders all civilian federal agencies to remove DeepSeek… 04 Browser Use Cloud keeps agents logged in by syncing your local Chrome cookies, so the agent never sees a password Browser Use Cloud now lets a hosted agent stay authenticated by syncing cookies from the user's local Chrome session, so the agent inherits logins without ever handling passwords, an answer to the recurring problem of giving remote agents the user's credentials. Dan's takethat whole process sucks. can we do better? agentic workflowsbrowserscybersecurity↔ overlaps: A joke prompt for a cloud-native, MCP-controllable Arc… · Breakdown: ChatGPT Work now ships its own browser, compute… · Garry Tan calls Aside the best browser for giving AI agents… · A ChatGPT shortlist of cloud browser infra for agents puts… · Hermes can now log into websites from 1Password, Bitwarden… · 1Password launches '1Password for Agents' with Muse, Grok… · Browser Use open-sources browser-harness: let Claude Code… 05 Argument: the final UI is language in, intelligence, then text, voice, or a generated interface out signüll argues the end-state interface is now clear: text or voice in, intelligence in the middle, and text, voice, or a generated interface out when needed, and predicts this loop becomes the default for every device and agent in every context. Dan's takeone opinion; but maybe too unimaginative aiagentic workflowsinnovation↔ overlaps: Argument: agent-to-agent negotiation makes websites, and… · watchOS 27 drops the full app launcher for a Siri-first… · David Marcus: the death of the interface means money stops… · '99% of the population doesn't know how to open a… · Jack Dorsey's Block releases Dessa, a full-duplex… 06 OpenAI publishes 'Defense Factory' playbook: 250+ people and cyber models hunting its own vulnerabilities OpenAI says it mobilized more than 250 people and its latest cyber models to find and fix vulnerabilities across hundreds of internal systems, and released the architecture and a playbook for a continuous loop where agents find, validate, and verify fixes. Dan's takeOAI doing some pen testing cybersecurityaiagentic workflows↔ overlaps: Researcher says 6TB of logs bought from a Chinese LLM… · 'HEIF Heist': one image-library bug let researchers take… · NVIDIA proposes an Open Agent Safety Platform: OpenShell… · Anthropic acquires Opaque, the Berkeley-born confidential… 07 A ChatGPT shortlist of cloud browser infra for agents puts Browser Use Cloud first on cost, then Kernel, Browserbase, Steel, Hyperbrowser Browser Use co-founder Gregor Zunic shared a ChatGPT answer ranking cloud browser infrastructure for AI agents: Browser Use Cloud first at a cited $0.02 per browser-hour, then Kernel, Browserbase, Steel, and Hyperbrowser, while noting there is no uncontested winner. Founder-shared, so read accordingly. Dan's take"best browser infra" agentic workflowsbrowsersai↔ overlaps: Browser Use Cloud keeps agents logged in by syncing your… · Browserbase sponsors Theo's AI-model ranking video, a sign… 08 Anthropic researcher: over 10% chance AI kills all humans within a decade, and no plan yet for superintelligence alignment Anthropic alignment researcher Evan Hubinger said he personally puts more than 10% odds on AI killing all humans within the next decade, adding that Anthropic does not yet have a plan to solve superintelligence alignment. The post passed 34 million views in a day. Dan's takethis is making the rounds. 34m views at the time of posting this to the radar means it escaped SF bubble aiculture↔ overlaps: Nick Cammarata: with agentic tools, the vast majority of… 09 A developer drops every per-agent MCP for Executor: one gateway, every agent inherits every tool Wilson Wilson says he disconnected all individual MCP servers across Claude, Codex, Hermes, Grok, and Cursor and replaced them with Executor, a single MCP gateway through which every agent inherits the same tools, calling the per-client setup overhead the main pain. Dan's takethis remains an opportunity agentic workflowsai↔ overlaps: Reacting to Artifacts gaining live MCP-connector calls, a… · 'OpenRouter for tools': the pitch for one sign-up that… 10 An open-source iPhone app records your life 24/7 so agents get a transcript of it Browser Use co-founder Magnus Müller released life-recorder, an open-source iPhone app that records audio in the background, syncs it to a Mac, and has local Whisper write a running life.md file so agents have context on the user's day. Astra sets it up. Dan's takeheh agentic workflowsaicybersecurity↔ overlaps: Stealth startup Instinct pitches an always-on personal… · A $7 ESP32 lets an AI agent control a stock iPhone: it… 11 Coefficient Giving launches Project Tailwind, funding AI safety founders from $200k to $200m+ Coefficient Giving launched Project Tailwind, a call for founders to start new AI safety research, technology, and institutions, with pre-seed ($200k to $2m), seed ($2m to $20m), and scale ($20m to $200m+) funding tiers and a curated list of unowned problems. Dan's takeI applaud this. could turn into a standards body or other industry org aiinnovation 12 Anthropic's economics team publishes scenario models for AI's effect on growth, jobs, and wages by 2030 Anthropic released an interactive model of how AI could affect economic growth, employment, and wages by 2030, inviting readers to submit their own forecasts and compare them with responses from more than 10,000 Americans. Dan's takenot good aiculture↔ overlaps: Anthropic: robots can already do 74% of physical tasks but… 13 Atlassian product director bringing agents to Jira starts building in public on X Matt Canham, a Director of Product at Atlassian working on bringing agents to Jira, introduced himself on X and committed to sharing what he is building and how he thinks about product craft, with open DMs. Dan's takecool exec turn to storytelling agentic workflowsculture 14 Analysis cited by Polymarket: Waymo roughly 900% safer than human drivers over 25.3 million autonomous miles A Polymarket post cites an analysis finding Waymo's self-driving vehicles were roughly 900% safer than human drivers across 25.3 million autonomous miles. The post does not link the underlying analysis. Dan's takesolid stats innovationai 15 A 2004 Nokia 9300 still loads parts of today's web through Opera Mini A Nokia enthusiast in Thailand showed a Nokia 9300 communicator from 2004 loading present-day websites through Opera Mini, which renders pages on a proxy server and sends a compressed version to the device. Dan's takea 2004 Nokia 9300 can still browse the web today using Opera Mini browsersculture