Jonathan Kingston

The lethal trifecta is the security heuristic I reach for most often with agents.

In the first post, I argued that the lethal trifecta is a capability test, not a safety model.

A new paper, WAAA!

Four pieces landed in the past two weeks that circle the same problem from different altitudes.

When you wire AI into a workflow, the choice of model matters less than you might expect - often the harder question is "how does the model get the context it needs?"

The agentic web has a consent problem.

Dave Rupert's Magic Words names a thing I've been stewing on.

The HTML <canvas> element has a gap that <video> solved years ago: there's no declarative way to provide a static visual representation.

AI isn't magic.

At Mozilla we have been working on a feature called containers, which gives users the ability to separate their lives online to prevent being tracked.

TL;DR: ARIA is a hack on real accessibility, reimplementing HTML in ARIA is silly, subverting password managers is evil, expecting the developers to start using role="password" likely wont happen, CSS replaced elements can't use pseudo elements and we sho…

Creating dynamic CSS doesn't sound exciting, however it is certainly a time management issue of large scale sites on the web.

There are many times that I have been writing sites with the desire for the client side to call the server in a safe and idempotent way with a request body for sending more data than a GET can, or data that can't be recorded via referral logs.

Google appears to be pushing further into the open internet platform in a land grab bid against closed source providers.

The all new CSS colour: 'rebeccapurple' which is backed with one of the most moving stories I have heard in a long time.

Don't over optimise too early A common trend I see more in JavaScript, than in any other language is to over optimise every line of code.

What I first thought

So having written enough heavy AJAX applications I can tell you that a massive frustration is that there is not any ability to detect natively when the browser follows a redirect over AJAX, this makes handling redirection difficult in the client.

Laravel was suggested to me last week and I have only just got time to take a look at it properly.

I have been inspired to write blogs over the years, without ever making more than several posts before quitting.