Reading List

The most recent articles from a list of feeds I subscribe to.

Phantom App Updates, Part 3

digidude23: Is Apple creating updates for 3rd party apps now? This update from Apple will improve the functionality of this app. No new features are included. iSan4eZ: Apple inserted this text into my app and issued an update with the same version. I’m sure about it as I update the app on my phone as […]

Notes From Setting Up New Apple Devices

This weekend, I helped my non-techie father migrate to a new iPhone 17e and MacBook Air: Device Transfer initially couldn’t find the old iPhone SE. It turns out that years ago he’d read some article that said Bluetooth was unsafe and so he’d turned it off. The setup assistant repeated the new age verification question […]

Apple Creating All the Apps

John Gruber: Pogue interviewed Scott Forstall and got this story, about just how far Steve Jobs thought Apple could go to expand the iPhone’s software library while not opening it to third-party developers: “I want you to make a list of every app any customer would ever want to use,” he told Forstall. “And then […]

[Sponsor] Zed, a Font Superfamily

Zed is a type system that was developed with one question in mind: what do readers actually need? Not what looks good in a type specimen, but what works for the widest possible range of readers. We tested Zed with visually impaired patients at a French ophthalmology hospital and found that Zed Text outperformed Helvetica in terms of reading speed across all patient groups. Designed from scratch to perform different functions, it comes in two optical versions — Text and Display — with four variable axes and support for 547 languages, including endangered ones. It is available directly from the designers.

Anthropic Accidentally Leaked the Entire Claude Code CLI Source Code

Samual Axon, reporting last week for Ars Technica:

Early this morning, Anthropic published version 2.1.88 of Claude Code npm package — but it was quickly discovered that package included a source map file, which could be used to access the entirety of Claude Code’s source — almost 2,000 TypeScript files and more than 512,000 lines of code.

Security researcher Chaofan Shou was the first to publicly point it out on X, with a link to an archive containing the files. The codebase was then put in a public GitHub repository, and it has been forked tens of thousands of times.

Anthropic publicly acknowledged the mistake in a statement to VentureBeat and other outlets, which reads:

Earlier today, a Claude Code release included some internal source code. No sensitive customer data or credentials were involved or exposed. This was a release packaging issue caused by human error, not a security breach. We’re rolling out measures to prevent this from happening again.

Not exactly confidence inspiring, given how incredibly sensitive much of the material users give Claude and Claude Code access to. To say the least, it undermines the message that companies should trust their source code to Claude Code when Anthropic accidentally leaked their own source code.