Calls, puts & mise en place
Appel & Mise
Vol. I · No. 10Sunday, November 1, 2026 · 47° & overcast on the UWSThe week’s best, every Sunday
BTC$78,029+0.9%ETH$2,269+1.2%
The lede of the week
Calum Hall, Phorion · from Saturday’s paper
Two versions of the official Claude Code for VS Code extension — 2.1.312 and 2.1.313, as served by the Cursor Marketplace — shipped with an SSH backdoor prepended to the minified bundle as an immediately-invoked function, so it ran the moment Node loaded the file: before the extension's own activate callback, before any user interaction, before anything that might have looked at it. Cursor has pulled both, and the macOS inbound path happens to be broken by a bug in the malware itself, but the key planting, the persistence and the host reconnaissance beacon all land regardless. The ten-minute version for anyone who got to this late: check which marketplace each of your editors pulls extensions from, and what version is sitting in it right now.
Four separate holes in the AI toolchain in seven days — a backdoor in the official editor extension, one customer's cache served to another, privilege escalation in a tool people use precisely because they trust it, and a share link that became an account takeover — and all four have the same shape: something ran before anyone looked at it. The week's other story is the money, and it rhymes. Prices fell because the cache made the expensive part free, the flat seat is a subsidy with a date on it, and a studio found out what thirty times payroll in tokens buys. Both halves are about the same reflex, which is what you quietly stop inspecting once the tooling is good enough to stop making you look.
The Sunday feature
Max Woolf, minimaxir · from Monday’s paper
The obvious explanations for a four-month collapse in inference prices are a price war and a land grab, and Woolf's argument is that both are mostly wrong — the money is in cache reads. Once a provider can serve a repeated prefix from a warm KV cache instead of recomputing it, the marginal cost of the dominant workload falls off a cliff, and agentic tools are the purest possible version of that workload: the same enormous system prompt, over and over, thousands of times a day. That reframes the published per-token number as a bet on your access pattern rather than a discount, which is the useful lens for anyone budgeting a product on top of these APIs. Read alongside LeadDev's piece below, it also explains why the cheap seat and the cheap token are two different questions with two different answers.
AI & Agents
Simon Willison · from Friday’s paper
A game studio running a live world almost entirely on autonomous models, spending something like thirty times its payroll on tokens and treating an hour without a ship as a SEV-0 — which is either the most instructive operational experiment of the year or an expensive way to find the ceiling, and the honest answer is that nobody knows yet. Worth reading for the organizational details rather than the models: what you have to change about on-call, review and release cadence before a setup like that stops being a stunt.
Y Combinator Labs · from Friday’s paper
Fifty agents dropped into a Minecraft survival world stripped the trees near spawn in about ninety seconds and then, unprompted, invented a government — a ration ledger, written rules, permits, appointed officials — because the commons problem arrived before anything else did. The reason to care is not the novelty but the shape: coordination overhead is what emerges first when you scale agents, and it emerged here as bureaucracy, which is probably what it will look like in your system too.
Mukul Goyal, Parameter Labs
A public ChatGPT share link was enough to run attacker JavaScript inside the victim's signed-in session, read private conversations that had never been shared, and call authenticated APIs as them — no install, no project, no pasted code, just opening the link. The mechanism is the lesson and it is almost elegant: an interactive graph quietly loaded MathLive, which registered a postMessage listener on the main page that did not check the sender's origin, and the sandboxed HTML Preview supplied an untrusted sender. Two features that were each fine alone composed into account takeover; OpenAI fixed it on October 26 and rated it P1.
Engineering & Leadership
Will Larson, Irrational Exuberance · from Saturday’s paper
Every pull request at Imprint now carries a file describing what the harness did to check its own work and — the load-bearing half — what it could not check, and a PR cannot leave draft without one. Larson is candid that the name misleads people into hearing 'tests'; the mechanism is closer to making the agent think out loud, and the second-order payoff is that the 'could not verify' column accumulates into an evidence-backed list of what to fix in the harness next. The cheapest idea of the week to steal.
James Stanier, LeadDev · from Thursday’s paper
The whole argument rests on one comparison: a month of heavy Claude Code and Codex use that would have cost roughly $2,180 metered, bought for $200 on a subscription. That gap is a subsidy, not a price, and the large enterprise contracts have already been moved off it — so the planning question for next year is not which tool your team likes but what happens to your unit economics when the flat seat becomes a meter.
Gergely Orosz, The Pragmatic Engineer · from Saturday’s paper
A hiring manager inside the company whose tools caused the problem has dropped data-structures questions from the loop entirely, on the grounds that they now yield zero signal — which is a more credible place for that claim to come from than most. The ballast around it is the better read: incident.io took AI spend from $4,500 per developer per month in August to $1,600 now, and Amazon has written AI usage into formal engineer and manager expectations.
Web & Product Craft
Nolan Lawson, Read the Tea Leaves
Frontends are being rewritten this year because some framework is 'better for agents', and Lawson's complaint is that nobody has shown the numbers — so he built the benchmark: one spec'd Pokémon app, each framework built by an agent using that tool's own MCP or skills, scored on development time, tokens spent, lines of code, and Lighthouse performance and accessibility against a conformance suite the agent could not game. He is scrupulous about the caveats, including that the whole thing is wildly stochastic, which is itself a finding. For anyone choosing a meta-framework for a side project on evidence rather than vibes, this is the only such benchmark that exists.
The Zamzar Team
Two brothers started a file-conversion site on dial-up in 2006 with a secondhand HTML4 book, and twenty years later it has done 766 million conversions for 550 million people, serves over a million API requests a day, and is still a small independent UK company with no venture money. The incidental history is the fun part — helping the inventor of PowerPoint recover lost decks, a cease-and-desist from Google, sponsoring a Scottish curling team — but the useful part for anyone with a side project is the boring thesis underneath: people still need to convert files, and outlasting eight hype cycles turns out to be a strategy.
New York & the Table
Gus Saltonstall, West Side Rag
Today, so this is the practical one: the park drives are shut, all three traverses are closed from midnight tonight, and Central Park West, Columbus and Broadway below 77th go progressively dark from 5am until half past nine in the evening. The Family Reunion zone sits on West 69th through 71st between Columbus and Central Park West from 11 to 6, which is the bit that catches people who did not plan to be near the finish at all.
Scott Lynch, Hell Gate · from Saturday’s paper
Chi Ian Chan missed Honolulu musubi enough to start making his own, sold it through a neighborhood Facebook group, graduated to Sunday pop-ups at a local sushi restaurant, and then spent sixteen months on permits and construction to open a narrow storefront on West 72nd. Spam with egg is $7, shrimp $7.25, with shiso and vegan versions — the week's best food story in the neighborhood and a walk rather than a trip.
Diversions
The Guardian · from Friday’s paper
He died at home in Los Angeles at 86 after what his spokesperson described as a brief journey with Alzheimer's and Lewy body dementia. The obituary is good on the two decades people forget — a fixture of the British stage long before a syndicated science-fiction series made him famous at 47, which is a useful fact about second acts.
Luke Buckmaster, The Guardian · from Friday’s paper
The first end-to-end AI-generated series on a major streaming platform runs two seventeen-minute episodes set at Alamut Castle in the eleventh century, and the review's diagnosis is specific rather than merely dismissive: the palette is genuinely striking right up until a person has to move through it. Worth ten minutes of reading if not of watching, because the failure mode it describes — everything convincing except continuity of intent — is the same one that shows up in generated code.
Loose Change
The Guardian · from Saturday’s paper
Lunny, dead at 79, is the reason Irish traditional music has a bouzouki in it: handed a round-backed Greek one by Andy Irvine in 1970, he had it rebuilt flat-backed with a shorter neck, and the instrument stayed. Across Planxty, the Bothy Band and Moving Hearts his actual job was arranger — instinctively drawn, as the Guardian puts it, to new harmonic and rhythmic structures — and he went on to produce Kate Bush, Sinéad O'Connor and Elvis Costello and to win an Emmy as musical director of Bringing It All Back Home.
Jennifer R Vail, Aeon
A tribologist — someone who studies, professionally, what happens when two things rub together — on the fact that an entire industry has spent a decade promising to make everything frictionless while her field quietly established that friction is what makes motion possible at all. She has spent a career reducing it in jet engines and increasing it to get plaque off teeth, and the essay reads technological history through that paradox, from the log roller to the wheel to the orbits of stars. Twenty-six hundred words, and a genuinely strange thing to learn is a science.
Jake Currie, Nautilus
In 1909 a farmer brought a Barred Plymouth Rock hen with a breast tumor to the Rockefeller Institute, and Peyton Rous ground the tumor up, filtered out every cell, injected the remaining fluid into healthy birds, and watched them grow tumors too — which meant cancer could be transmitted by something smaller than a bacterium. The field declined to believe him for fifty years; he got the Nobel in 1966, aged 87, and the virus named after him went on to show how a proto-oncogene becomes an oncogene.
The Back Page
David Pasztor, We Ain't Got No History
A week that opened with a 0-2 home defeat to Spurs and a fifth straight shootout loss to Liverpool closes with Morgan Rogers running into acres of space off a Lavia turnover, Lisandro Martínez elbowing Fofana in front of VAR, and Palmer hammering in the penalty for his fiftieth league goal. Alonso went with a back four, a midfield two and four forwards without a recognized striker; Chelsea are fourth with a clean sheet, Sunderland away next Sunday, then the international break.
Brady Klopfer, Golden State of Mind
In the first Game 7 in WNBA history the Valkyries beat Atlanta 68-63 at Chase Center to win a title in their second season — the fastest any team in American professional sports has got to the top. It was a defensive rock fight decided by one quarter of Gabby Williams, fifteen points in the third on three contested threes and a jumper, turning a nine-point deficit into the lead they never gave back.
Around town
Tue Nov 3 · 6:00pm
Follia, 179 Third Ave, Gramercy
The killed ones are the useful half of the talk and almost nobody writes them up, so the only place to hear what did not survive contact with production is a room where someone says it out loud. Free, and a restaurant basement tends to get franker than a stage does.
professional
Mon Nov 9 · 6:00pm
Columbia Business School, 645 W 130th St, Manhattanville
Investors are a useful control group: they have no incentive to oversell the tooling and every incentive to know what it actually does to diligence. Free, and it is the rare industry evening he can walk to.
professional
Daily through Tue Nov 3 · 12:15pm–9:15pm
Film Forum, 209 W Houston St
In August 1972 William Greaves put a camera in Duke Ellington's St. Nicholas Avenue townhouse and filmed a Harlem Renaissance reunion — Romare Bearden, Aaron Douglas, Eubie Blake, James Van Der Zee — many of whom had not seen each other in fifty years, and the cocktail party turns into debate and unsettled scores. He never finished it; his son David, one of the cameramen that day, cut it from the restored footage, and it won this year's Lavine/Ken Burns Prize. A hundred minutes.
casual
Tue Nov 3 · 8:00pm
Film Forum, 209 W Houston St
Samuel Fuller's 1953 pulp opens with a pickpocket lifting microfilm out of a purse on the subway and ends with a showdown in a station, which is the whole reason it is in a series about the city's transit. Eighty minutes, Thelma Ritter producing a price chart when asked to inform on someone, and a Cold War plot the French dub rewrote into a drug deal because Fuller's politics horrified them.
casual
Tue Nov 3 – Sun Nov 22
David H. Koch Theater, Lincoln Center
Taylor built dances on walking, running and standing still — ordinary human motion arranged until it reads as music — and the company has kept the repertory alive for sixty-five years while adding new work each season. Three weeks of it at the Koch, which is the closest great theater to the neighborhood, and modern dance is one of the few art forms where knowing nothing going in costs you nothing.
say yes
Quote of the week
“It's not the em-dashes, it's the load-bearing tapestries.”
— Martin Fowler, on how you can tell
On this day
November 1, 1512 — the scaffolding comes down in the Sistine Chapel and Michelangelo's ceiling is shown to the public for the first time, four years after he took a commission he had tried to refuse on the grounds that he was a sculptor. Two hundred and forty-three years later to the day, the Lisbon earthquake arrives on All Saints' morning with the churches full, and the aftershock runs through European philosophy for a generation — Voltaire included. The same date got the ceiling revealed and the floor taken away.