CVE-2026-103572: Copilot in Visual Studio blocked .mcp.json by string. The agent wrote .mcp.json. and Windows saved it as the real file.
A Trailing Dot Let Copilot Rewrite Its Own .mcp.json. How Windows Paths Fool Denylists
Related
A Small Laptop Is a Full Build Kit: Bootstrapping with a Chromebook, Claude, and GitHub
A small laptop is a full build kit. Here's how far mine went. TL;DR: A reader suggested I publish...
Reverse Engineering Nvidia
NVIDIA's GPU Is Closed Hardware With a Compiler Inside It. Here's What Reverse Engineering...
When Is an AI Rewrite Finished?
AI makes it easier to attempt a replacement. The harder question is what the new software still owes...