--- title: "Daily Brief" canonical: "https://current.tinyfish.ai/issue/15/daily-brief" publication: "TinyFish" publisher: "TinyFish" language: "en-US" guide: "https://current.tinyfish.ai/llms.txt" permalink: "https://current.tinyfish.ai/issue/15/daily-brief" issue: 15 section: "daily-brief" description: "Your daily digest of web developments through the lens of enterprise agent deployment" authors: ["Sable Whitford"] published: 2026-02-08 updated: 2026-11-06 articles: 22 --- # TinyFish > CURRENT is a journal about AI agents in production, for the engineering and product leaders who have to make them work. Drawing on experience building enterprise web agents, it explains why the demo succeeded and the deployment didn't, and what that means for choosing vendors, briefing the board, and avoiding mistakes others have already made. [Read on the website]() ## Issue 15 — Daily Brief Your daily digest of web developments through the lens of enterprise agent deployment ### Claude Code Has Been Politely Signing Its Web Traffic With Your Email - [Claude Code Has Been Politely Signing Its Web Traffic With Your Email]() — By [Sable Whitford]() · Published 2026-11-06 Developers are spending **this Friday** grepping their own outbound traffic. A GitHub issue filed Thursday says Claude Code 2.1.318 put the user's account email into the User-Agent header during web searches, which gives a copy to every server the agent touches. The reporter blames it for dozens of scam emails a day. Nobody has publicly shown that link yet, or that every user was affected. The explanation, relayed from a Claude Code team member, is almost funny. Anthropic gave the model your email so it would stop inventing names in `@author` tags. The model then behaved like a well-mannered bot and signed its curl calls with the only contact address it had, which was yours. ### Day two of the AI hangover Happy Friday. Anyone who has worked a follow-the-sun on-call rotation knows the pager doesn't go quiet overnight. It gets handed to whoever is awake. Markets work the same way, and Wall Street's handoff went badly. A little context before you scroll: - **Taiwan and South Korea trade on chips.** TSMC, Samsung and SK Hynix make up a huge slice of those indexes and build much of the silicon inside AI servers, so a US chip scare lands hard in Taipei and Seoul. - **Data centers need local permission.** States and counties decide zoning, water rights, tax breaks and grid hookups. That's how statehouse politics reaches a hyperscaler's build plans. - **"Neocloud" is the nickname for the newer GPU-rental companies** that sprang up to sell AI compute to the giants. Coffee first, then the charts. - **It didn't stop at the closing bell** — [Source]() — Published 2026-11-06 Tag: Markets Asia took the sell-off today. Taiwan's Taiex posted its biggest intraday point drop on record. The Kospi fell 8.7% and the Nikkei 6.7%. In the US, more than $2 trillion came off the Nasdaq and $1 trillion off the Magnificent 7. CNBC says Tesla and SpaceX lost over $420B combined. - **The 40% problem** — [Source]() — Published 2026-11-06 Tag: Data centers Cleanview estimates that about 40% of planned data-center capacity sits in states where newly elected governors pledged to pause or halt construction. Meta's president told TechCrunch the Democratic wins will make building data centers "a lot harder." Your capacity plan now has a governor in its dependency graph. - **The cracks were there before the vote** — [Source]() — Published 2026-11-06 Tag: Capacity crunch IREN says customers asked it to delay $4B in annualized revenue, per CNBC. Microsoft is also reportedly tightening oversight of neoclouds, including Nscale, Nebius and IREN, as construction delays and rising costs make new capacity harder to bring online. - **Subpoena season is coming** — [Source]() — Published 2026-11-06 Tag: Washington The Washington Post reports that Democrats are laying the groundwork to investigate some of tech's biggest companies. Apple, Meta and Musk-led firms are named as early targets. Executives who courted the president are scrambling to work out what a hostile Congress means for them. - **Microsoft dangles buyouts in front of 60,000 people** — [Source]() — Published 2026-11-06 Tag: Buyouts Microsoft employees are grappling with buyout offers extended to 60,000 people as the company pours more money into AI, the New York Times reports. The timing is rough with the AI trade wobbling. Somebody please count how many of those 60,000 carry a pager. - **Consumers, meanwhile, keep paying up** — [Source]() — Published 2026-11-06 Tag: Counter-vibe A Bloomberg study puts UK consumer spending on AI above £1B a year, and 5.1% of adults were paying for a subscription as of July. It also finds Claude rapidly closing in on ChatGPT. Investors are rattled, but the people using these tools keep renewing. ### Fresh off the launch pad - **OpenAI's GPT-6 Cyber goes bug hunting** — [Source]() — Published 2026-11-06 Tag: Security AI It's available to vetted customers only, and OpenAI's own framework rates it "Critical" for cyber risk. OpenAI says it found 81 new high-severity Firefox bugs. It also built working privilege-escalation exploits for 948 Linux vulnerabilities it reproduced, versus 166 for GPT-5.6 Sol. Those are exploits for existing bugs, not 948 new zero-days. Mozilla's Brian Grinstead says it still found new bugs after several generations of frontier-model hardening. - **Gemini Omni 1.2 Flash stretches to 15 seconds** — [Source]() — Published 2026-11-06 Tag: AI video Google's new video model makes native 15-second clips, up from 10. It sticks closer to your reference images and video, and you can keep editing across a multi-turn conversation. Price: $0.07 per second of 720p, 30% cheaper than before. Every clip gets an invisible SynthID watermark. - **Ricursive drops an open chip-design model** — [Source]() — Published 2026-11-06 Tag: Open model Ripple-65B Preview automates advanced chip design. It ships under the permissive Apache 2.0 license and costs $0.60 per million output tokens. Launching a chip-design model while chip stocks are getting flattened is either awkward timing or a very calm long-term bet. - **X rebuilds its web app** — [Source]() — Published 2026-11-06 Tag: Web apps X is rolling out a redesigned web app country by country for signed-in users. It runs on what X calls a single unified server, which it says means faster loads on slow connections. Every ops person just flinched at "single server." If your timeline suddenly snaps into place, this is why. - **Kugelblitz is a Mac-native Google Earth alternative** — [Source]() — Published 2026-11-06 Tag: Cool find Mac people are delighted to find a Google Earth alternative that actually feels at home on their machines. Good palate cleanser after all that red. Bonus trivia: "Kugelblitz" is German for ball lightning, and physicists use it for a black hole made purely from light. ### Picking fights - **Wero payments fail for GrapheneOS users at ASN** — [Source]() — Published 2026-11-06 Tag: Android freedom GrapheneOS is a privacy-focused Android without Google. Users say payments through Wero, the European payment wallet, fail at Dutch bank ASN but work at Triodos, which added Graphene's signing keys. ASN blamed device-integrity checks. Regular banking and iDEAL reportedly still work. Developers are calling Google's Play Integrity lockouts security theater. - **Blender's UI versus GPUI, round one** — [Source]() — Published 2026-11-06 Tag: Performance A new project claims Blender's approach to UI and runtime is much faster than GPUI, the GPU-accelerated framework behind the Zed code editor. The speed numbers come from the project itself, and skeptics are already picking at the methodology. Performance nerds have their weekend sorted. - **Google half-retreats on "no AI, no Search"** — [Source]() — Published 2026-11-06 Tag: Education Google told K-12 schools on its software to opt in to AI or lose Search. Its Chris Phillips said holdouts "will not have access to search." Sanders, Blumenthal, Hawley and New York Mayor Zohran Mamdani pushed back, with Mamdani accusing Google of using "monopoly power to force AI into our public schools." Schools can now turn on Search alone, though AI summaries stay. DuckDuckGo is pitching itself to schools. - **Brussels says TikTok's algorithm broke the rules** — [Source]() — Published 2026-11-06 Tag: EU vs. TikTok In preliminary findings, the EU says TikTok breached the Digital Services Act, Europe's platform-safety law, by failing to stop its recommendation algorithm from trapping users in harmful "rabbit holes." TikTok gets to respond before anything is final. DSA fines can reach 6% of global turnover. - **Hugging Face CEO puts P(doom) near zero** — [Source]() — Published 2026-11-06 Tag: Hot take P(doom) is AI-world shorthand for the odds that AI ends badly for humanity. Clément Delangue told Wired his is "close to zero," and that the bigger future risk sits with closed frontier labs rather than open source. He runs the internet's biggest open-model hub, so file under unsurprising. - **The $15 permission behind a $2.5B theft** — [Source]() — Published 2026-11-06 Tag: Crypto heist Blockaid says the Binance hackers moved about $2.5B, roughly 40% of a $6.3B haul, in a single Ethereum transaction. The wallet permissions that made it possible cost about $15 to set up. Those grants let one address move another's tokens, so one overly broad approval can empty everything. Least privilege, people. ### Favorite Featured Stories - [Faria Huq and the Reason Behind a Human Step]() — Published 2026-10-30 When a person takes control from an AI agent driving their web browser, the system records a human step, but not why. Faria Huq and her Carnegie Mellon collaborators have built tools around these moments: an agent that can't find the right forum, a shopper who realized the brand mattered only after seeing the agent's pick. Their system learns to predict when someone will step in. The reason it sets aside would tell a team whether to fix the agent, the website, or its understanding of the person. - [Who Pays While the Agent Waits]() — Published 2026-10-30 Google's new service for hosting AI agents starts from a fact anyone who has watched one run already knew: most of the time, the agent is waiting, for the model to answer or for a person to reply. So Google suspends idle agents and promises you won't pay for idle machines. Fair enough, but the wait still gets paid for. It moves into approval queues nobody times, and then onto the plan, which comes back exactly as it left, even if the stock it counted on has since sold. - [The Runnable Paper Needs an Identity Report]() — Published 2026-10-30 Paper2Agent, published in Nature in September, turns research papers into AI agents you can run. Hand over your data and the method executes, with no rebuilding it from prose. The authors want papers to carry an "agent availability" section saying whether a runnable version exists. - [Lebanon's Two Clocks and the Question Calendars Don't Ask]() — Published 2026-10-30 On March 26, 2023, Lebanon woke up on two clocks. The caretaker government had postponed daylight saving three days earlier. Churches and TV channels moved forward anyway, government offices stayed put, and most phones jumped on their own. Middle East Airlines printed every departure an hour earlier, so its planes still left at the same moment. That week made each calendar show what it had been storing: an exact instant, or a time on the wall that politics can move. Software assistants now make that choice without asking anyone. ## Other sections in Issue 15 - [Market Pulse]() - [Foundations]() - [Practitioner's Corner]() - [Echoes]() - [Vision]() ## More - [Publication guide]() - [Issue archive]()