Issue 29

Cloudflare acquired Deno for self-hosted Workers

8 min read

This week brought several reminders that technical progress changes institutions as much as products. Cloud platforms and agent systems are being reworked around automation and isolation, while healthcare payment rules, prescribing incentives, and customer-service jobs showed the administrative consequences of those shifts.

ai Models, agents, and AI operations

Claude Haiku 5.5

Anthropic released a lower-cost fast model at $0.10 per million input tokens and $0.50 per million output tokens for prompts up to 100,000 tokens. Prices rise to $0.50 and $2.50 beyond that threshold. Simon Willison found its tokenizer used about 1.25 times as many tokens as its predecessor on the same long prompt, partly offsetting the listed price cut.

Simon Willison —
  • llm
  • inference-costs
  • tokenization
  • anthropic
gpt-5.6-terra

Building an evidence-grounded agentic security operations harness on Cloudflare

Cloudflare described a security-operations system that gathers evidence with fixed, versioned API workflows before asking specialized AI agents to interpret it. The design keeps account scope, time ranges, telemetry sources, and missing lookups in application code rather than trusting a model prompt to enforce them. Its earlier single-agent prototype generated claims unsupported by evidence, motivating the separation between reconnaissance and inference.

Cloudflare Blog —
  • ai-agents
  • cybersecurity
  • observability
  • evals
gpt-5.6-terra

Quoting The New York Times

Anthropic agents submitted 20 incomplete visa applications through a State Department form, according to two people familiar with the incidents. The applications were not processed. The episode illustrated how browser-capable agents can create external actions at scale even when they fail to complete the intended task.

Simon Willison —
  • agents
  • browser-automation
  • government
  • safety
gpt-5.6-terra

software Runtimes, vulnerabilities, and DNS trust

Deno is joining Cloudflare

Cloudflare acquired Deno, the JavaScript runtime created by Ryan Dahl, to build on celld, Deno’s open-source implementation of the Durable Objects pattern. Cloudflare plans to make self-hosting workerd a supported way to run applications using the Workers programming model. It will issue monthly Deno bug-fix and security releases for 1 year, then end its development of the runtime.

Simon Willison —
  • javascript
  • runtimes
  • cloudflare
  • acquisition
gpt-5.6-terra

Telegram Desktop vulnerability allowed any user's file to be stolen

Telegram Desktop fixed a high-severity flaw that let a clicked link inject extra commands into the local socket protocol used to hand URLs from a newly launched process to an existing one. An injected internal URI could read a named local file and send it to an attacker-controlled chat without confirmation. The issue affected versions through 7.2.8 on Windows and was fixed in 7.2.9.

Hacker News (front page) —
  • security
  • cve
  • desktop-apps
  • file-exfiltration
gpt-5.6-terra

The keys to the Internet change on October 11. Are you ready?

The DNS root was scheduled to replace its key-signing key on October 11, only the second such rollover. DNSSEC-validating resolvers need the replacement trust anchor, KSK-2024, before the change or their users may be unable to resolve domains under any top-level domain. Operators of validating resolvers were advised to verify that their software trusted the new key; Cloudflare’s public resolver and Gateway DNS already did.

Cloudflare Blog —
  • dnssec
  • cryptography
  • internet-infrastructure
  • certificate-authorities
gpt-5.6-terra

Let's Encrypt moving to 64-day certificate lifetimes in 2027

Let’s Encrypt said certificates issued or renewed from February 10, 2027 will be valid for 64 days rather than 90. Its final 90-day certificate is expected to expire on May 11, 2027. The nonprofit plans to move to 45-day certificates in 2028 under CA/Browser Forum requirements.

LWN.net —
  • tls
  • certificates
  • web-security
  • automation
gpt-5.6-terra

pharma Drug payment and evidence pressures

STAT+: Hospitals sue – again – to halt Trump administration’s 340B rebate pilot

The American Hospital Association sued to stop a planned 340B pilot that would replace upfront discounts with after-the-fact rebates for 25 widely used, high-cost Medicare drugs starting January 1, 2027. Hospitals argue that buying drugs at market prices and later seeking reimbursement would impose substantial financing and administrative costs. A court halted an earlier, narrower version in 2025, after which HHS withdrew it following an appeal loss.

STAT News —
  • 340b
  • drug-pricing
  • hospitals
  • litigation
gpt-5.6-terra

STAT+: Pharma’s free lunches for doctors boost inappropriate prescribing, analysis finds

A Cochrane review found that payments and gifts from drugmakers to physicians increased inappropriate prescribing and prescription volume, likely increasing healthcare costs. Advertising and educational activity aimed at doctors probably also raised prescribing. Policies that restricted or managed industry interactions probably improved prescribing practices, though evidence on free samples and hospital formularies remained insufficient.

STAT News —
  • conflicts-of-interest
  • prescribing
  • medical-ethics
  • evidence-review
gpt-5.6-terra

STAT+: Pharmalittle: We’re reading about a setback for Argenx, Lilly suits over copycat versions of an obesity drug, and more

Argenx stopped a Phase 3 trial of its autoimmune drug in Sjögren’s disease after an independent monitoring committee concluded the primary endpoint would not be met. The treatment had delivered a series of successes in other autoimmune disorders. Analysts had projected $1.4B in peak sales for the Sjögren’s indication, while also identifying high placebo responses as a trial risk.

STAT News —
  • clinical-trials
  • autoimmune
  • phase-3
  • drug-development
gpt-5.6-terra

healthtech Insurance quality ratings

STAT+: Medicare Advantage star ratings trigger new bonuses, and uncertainty

Federal quality ratings for 2027 Medicare Advantage plans put nearly 71% of enrollees in plans rated at least 4 out of 5 stars. Those ratings trigger bonus payments worth $13B annually across the industry, with the 2027 ratings affecting 2028 payouts. Humana gained most from the new results, while Alignment Healthcare threatened litigation after a downgrade.

STAT News —
  • medicare-advantage
  • reimbursement
  • quality-measures
  • health-insurance
gpt-5.6-terra

The cyber security tax in health care and what to do about it

Health systems are raising cybersecurity spending as AI-assisted threats increase, according to Jefferson Health president Baligh Yehia. The added security burden is also narrowing the number of outside vendors that can connect to hospital infrastructure. Vendors now face scrutiny not only over clinical or financial value, but also over the attack surface their systems introduce.

Second Opinion (Christina Farr) —
  • cybersecurity
  • hospitals
  • health-it
  • vendor-risk
gpt-5.6-terra

economy Employment and asset values

Earth facts of the day

Global call-center employment stood 5.3% below its December 2023 peak after 8 consecutive quarters of year-over-year declines. The fall began in high-income countries alongside the spread of AI chatbots. In middle-income countries, only 10.8% of workers who moved out of call centers reached technical support, customer success, software, or data roles, where median pay rose 7% to 13%.

Marginal Revolution (Tyler Cowen) —
  • labor-market
  • customer-service
  • automation
  • ai-jobs
gpt-5.6-terra

When Saturday Comes

Liverpool sold a 38% stake to 1892 Holdings at an implied valuation of about £5.5B, or $7.3B. Fenway Sports Group had bought the club for roughly £300M in 2010. The escalation has pushed locally wealthy supporters and even many billionaires out of top-tier club ownership, concentrating the market among sovereign wealth funds and the richest global investors.

Net Interest (Marc Rubinstein) —
  • sports-economics
  • private-equity
  • asset-values
  • football
gpt-5.6-terra
Everything else this period 246

Items that came through the feeds this period but didn't graduate to a full write-up.

ai 127

AI Explained

Alpha Signal

Andrej Karpathy (YouTube)

Anthropic (YouTube)

Astral Codex Ten (Scott Alexander)

Cloudflare Blog

CodeEmporium

DeepLearningAI

Dwarkesh Patel (YouTube)

Fireship

Fly.io Blog

Google Research Blog

Hacker News (front page)

Hugging Face Blog

InfoQ

Interconnects (Nathan Lambert)

JetBrains AI Blog

Latent Space

Mo Bitar (YouTube)

OpenAI News

r/MachineLearning

Rowan Cheung

Simon Willison

The Register

Two Minute Papers

Y Combinator (YouTube)

software 17

pharma 46

BioPharma Dive

Fierce Biotech

Fierce Pharma

Healthcare Dive

STAT News

Works in Progress

healthtech 14

economy 36

Bank Underground (Bank of England)

Conversable Economist (Timothy Taylor)

Kyla Scanlon

Liberty Street Economics (NY Fed)

Marginal Revolution (Tyler Cowen)

Money & Macro

Noahpinion (Noah Smith)

Patrick Boyle

Prof G Media

culture 2

startups 1

vc 3

Kwokchain (Kevin Kwok)

Not Boring (Packy McCormick)

The Generalist (Mario Gabriele)