EmDash Feedback

Introducing EmDash — the spiritual successor to WordPress that solves plugin security

Today we are launching the beta of EmDash, a full-stack serverless JavaScript CMS built on Astro 6.0. It combines the features of a traditional CMS with modern security, running plugins in sandboxed Worker isolates.

emdash/rfcs/0001-plugin-registry.md at wip/plugin-rfc · emdash-cms/emdash

EmDash is a full-stack TypeScript CMS based on Astro; the spiritual successor to WordPress - emdash-cms/emdash

EmDash

The Astro-native CMS. A modern successor to WordPress with type-safe content, plugin extensibility, and portable deployment.

RFC: Decentralized Plugin Registry by ascorbic · Pull Request #694 · emdash-cms/emdash

Draft RFC for decentralised plugin registry. Rendered markdown: https://github.com/emdash-cms/emdash/blob/wip/plugin-rfc/rfcs/0001-plugin-registry.md

Get an Emdash

If you can't remember the key command for an emdash you can copy one here

Why Anthropic believes its latest model is too dangerous to release

“The language models we have now are probably the most significant thing to happen in security since we got the Internet.”

Front page · Saturday, June 6, 2026

On ThinkStack: Linux kernel adopts no-embargo policy as LLMs flood maintainers with CVEs · Evan You ships Vite Plus to unify Rollup, Oxlint, Oxformat, and Vitest into one Rust/Go toolchain · 88% of firms use AI coding tools but only 5.5% see business impact, PlatformCon study fin

Vite+

The Unified Toolchain for the Web

Improving the trustworthiness of Javascript on the Web

Today, there's no way to audit a site’s client-side code as it changes, making it hard to trust sites that use cryptography. We preview a specification we coauthored that adds auditability to the web.

Web Crypto’s SubtleCrypto: A Masterclass in Developer Hostility and How It Strangles the Modern Web

Not Subtle, Just Sabotage — An API Against the Web

FAIR, WordPress, and Knowing When to Stop

Over the past year, we, Karim & Joost, have written and talked extensively about the challenges facing WordPress. We’ve been critical. At times, very critical. Of leadership, of governance, of the way decisions are made and enforced. We stand by that criticism. Matt’s way of operating has, in our view, been harmful. It has led […]

Defeating Prompt Injections by Design

Large Language Models (LLMs) are increasingly deployed in agentic systems that interact with an untrusted environment. However, LLM agents are vulnerable to prompt injection attacks when handling untrusted data. In this paper we propose CaMeL, a robust defense that creates a protective system layer around the LLM, securing it even when underlying models are susceptible to attacks. To operate, CaMeL explicitly extracts the control and data flows from the (trusted) query; therefore, the untrusted data retrieved by the LLM can never impact the program flow. To further improve security, CaMeL uses a notion of a capability to prevent the exfiltration of private data over unauthorized data flows by enforcing security policies when tools are called. We demonstrate effectiveness of CaMeL by solving $77\%$ of tasks with provable security (compared to $84\%$ with an undefended system) in AgentDojo. We release CaMeL at https://github.com/google-research/camel-prompt-injection.

Human Emacs

Emacs as a free software project focuses on empowering its users without compromising its ethical principles. As users of Emacs, we are interested in ensuring that we can continue to use it and contribute to it in good faith in the future.

combat LLM spam by building a web of trust

vouching on tangled!