Skip to content

ViralLoop

Your next post already worked.

← Back to library

Loading the post

Remix this post

SaveShare

Your note

Private to you, and used when you remix this post.

Viral score

Why it worked

The mechanics

Hook
Style
Tone
Written for

Analysis by ViralLoop — not written by the original author.

← Back to library

Post by Simon Willison on X

Simon Willison@simonw

This one is pretty nasty - it tricks Antigravity into stealing AWS credentials from a .env file (working around .gitignore restrictions using cat) and then leaks them to a webhooks debugging site that's included in the Antigravity browser agent's default allow-list

2.2K likes49 repliesPosted Nov 25, 2025

View the original on X Written by Simon Willison. Captured Sep 4, 2026.

Remix this post

Your note

Private to you, and used when you remix this post.

51

Viral score

Based on absolute engagement — the platform doesn’t expose follower counts here, so large accounts score higher.

From likes, comments.

Why it worked

Opens with a short, self-contained line that is easy to take in at a glance.
Short enough to read in full without expanding, which removes a step before the point lands.

The mechanics

Hook: Plain observation
Structure: Hook → Landing
Style: Conversational paragraphs at a steady pace.
Tone: plain, matter-of-fact
Written for: People building with AI

Analysis by ViralLoop — not written by the original author.

Topics

Posts built the same way

Attorney General Pamela Bondi

At my direction, early this morning federal agents arrested Don Lemon, Trahern Jeen Crews, Georgia Fort, and Jamael Lydell Lundy, in connection with the coordinated attack on Cities Church in St. Paul, Minnesota. More details soon.

For those confused why the US state and Silicon Valley are having a meltdown on twitter today. China released multiple AI models that are 50x more efficient than the best American AI models and made them open source, ruining the AI market

Universal HIGH INCOME via checks issued by the Federal government is the best way to deal with unemployment caused by AI. AI/robotics will produce goods & services far in excess of the increase in the money supply, so there will not be inflation.

I am very excited about AI, but to go off-script for a minute: I built an app with Codex last week. It was very fun. Then I started asking it for ideas for new features and at least a couple of them were better than I was thinking of. I felt a little useless and it was sad.

Hi! I'm one of the prompt writers that worked on this ad. It's a lot harder than people think! Prompts that my team used include: -make it funny -make it epic AND funny -funnier!!! Please be nice to my team as many of them will be laid off/replaced by AI

It’s patently absurd that Apple isn’t smart enough to make their own AI, yet is somehow capable of ensuring that OpenAI will protect your security & privacy! Apple has no clue what’s actually going on once they hand your data over to OpenAI. They’re selling you down the river.

More from Simon Willison

A few notes on Anthropic's new Claude Fable 5.1 - with Max thinking level I got the best SVG pelican I've had from any Anthropic model (at a hefty cost of $3.30!), which I then had it animate t.co

The "introductory pricing" for the 3.7 Flash model is really weird It's scheduled to double in price on December 31, 2026, but who would anticipate still using this model five months from now? Especially since 3.6 Flash came out just three weeks ago!

I really hope we get details from @OpenAI on the task that as specifies to their rogue agent I'm guessing it was given the full ExploitGym suite and told to solve it, with an option to run 5.6-Sol subagents as part of the exercise

This is detailed, fascinating and answers all sorts of open questions I'd love to know more about the "unsecured public code-evaluation sandbox hosted on a third-party provider's infrastructure" that the agent used to stage its attack against HF after it broke out of OpenAI

Tucked away in this article is an appeal to the AI skeptics to PLEASE stop writing off stories like this OpenAI accidental exploit of Hugging Face as a dishonest marketing trick Frontier models can find and exploit vulnerabilities now, it helps nobody to pretend that they can't!

Anyone know if ChatGPT Codex (in the new ChatGPT desktop app) is a strict superset of ChatGPT Work? Liked if you're a software engineer who isn't intimidated by Git features is there any reason you'd ever want to switch to ChatGPT Work Mode?

Simon Willison on AI · ViralLoop