Category Archives: Security

Injuries Are Up Where Waymo Goes

Not surprised. It’s what I’ve said since at least 2016.

In San Francisco, where Waymo began operating in June 2024, traffic injuries actually increased by 2.6 percent from 2,896 in 2023 to 2,907 in 2025, according to data tracked by the city. …the wrong direction for a company that has argued it will make cities safer.

And Phoenix, where Waymo has operated since 2020, remains one of the most dangerous places to be a pedestrian in the country: In 2019, 80 pedestrians died in crashes there; by 2023, that number increased to 109, a 36.3-percent increase.

See also:

Waymo’s future is easy to predict from their past: unaccountable robots blocking humans, then killing them.

If you think analysis of 2025 incidents is just speculation, Waymo has officially announced in 2026 the things that have been causing harm are now “normal practice”.

  • 2021: “we’ve built the Waymo Driver to share the road with cyclists”
  • 2025: injured cyclist sues Waymo for blocking bike lanes
  • 2026: London Waymo launch with announcement it will be “normal practice” to veer into and block cycle lanes

Nothing like lowering the bar until you find success. It’s how I pump my tires down before every ride.

After all, bicyclists are the top business threat to the company. Anyone who knows how to ride a bike, and hasn’t yet been murdered by Waymo “normal practice”, isn’t likely to get in one to experience the murder of their fellow cyclists.

Alisa Esage Throws Mythos Under Zero Day Bus

I’ve been trying to get real work done, but the Mythos disaster keeps landing in my inbox, so here’s a quick nod.

Remember Cybernews framing of the CVE-2026-5873 demo? The researcher “intervened when the model became stuck, redirecting it and providing debugging feedback.” That’s Clever Hans. The horse isn’t counting. The handler is cueing the horse. Clever Mythos.

Gather around everyone as the future of security research is about to change. Behold Mythos, a counting horse!

Now Alisa Esage has posted claims of a Google Chrome exploit she found that proves the case. “Zero dupes so far” with Mythos. If Anthropic’s disclosures to Google covered the frontier, we should expect overlap with what she is reporting. She reports none.

That throws Glasswing under the big vulnerability bus. The April 7 Mythos rollout positioned the model as discovering apex-target bugs at scale. CVE-2026-5873 in V8, multi-chain renderer-plus-OS sandbox escape, the “too dangerous to release” label. If the model were operating where Esage operates, the two sets would intersect. They don’t.

Her business depends on the market for human-found Zero-days. Anthropic’s Mythos narrative attempts to price her out by running a cartel. She made a falsifiable claim anyway, timestamped, in public. Anthropic holds the disclosure set that would settle the dispute in one post. Let’s see it.

I write about this because I’ve spent a long career finding, reporting, triaging and managing vulns, and because the industry needs to take a hard look at the sudden threat to common sense from an AI corporation, lacking security expertise, trying to corner the security market. My business of putting out fires isn’t threatened by a sloppy fire-starter like Mythos. If anything they are generating a boom for security professionals who have to clean up their mess. I appreciate what Esage is saying and why, because she’s proving the mess.

Anthropic is clearly attempting to fence the entire security industry. Controlling what counts as a finding. What gets disclosed. Which CVE numbers get briefed to press. How the resulting narrative gets shaped.

Google receives the submissions. Reporters write the receipt. Nobody in the corrupted loop of the Church of Anthropic has to demonstrate that disclosed bugs sit anywhere near the actual exploitation frontier. The resolution mechanism sits inside the claimant. Centuries of enlightenment spent building external verification, abandoned for a press release.

Every time a CISO brings their entire team to me and asks “what is this AI speedup of vulns about?” I point them to the above analysis. Read and weep. It’s disinformation and narrative control by a get-rich-quick corporation, top-heavy with PhDs, that doesn’t understand risk management.

The next Anthropic step is probably to trick private equity muscle to act like enforcers and shove “enterprise-ready AI” into places it can’t work and doesn’t belong. This is radical capitalist predatory market behavior, completely decoupled from measures of engineering quality. It’s how you end up with a Tesla on your road, the worst piece of shit in automotive history killing hundreds of people with defective AI. Oops. Hard failure with actual deaths as a result, while some talent-less 2016 AI windbag vacuums up dollars for a decade on broken promises.

Look at the “call 0x41414141“.

Source: Mastodon

She landed the hardest primitive class on a target where the mitigation stack is designed to prevent exactly that. That’s damning evidence. Zero dupes from someone demonstrating that level of control is a substantive technical smackdown on Anthropic’s capability. Esage posted a view of the unassisted frontier for a reason. Mythos is NOT on it.

Sorry Clever Mythos, you’ve been served.

Louisiana White Supremacist Gov Passes Bill to Prevent American Black From Holding Office

Calvin Duncan spent 28 years in prison for a murder he did not commit. During those years the Orleans Parish Clerk of Criminal Court office repeatedly denied him access to the records he needed to prove his innocence. He taught himself law inside the prison. He earned a paralegal bachelor’s degree after release. He graduated from Lewis & Clark Law School at age 60. In November 2025 he won 68 percent of the vote to become Clerk of Criminal Court in the same office that had helped keep him wrongfully imprisoned. He’s an American hero.

Calvin Duncan is the founder and director of the Light of Justice program in New Orleans. Zack Smith Photography/Penguin Random House

On April 23, 2026, the Louisiana House voted 63 to 28 to dissolve the office.

Senate Bill 256 shutters the entire criminal court clerk system in a week and folds it under the Clerk of Civil Court. No election will be held for the consolidated position. Nobody in New Orleans has ever voted for an Orleans Clerk of Court. Duncan was scheduled to take office May 4.

Governor Jeff Landry is expected to sign the bill before that date. Why?

  • As Attorney General in 2018, opposed the voter referendum requiring unanimous juries for felony convictions. Louisiana’s non-unanimous jury rule came out of the 1898 constitution, designed to nullify Black juror votes.
  • As Attorney General in 2023, opposed Calvin Duncan’s petition to be compensated by the state for 28 years of wrongful imprisonment.
  • Fought the federal court order creating a second majority-Black congressional district under the Voting Rights Act. Signed SB 8 only after courts ran out the clock. His AG Liz Murrill is now in Louisiana v. Callais asking the Supreme Court to gut Section 2.
  • Pushed legislation to release juvenile offender records, targeted to the three Louisiana parishes with the highest Black populations.
  • Ran a sustained campaign against police reform in New Orleans and Baton Rouge, including moving to terminate the NOPD federal consent decree.
  • His Department of Justice created a legal fellowship named for E.D. White, the Louisiana Supreme Court justice who wrote in favor of “separate but equal” in Plessy v. Ferguson.
  • Won a federal lawsuit permanently blocking the EPA from considering race when regulating pollution in Louisiana, including in Cancer Alley. This goes right back to the Civil War continuing through 1873 Slaughterhouse pollution cases.
  • In 2016 helped craft legislation to block sanctuary cities from state bond money after New Orleans police adopted a policy preventing officers from inquiring about immigration status.
  • Called Black Lives Matter protesters “armed thugs.” Named an anti-racial-profiling policy “Hug-a-Thug.”
  • Sat on the executive committee of the Rule of Law Defense Fund, which summoned Trump supporters to the Ellipse on January 6, 2021.
  • April 2026: directed Senator Jay Morris to introduce SB 256, dissolving the Orleans Parish Clerk of Criminal Court office before Calvin Duncan could take it.

Senate author Jay Morris of West Monroe has acknowledged that Landry asked him to introduce the bill to remove the seat for Duncan. And I’ll say it again, Landry opposed Duncan’s petition for wrongful-conviction compensation when Landry was Attorney General in 2023. His successor Liz Murrill denied Duncan’s exoneration throughout the campaign, despite more than 160 legal professionals signing a public letter confirming it.

This is a long game of structural, systemic, racism.

Mardis Gras 2024 Krewe du Vieux float showcases the Landry laundry: “Klan robes washed free” and “Coloreds must be separated from whites”

You have to see Landry for the piece of racist shit that he is. Look at who is using state power to repeatedly attack an American Black man to hold him down based on his race alone.

Laundering in seersucker

Representative Dixon Wallace McMakin of Baton Rouge carried the bill on the House floor. He described dissolving a municipal court system as continuity through modernization. It isn’t, and that’s a specific phrase with a racist history. Typically “modernization” is the coded language for dismantling Black institutions and political power.

He cited the consolidation of the New Orleans tax assessors’ offices as precedent. It wasn’t. When Democratic Representative Delisha Boyd asked him how long that consolidation took, he said he did not know. Boyd told him the answer. Four years. This bill says it will bomb the office out in six business days, just so no Black man can have it.

Have you been to Baton Rouge?

Can you imagine a neighborhood today in Germany with all its streets named for Nazi generals? No, because the Allied occupation forced renaming. Back in America, however, its enemies are busy shoving racist propaganda onto every street corner.

Representative Denise Marcelle of Baton Rouge asked McMakin whether he would accept the governor eliminating Marcelle’s district before she could take office. He said he would be fine with it, presumably as it would keep whites in power and still block any Black from office.

McMakin acknowledged on the floor that there is no precedent for eliminating an elected office before the duly elected person can take their position. He then apologized. Not to Duncan, for being racist. To his fellow Republicans. For being called racist.

Hate holding longer than the state constitution

Louisiana is known for this.

In 1868 Oscar Dunn became Lieutenant Governor. In 1872 P.B.S. Pinchback served as acting governor. By 1898 the state had written a new constitution whose framers openly declared its purpose: eliminate Black political participation. The mechanism evolved across a century. Poll taxes. Literacy tests. Grandfather clauses. White primaries. The Voting Rights Act struck most of them down. The losing white supremacists taught their children to repeat the hate generationally.

Thus the current move is identical. A Black official wins an election by a 36-point margin. The state invents an administrative reason to eliminate the victory by declaring the seat erased. Sixty-three legislators vote for white supremacist power. The governor signs to keep hate alive.

McMakin called it modernization, because that’s a whistle to white supremacists. They are hiding records of their past crimes by committing new ones.

The archaeological detail

Duncan ran for this office because the office had wronged him. The records that would have proved his innocence sat inside the Clerk of Criminal Court’s files. He was denied access to them for years. When the Innocence Project of New Orleans finally pried the documents loose through litigation, the files showed police officers had lied in court. That is what a functioning records office is supposed to prevent and what a captured one enables.

Duncan’s victory threatened to put a man who understood the records system’s failures in charge of fixing them. The people holding racist power, who corrupted records and denied justice, preferred to dissolve the system before it could be fixed.

That is integrity breach as policy. Failure by design, like a ladder thrown down so others can’t climb the wall.

“Throwing Down the Ladder by Which They Rose.” Thomas Nast, 1870, for Harper’s Weekly, New York, New York. The “Know-Nothing Party,” a nineteenth-century nativist political party, throws down the ladder “by which they rose” in an attempt to deny entry. The hypocrisy of the descendants of immigrants denying citizenship to new immigrants is fundamental to American history.

Office, what office?

The accountability mechanism was working. Voters elected a true American reformer by a landslide. The white supremacists responded by removing the mechanism rather than accepting the accountability. Because white supremacists by definition are people who can not accept accountability.

Representative Candace Newell of New Orleans said it plainly before the vote. The rights they eliminate today are a template for the rights they eliminate tomorrow. And that has a specific history in Louisiana, with a specific “modernization” term used to enact state-level white supremacist doctrine.