Posts

Showing posts from February, 2026

The 72-Hour Meltdown That Revealed Everything Wrong With AI Agents

Image
  Copyright: Sanjay Basu How a Viral Open-Source Project Became a $16 Million Scam, a Security Catastrophe, and a Case Study in Everything We’re Getting Wrong The lobster molted. The scammers pounced. And a thousand developers learned they’d been running infostealer malware on their shiny new Mac Minis. If you wanted to design a stress test for everything that could go wrong with autonomous AI agents, you couldn’t do better than what actually happened to Clawdbot between January 29 and January 31, 2026. In 72 hours, the open-source darling of the developer community experienced a forced rebrand, had its social media accounts hijacked in literally ten seconds, spawned a fraudulent cryptocurrency that briefly hit $16 million in market cap, and exposed over a thousand misconfigured deployments containing API keys, private credentials, and months of conversation histories. The project survived. It’s now called OpenClaw, it has over 105,000 GitHub stars, and its community remains enthus...

The Transport Layer Rethink

Image
  Copyright: Sanjay Basu Why HTTP/3 Over QUIC Is Not Just an HTTP Upgrade When the IETF standardized HTTP/3 in June 2022, it marked the culmination of a decade-long effort to solve a problem that had been hiding in plain sight. The web had grown faster and more capable with each iteration of HTTP, yet a fundamental constraint remained lodged in the very foundation of internet communication. This was not a problem HTTP could fix on its own. It lived deeper, in the transport layer, in a protocol designed half a century ago for a world that no longer exists. HTTP/3 looks like a version bump. It carries the same semantics, the same headers, the same request-response patterns we have used since the early web. But the real change is invisible at the application layer. HTTP/3 abandons TCP entirely and runs over QUIC, a transport protocol Google began developing in 2012 and which the IETF formally standardized as RFC 9000. To understand why this matters, we need to trace the problem back t...