Rana Bilal Zafar - Daily Ferment (Page 8)

A person holding a Samsung Android phone showing a banking transfer screen

Fintech

HSBC decided your phone's privacy container looks like an attacker

HSBC blocked its Android app inside Samsung Secure Folder and Android Private Space with no notice, locking some customers out of online banking for up to ten working days. It is the second time in nine months a coarse device signal has denied service to the careful.

A single lit desk in an otherwise dark office at night

Engineering

Your agent's approval gate is a SHOULD, and nobody read the capitals

Anthropic measured its own permission prompt, found 93% approved, called it approval fatigue and built something else. The MCP consent requirement everyone quotes is lowercase, and a gate with no timeout is an incident.

Two engineers looking closely at the same computer screen

Engineering

Your MCP tool schema can change and nothing in your pipeline fails

Every test layer you have assumes the contract lives in your repository. An MCP tool has no version field, so the contract your model reads can change on somebody else's server and your build stays green.

A person working at a dual-monitor workstation in a darkened room

Security

CLOSEDQUORUM: the malware that puts its next move to a vote

Cisco Talos pulled apart a 16.4MB Windows binary that polls four commercial language models and acts on the majority vote. The mechanism is clever. The defensive problem it creates is worse than the mechanism.

People working at desks in an open plan office

OpenAI fired contractors for using AI to train its AI

Contractors paid to rate ChatGPT were fired for using AI to do it. The tells they were caught by are the same ones that wrongly flag non-native English writers 61% of the time.

Engineering

Your AI coding tool packaged your git history. Twice.

ZCode packaged 345MB of a developer's workspace and tried to upload it 564 times. It had two privacy switches. Both were honest, and both were wired to the wrong end of the pipeline.

Two railway tracks crossing at a set of points

Fintech

Stablecoin FX went below interbank. The cost moved into routing.

The median stablecoin payment now prices below interbank. The cost did not disappear, it became a routing decision, and most payments systems cannot see it.

Fintech

Your staked ether ETF redeems in a day. The exit queue does not.

BlackRock's staked ether fund keeps 5% to 30% of its ether unstaked to meet redemptions. Behind that sleeve is a validator exit queue shared by the whole network, which hit 46 days in September 2025 because one operator got cautious.

Eight identical grey capsules labelled what the dashboard sees, above eight scattered teal dots labelled what the runs actually did

Your AI observability is answering a question your agents do not fail on

Agent performance drops from 60% on a single run to 25% across eight runs of the same task. Nothing errors, nothing times out, every trace is green, and the answer is wrong.

A rigid grid of navy squares on the left dissolving into a single continuous teal wave on the right

Fintech

The stablecoin number banks are sizing their build against is the wrong one

Strip the bots and self-transfers out of the $33 trillion and you get $10.2 trillion, of which under 1% is retail. The two numbers justify different systems, and neither is the real reason to build.

Navy bars mostly submerged beneath a teal waterline, with only their tips showing above it

Most answer engine optimization results are not answer engine optimization

The AEO multiples in circulation have no control group. The one study that added one found roughly two thirds of the headline gain was ChatGPT growing, not optimization working.

See all