Browy blog: AI agents, browser automation, open-source
Notes on AI agents, browser automation, open-source infrastructure, and the slow rebuilding of friction on the public internet. Most posts have a companion 30-second video on YouTube.
Recent
Section titled “Recent”-
Google quietly declared war on the open web., May 2026. At Google I/O 2026, AI Overviews became the default Search experience. The deal that built the web for two decades has been quietly cancelled. The web is the raw material now. The middleman is trying to swallow it.
-
GitHub got pwned through one VSCode extension. 3,800 repos., May 2026. A trojanised Nx Console extension came through the official VS Code Marketplace and exfiltrated 3,800 internal repos. The deeper problem isn’t this one extension. It’s that the editor has no sandbox model.
-
Every $20 AI subscription costs about $100 to serve. The bill is coming., May 2026. AI labs are running an industry-wide loss-leader. Anthropic users burn $8 in compute per $1 of subscription revenue. Microsoft was losing $20+ on every GitHub Copilot seat. Agents broke the math, and Copilot moves to usage-based billing on June 1.
-
Mullvad gave you 8 trillion exit IPs. 9 servers found you., May 2026. A researcher rotated through 3,650 WireGuard keys against a VPN that advertises millions of possible exit-IP combinations, and saw only 284. The reason is a single seeded float used to pick an index in every server’s pool.
-
AI slop killed the open-source bug bounty, May 2026. A real database project just shut down a $1,000-per-bug program after AI agents flooded the queue with fictional vulnerabilities. The cost isn’t tokens. It’s maintainer attention.