Hive Five 218 – AI 2027 & The End Of Children

I’m trying out the Obsidian plugin Meta Bind that I mentioned in Hive Five 215, and I love it!

Currently, I’m using it for my weekly “Next” action, which transforms an unattractive inline property next:: into a visually appealing text area.

Other use cases include a toggle for my daily habits and a progress slider for my projects. The latter was loosely inspired by Basecamp’s Hill Charts.

Let’s take this week by swarm!

• AI 2027 predicts a wild decade ahead, with superhuman AI possibly exceeding the impact of the Industrial Revolution. Explore two possible endings: a “slowdown” or a “race” to control the future. MORE

• The world’s population may be shrinking, leading to a new panic, but some see opportunity in smaller populations. South Korea, a “canary in the coal mine,” shows that a society without children may be coming faster than we think. MORE

• Bill Gates celebrates Microsoft’s 50th anniversary by honoring the teachers who shaped him. From elementary school to Harvard, they inspired his passions and taught him how to think. MORE

• In this episode of Critical Thinking – Bug Bounty Podcast Joseph introduces Vulus Ex Machina: A 3-part mini-series on hacking AI applications. In this part, he lays the groundwork and focuses on AI reconnaissance. MORE

• Meet Silicon Valley’s #1 PR Expert: Lulu Cheng Meservey. Want to be heard in 2025? Lulu shares how to cut through the noise by speaking directly to your audience and crafting messages that resonate! Learn how to turn attention into action. MORE

Top Community Tools:
Find Your Perfect Community Tool, Faster.

• Honeypot is now Cult.Repo. They create documentaries about open-source software, like Node.js and React.js, featuring interviews with the developers who made them! Coming in 2025: Films on Vite and Python. MORE

• Google announces Sec-Gemini v1, a new experimental cybersecurity model. MORE

• Gumroad, a platform for selling digital products, shared its code on GitHub. Aspiring developers can now explore how the platform works and even contribute to it. MORE

• Hacker News announced tomhow as a public moderator. MORE

• Free IT Course 2025: How to Land a Government Tech Job with No Experience. MORE

• Jason released his Hacking Your Career 2.0 course. It gives you the tools to build your brand, ace interviews, and negotiate like a pro. MORE

• Nick Pasquarosa turned Craigslist gigs into a $10M+ accounting business, Bookkeeper360, by offering subscription-based services and proprietary AI software. He bootstrapped his way to success, disrupting the industry by rejecting hourly billing. MORE

• DevOps Career Tier List PROVEN To Get You Hired 2025. MORE

• Andrew Wilkinson, Co-Founder of Tiny, discusses investment and startup ideas in the current AI landscape. AI is changing business, making it easier to start but harder to stay competitive. To win, build a data or network advantage, like media businesses, and then use AI to grow. MORE

• Resend founder shares how his entire team uses Raycast. MORE

• FolSum is a Rust GUI app that summarizes folder contents by file extension, displaying counts in a table and exporting a verification manifest. It helps you quickly understand the composition of your directories. MORE

• Level up your browsing. Matt from Lawrence Systems explores 3 options for dashboards & start pages, from data-rich Homer to minimalist Flame, to help you navigate the web like a pro. MORE

• ChatGPT 4o replaces your $10,000 Ad Agency (Full Tutorial). MORE

• Logan Kilpatrick celebrates his first anniversary at Google, marking a year of dedication to his work! The Google AI Studio lead is likely the biggest reason of Gemini community adoption. MORE

• Theo is changing things up after turning 30, going back to his roots by focusing on building and coding! He’s also letting his team take the reins to avoid burnout and create even better content. MORE

• Adam and Steve (Tailwind CSS) have both been hungry for a bit of a change, so they decided to commit to working together in person instead of remotely. MORE

• Yassine on deep research recon: “You ever get so deep into recon that you find a dev’s SoundCloud account and start judging their taste?” MORE

• Caido and HackerOne are collaborating on a plugin that streamlines the H1 submission process. Now, they want your feedback. MORE

• @hacks4pancakes | Lesley Carhart | ICS DFIR @dragosinc, martial artist, marksman, humanist, Lvl14 Neutral Good rogue, USAF Ret.

• @0xLupin | Lupin | Roni Carta alias Lupin. Co-Founder of Lupin & Holmes. R&D. Red Teamer. Bug Hunter. Musician.

• @kaoudis | kaoudis | Systems enthusiast, question asker, DIYer. Security research @trailofbits.

• @seekaychin | The life and times of a giant Chinaman.

• XSS To RCE By Abusing Custom File Handlers – Kentico Xperience CMS (CVE-2025-2748). MORE

• Hacking the Call Records of Millions of Americans. Imagine if anyone could punch in a phone number from the largest U.S. cell carrier and instantly retrieve a list of its recent incoming calls—complete with timestamps—without compromising the device, guessing a password, or alerting the user. MORE

• Client-side RCE via symlink following in Google Web Designer for macOS/Linux: CVE-2025-1079. MORE

• Whose code am I running in GitHub Actions? GitHub Actions let you automate tasks, but using mutable tags like v2 can be risky! A compromised action could leak secrets, so check your workflows for immutable commit IDs to stay safe. MORE

• Security researcher Troy Hunt fell for a Mailchimp phish, exposing his mailing list. The well-crafted attack highlights the danger of even sophisticated users being tricked, and the importance of phishing-resistant security like passkeys. MORE

• Co-working, or having something on in the background while you work has its benefits. Consider Bashbunni your virtual coworker for the day and she will treat you as her rubber ducky. MORE

• How Godfather Orwa found a R-XSS 0day vulnerability in a private program by hunting for third-party assets and exploiting an interesting endpoint. MORE

• Yassine on systems: “Whatever you do in life, build systems that make you self-sufficient so seeking assistance becomes a choice, not a necessity.” MORE

• Erik Davis talks about how weird and confusing the world is becoming. Things like crazy politics, UFOs, artificial intelligence, conspiracy theories, and climate change are making it hard to agree on what’s actually real. He wants to give us some ideas on how to understand these strange problems, deal with them, and still stay sane. PART 1 | PART 2

• Wirecutter’s experts recommend 25 “buy-it-for-life” products, from cast iron skillets to durable backpacks, that are repairable, warrantied, and can save you money in the long run. MORE

• Doing the thing is the only thing that’s actually doing the thing! Stop preparing, planning, and talking about it and just do it. MORE

• The Comedown Effect: Understanding the Emotional Aftermath of Achievement. MORE

• Disobey 2025 Presentations, including our very own joohoi and STÖK with their Flipping Bits talk. MORE

• A Not So Comprehensive Guide to Securing Your Salesforce Organization. MORE

• Explore a curated list of awesome AI agents, from coding assistants to research tools. Discover open and closed-source projects, plus resources for building your own. MORE

• The results of Kevin Rose’s community Q2-2025 Favorite Things survey. With over 20k+ total votes across 24 categories. MORE

• CFPsec helps you find Call For Papers and upcoming hacking/security conferences from cfptime.org. Use it to discover events and speaking opportunities in the infosec world. MORE

• CF-Hero is a reconnaissance tool that uses multiple data sources to discover the origin IP addresses of Cloudflare-protected web applications. MORE

• Docs is a cool open-source platform for taking notes and collaborating, like a free version of Notion. It’s built with Django and React, so you can easily share knowledge with your team. MORE

• Urx is a command-line tool that grabs URLs from OSINT archives like the Wayback Machine, helping you find website info for security testing. It’s fast and lets you filter results, making it easier to find specific URLs you need. MORE

• Analyze JavaScript code for vulnerabilities with jxscout. This tool helps security researchers by organizing assets, pre-fetching chunks, and beautifying code to make analysis easier. MORE

• Valentina’s BSides Canberra keynote is now available online. The Exploit Development Life Cycle: From Concept to Compromise. MORE

• NahamSec scanned 100,000+ subdomains for CVE-2025-29927, finding many vulnerable, even within big companies. Automation is key, but understanding the vulnerability’s quirks is crucial for successful exploitation. MORE

• This Baker Works Alone in the Wilderness — His Bread Is Legendary. A french bread baker lives and works alone at his bakery homestead deep in the mountains of Vermont. MORE

• Ippsec demonstrates creating a Golang program to perform LDAP injection and password exfiltration, focusing on a practical cybersecurity scenario using a Hack the Box machine. MORE

• What the heck is MCP? With Jack Herrington. MCP (Model Context Protocol) is like giving AI agents a detailed menu of tools they can use to access data and get things done. It is a UI for agents. MORE

• Grifter is a longtime hacker, DEF CON organizer, and respected voice in the infosec community. From his early days exploring networks to helping shape one of the largest hacker conferences in the world, Grifter has built a reputation for blending deep technical insight with a sharp sense of humor. MORE

• An interview with the The Creators of Model Context Protocol: Justin Spahr-Summers and David Soria Parra. They talk about the origin, challenges, and future of MCP, and questions from the Latent Space community. MORE

• Superhuman’s secret to success: Ignoring most customer feedback, manually onboarding every new user, obsessing over every detail, and positioning around a single attribute: speed. MORE

• A better way to plan, build, and ship products by Ryan Singer (creator of “Shape Up,” early employee at 37signals). MORE

• WebAIM Million, the 2025 report on the accessibility of the top 1,000,000 home pages. It found that most home pages have accessibility errors, like low contrast text, with complex pages and ARIA code surprisingly making things worse. It highlights the need for simpler, more accessible web design. MORE

• Anime.js is a JavaScript animation engine that is fast and lightweight. It can be used to animate CSS, SVG, DOM attributes, and JavaScript objects. MORE

• Vercel CEO on getting a new computer: “bash is for installing zsh, npm is for installing pnpm, safari is for installing chrome, xcode cli tools is for installing brew, terminal⁠.app is for installing ghostty.” MORE

• Spotify is losing songs, making users want to own their music again. Some users are even building their own tools to download and keep their favorite tracks safe. MORE

• ColorBliss uses AI to turn your ideas & pics into cool coloring pages for all ages. Create unique designs in seconds & print them for fun. MORE

• Explore the fascinating world of music evolution. This interactive project visually maps how different albums are connected through shared sonic DNA, revealing unexpected influences across generations. MORE

• Damon Wayans On Family, Katt Williams, Kanye, Eddie Murphy, Orlando Brown, In Living Color & SNL. MORE

Until next week, take care of yourself and each other,

^{This newsletter may contain affiliate links that support its costs. These links lead to tools, courses, and resources that I’ve personally found helpful.}