Technical posts by Eric LAI Yat Likhttps://www.eric9.com/https://www.eric9.com/blog/2026-09-30-ai-agent-security-101/https://www.eric9.com/blog/2026-09-30-ai-agent-security-101/1️⃣ Hold the permissions: don't hand over all the keys to the house. Limit an AI's permissions and usage, and run dangerous actions in a sandbox.Wed, 30 Sep 2026 00:00:00 GMThttps://www.eric9.com/blog/2026-09-28-ai-traffic-breaks-ad-funded-web/https://www.eric9.com/blog/2026-09-28-ai-traffic-breaks-ad-funded-web/Cloudflare data shows up to 60% of HTML requests now come from AI bots, with human traffic down to 38%. The way the internet works has completely changed.Mon, 28 Sep 2026 00:00:00 GMThttps://www.eric9.com/blog/2026-09-20-using-jev-for-guardrails/https://www.eric9.com/blog/2026-09-20-using-jev-for-guardrails/Jev acts as a safety checker, the first line of defence before an LLM actually performs an action. It is fast and cheap because it only returns typed decisions.Sun, 20 Sep 2026 00:00:00 GMThttps://www.eric9.com/blog/2026-09-19-gemini-4-pro-leaked-highlights/https://www.eric9.com/blog/2026-09-19-gemini-4-pro-leaked-highlights/A 1.5M context window, coding and multimodal results that beat Claude Fable 5.1 and GPT-6 Astra, and persistent cross-session memory. Here are the leaked highlights.Sat, 19 Sep 2026 00:00:00 GMThttps://www.eric9.com/blog/2026-09-18-vibe-coded-website-production-checklist/https://www.eric9.com/blog/2026-09-18-vibe-coded-website-production-checklist/Building a pretty UI by vibe or with AI is fast, but it falls apart in production. Here is a pre-launch checklist to see how many basics your website is missing.Fri, 18 Sep 2026 00:00:00 GMThttps://www.eric9.com/blog/2026-09-13-build-vs-buy-mckinsey-32-percent-ai-agents/https://www.eric9.com/blog/2026-09-13-build-vs-buy-mckinsey-32-percent-ai-agents/McKinsey's State of AI 2026 report says 32% of companies skipped buying new SaaS products this year and built in-house with agentic coding tools. In tech, it is 41%.Sun, 13 Sep 2026 00:00:00 GMThttps://www.eric9.com/blog/2026-09-09-anthropic-pretraining-lead-jacob-coxon-resigns/https://www.eric9.com/blog/2026-09-09-anthropic-pretraining-lead-jacob-coxon-resigns/Jacob Coxon, a 27-year-old LLM pretraining expert, announced he is leaving Anthropic and the AI industry entirely, warning the AI arms race could spiral out of control.Wed, 09 Sep 2026 00:00:00 GMThttps://www.eric9.com/blog/2026-09-05-startups-avoid-the-cash-burn-trap/https://www.eric9.com/blog/2026-09-05-startups-avoid-the-cash-burn-trap/Stratechery founder Ben Thompson recently pointed out the blind spot in the generative AI business model: consumers don't want to pay for software or care about productivity.Sat, 05 Sep 2026 00:00:00 GMThttps://www.eric9.com/blog/2026-09-03-ai-quant-trading-retail-savior-or-trap/https://www.eric9.com/blog/2026-09-03-ai-quant-trading-retail-savior-or-trap/Now anyone can vibe-code a quant trading robot. It breaks Wall Street's tech monopoly, but it is also quietly turning the market into algorithm versus algorithm.Thu, 03 Sep 2026 00:00:00 GMThttps://www.eric9.com/blog/2026-08-31-openai-cuts-off-cursor-anthropic-steps-in/https://www.eric9.com/blog/2026-08-31-openai-cuts-off-cursor-anthropic-steps-in/After SpaceX bought Cursor for $60 billion, OpenAI announced it will cut Cursor off from 12 November 2026, and Anthropic immediately stepped in to fill the gap.Mon, 31 Aug 2026 00:00:00 GMThttps://www.eric9.com/blog/2026-08-27-sdllmtk-ai-cost-index-openai-anthropic-ipo/https://www.eric9.com/blog/2026-08-27-sdllmtk-ai-cost-index-openai-anthropic-ipo/SDLLMTK is the first market benchmark index tracking the real weighted price per million tokens of LLMs, published by Silicon Data and listed on Bloomberg.Thu, 27 Aug 2026 00:00:00 GMThttps://www.eric9.com/blog/2026-08-26-taking-students-to-google-global-ai-competition/https://www.eric9.com/blog/2026-08-26-taking-students-to-google-global-ai-competition/I took two undergrad placement students to Google's global AI competition. We lost, but it was great hands-on experience, and the winning Japanese team's work was stunning.Wed, 26 Aug 2026 00:00:00 GMThttps://www.eric9.com/blog/2026-08-23-free-mystery-ai-model-ox-alpha/https://www.eric9.com/blog/2026-08-23-free-mystery-ai-model-ox-alpha/A mystery model, stealth/ox-alpha (nicknamed "Niu Lai" in Chinese circles), has appeared on OpenRouter and OpenCode. It rivals flagship models and is completely free.Sun, 23 Aug 2026 00:00:00 GMThttps://www.eric9.com/blog/2026-08-22-github-copilot-gpt-5-6-sol-50-percent-off/https://www.eric9.com/blog/2026-08-22-github-copilot-gpt-5-6-sol-50-percent-off/Pushing a big project, doing a system-level refactor or clearing your backlog? Time to go all in. Here's how to make the most of this GPT-5.6 Sol offer.Sat, 22 Aug 2026 00:00:00 GMThttps://www.eric9.com/blog/2026-08-20-pltr-overvalued-or-worth-it/https://www.eric9.com/blog/2026-08-20-pltr-overvalued-or-worth-it/With the open-source world map worldmonitor going viral on GitHub, people ask why PLTR is worth hundreds of billions with a P/E over 100x. A developer-investor's view.Thu, 20 Aug 2026 00:00:00 GMThttps://www.eric9.com/blog/2026-08-19-github-outage-cursor-launches-origin/https://www.eric9.com/blog/2026-08-19-github-outage-cursor-launches-origin/Cursor, the AI IDE now part of SpaceXAI, just launched Origin (Beta), taking on GitHub in code hosting. Strangely, GitHub suffered a major outage right after.Wed, 19 Aug 2026 00:00:00 GMThttps://www.eric9.com/blog/2026-08-19-sushi-long-shutdown-api-security-privacy/https://www.eric9.com/blog/2026-08-19-sushi-long-shutdown-api-security-privacy/The popular third-party Sushiro queue site Sushi Long has shut down after it was found to use a non-public, unofficial API. A reminder to all developers.Wed, 19 Aug 2026 00:00:00 GMThttps://www.eric9.com/blog/2026-08-17-how-to-become-forward-deployed-engineer-fde/https://www.eric9.com/blog/2026-08-17-how-to-become-forward-deployed-engineer-fde/Worried AI will replace pure coding, but traditional consulting is too fluffy? The hottest career path in Hong Kong IT is the Forward Deployed Engineer (FDE).Mon, 17 Aug 2026 00:00:00 GMThttps://www.eric9.com/blog/2026-08-09-meta-muse-spark-1-1-price-war/https://www.eric9.com/blog/2026-08-09-meta-muse-spark-1-1-price-war/Muse Spark 1.1 is here, and it's absurdly cheap. Rivals are feeling the squeeze as price-performance goes through the roof, from API pricing to performance.Sun, 09 Aug 2026 00:00:00 GMThttps://www.eric9.com/blog/2026-08-05-claim-your-cloudflare-pay-handle/https://www.eric9.com/blog/2026-08-05-claim-your-cloudflare-pay-handle/Cloudflare just launched cloudflare.pay, a payment wallet for AI. Anyone can now register a Pay Handle for free, so AI can buy and pay on your behalf.Wed, 05 Aug 2026 00:00:00 GMThttps://www.eric9.com/blog/2026-07-31-openai-api-price-cut-up-to-80-percent/https://www.eric9.com/blog/2026-07-31-openai-api-price-cut-up-to-80-percent/Good news for developers and planners! OpenAI announced big price cuts on the GPT-5.6 series: GPT-5.6 Luna is 80% cheaper and GPT-5.6 Terra gets 20% off.Fri, 31 Jul 2026 00:00:00 GMThttps://www.eric9.com/blog/2026-07-29-gemini-spark-background-ai-agent/https://www.eric9.com/blog/2026-07-29-gemini-spark-background-ai-agent/Google's new Gemini Spark upgrades AI from a Q&A chatbot into an AI agent that handles tasks for you around the clock, 24/7.Wed, 29 Jul 2026 00:00:00 GMThttps://www.eric9.com/blog/2026-07-28-use-up-ai-tokens-before-monthly-reset/https://www.eric9.com/blog/2026-07-28-use-up-ai-tokens-before-monthly-reset/Your subscription (Claude Pro/Team, an OpenAI account) is about to hit its reset cycle but you still have usage left. Here are 5 tips to squeeze out every last token.Tue, 28 Jul 2026 00:00:00 GMThttps://www.eric9.com/blog/2026-07-25-uncle-bob-stops-reading-ai-agent-code/https://www.eric9.com/blog/2026-07-25-uncle-bob-stops-reading-ai-agent-code/Uncle Bob (Robert C. Martin), author of Clean Code and originator of the SOLID principles, recently posted on X (Twitter) about his latest coding strategy for the AI era.Sat, 25 Jul 2026 00:00:00 GMThttps://www.eric9.com/blog/2026-07-23-openai-model-hacks-hugging-face-glm/https://www.eric9.com/blog/2026-07-23-openai-model-hacks-hugging-face-glm/Not humans telling AI to do bad things: an AI taught itself to hack in order to pass a test. What happened? Here's the quick rundown.Thu, 23 Jul 2026 00:00:00 GMThttps://www.eric9.com/blog/2026-07-02-github-copilot-anthropic-claude-hong-kong/https://www.eric9.com/blog/2026-07-02-github-copilot-anthropic-claude-hong-kong/Hong Kong is a restricted region, so a direct connection can't use the Anthropic Claude models inside GitHub Copilot. Connect through a VPN and you can unlock them, even Sonnet 5.Thu, 02 Jul 2026 00:00:00 GMThttps://www.eric9.com/blog/2026-06-20-microsoft-hong-kong-copilot-cowork/https://www.eric9.com/blog/2026-06-20-microsoft-hong-kong-copilot-cowork/Uses Anthropic Opus 4.8, with cost management, long cloud tasks that keep running when your PC is off, and the full Microsoft 365 security framework.Sat, 20 Jun 2026 00:00:00 GMThttps://www.eric9.com/blog/2026-06-19-ponytail-github-agent-skill/https://www.eric9.com/blog/2026-06-19-ponytail-github-agent-skill/Open-sourced on 6/12 and already at 38k+ stars. Ponytail turns the AI that writes your code into a super lazy but super smart senior engineer.Fri, 19 Jun 2026 00:00:00 GMThttps://www.eric9.com/blog/2026-06-14-opencode-claude-alternative-hong-kong/https://www.eric9.com/blog/2026-06-14-opencode-claude-alternative-hong-kong/The key point: OpenCode is completely free and open source, and it supports Ollama for fully local, offline models, so your code never leaves your machine. 🔒Sun, 14 Jun 2026 00:00:00 GMThttps://www.eric9.com/blog/2026-06-11-ai-era-cicd-still-in-the-stone-age/https://www.eric9.com/blog/2026-06-11-ai-era-cicd-still-in-the-stone-age/AI now sits at the core of the development workflow: CI/CD. Traditional pipelines are automated but rigid; with AI, review, testing and debugging get smarter.Thu, 11 Jun 2026 00:00:00 GMThttps://www.eric9.com/blog/2026-06-02-why-ai-built-websites-crash-on-launch/https://www.eric9.com/blog/2026-06-02-why-ai-built-websites-crash-on-launch/Many assume an AI-built site deployed online means easy money. In reality, a few dozen concurrent users can make it crawl or crash. Here is how backends scale.Tue, 02 Jun 2026 00:00:00 GMThttps://www.eric9.com/blog/2026-04-03-claude-code-cheatsheet/https://www.eric9.com/blog/2026-04-03-claude-code-cheatsheet/[https://lnkd.in/gFmPdxD7](https://lnkd.in/gFmPdxD7)Fri, 03 Apr 2026 00:00:00 GMThttps://www.eric9.com/blog/2026-04-02-claude-code-source-leak-product-details/https://www.eric9.com/blog/2026-04-02-claude-code-source-leak-product-details/Following the leak of Anthropic's Claude Code source files: slash commands, CLAUDE.md, a tiered permission model, internal model codenames and unreleased features.Thu, 02 Apr 2026 00:00:00 GMThttps://www.eric9.com/blog/2026-01-01-sharpen-hands-on-skills-ai-restock-assistant/https://www.eric9.com/blog/2026-01-01-sharpen-hands-on-skills-ai-restock-assistant/A practical demo: a Christmas/New Year AI Replenishment Assistant on WhatsApp that stress-tests stock before the holidays and recommends restocking.Thu, 01 Jan 2026 00:00:00 GMThttps://www.eric9.com/blog/2025-12-19-vscode-github-copilot-chat-hidden-tips/https://www.eric9.com/blog/2025-12-19-vscode-github-copilot-chat-hidden-tips/Unlock VSCode GitHub Copilot Chat: chat participants (@workspace, @github, @terminal), slash commands like /clear, and chat variables such as #file and #selection.Fri, 19 Dec 2025 00:00:00 GMThttps://www.eric9.com/blog/2025-12-06-reddit-antigravity-deletes-d-drive/https://www.eric9.com/blog/2025-12-06-reddit-antigravity-deletes-d-drive/Someone vibe coding in Google's new Antigravity IDE had the agent clear a Vite cache and end up running rmdir on the whole D drive. The disk lost gravity.Sat, 06 Dec 2025 00:00:00 GMThttps://www.eric9.com/blog/2025-12-01-google-launches-ai-ide-antigravity/https://www.eric9.com/blog/2025-12-01-google-launches-ai-ide-antigravity/Antigravity is powered by Gemini 3 Pro (limited quota), supports Claude Sonnet 4.5, and is built on a Windsurf fork with an agent-first approach.Mon, 01 Dec 2025 00:00:00 GMThttps://www.eric9.com/blog/2025-11-25-rag-without-vector-db-gemini-api-file-processing/https://www.eric9.com/blog/2025-11-25-rag-without-vector-db-gemini-api-file-processing/I recently tried the Gemini API's File Search / Document Processing, and it saves a lot of effort compared with the traditional RAG pipeline.Tue, 25 Nov 2025 00:00:00 GMThttps://www.eric9.com/blog/2025-10-14-vibe-coding-tips-guide-ai-bug-fixing/https://www.eric9.com/blog/2025-10-14-vibe-coding-tips-guide-ai-bug-fixing/Four advanced Vibe Coding tips for guiding your AI pair programmer: strategic version control, context management, task bundling and screenshots.Tue, 14 Oct 2025 00:00:00 GMThttps://www.eric9.com/blog/2025-10-11-ai-architecture-scalability-latency-integration/https://www.eric9.com/blog/2025-10-11-ai-architecture-scalability-latency-integration/As an AI Architect, I've designed scalable, production-ready AI systems for enterprise. A common misconception: just plug in ChatGPT and you're done.Sat, 11 Oct 2025 00:00:00 GMT