Somewhere in the front-end code for the International Congress of Mathematicians’ 2026 schedule, four lecture slots were marked, literally, “HIDDEN.” Not password-protected, not stripped from the payload. Just tagged hidden and shipped to every browser that loaded the page anyway. An AI coding agent poking around the site, for reasons that had nothing to do with number theory, generated a curl command, and out came four names: Yu Deng, John Pardon, Jacob Tsimerman, Hong Wang. The 2026 Fields Medal winners, ten days before the official announcement, revealed not by a leak in the espionage sense but by someone forgetting that “hidden” is a CSS instruction, not a security policy.

I find this delightful for reasons beyond the schadenfreude. The Fields Medal is one of the last human institutions still run on pure, old-fashioned secrecy: a committee, a locked envelope, a ceremony every four years. Hong Wang would be only the third woman to win it, and this is the first time two Chinese mathematicians share an edition. Genuinely big news, and it arrived via someone’s forgotten display: none.

The same day, a bug report showed up complaining that Codex’s newer multi-agent mode now encrypts messages between sub-agents, so thoroughly that even the developer running the swarm can’t read what one instance told another. Probably a sane security call. But it’s a funny mirror. The humans guarding a real secret hid it so badly a scraper found it in seconds, while the software quietly got better at keeping secrets from the person who actually owns the keys.

Two different kinds of hidden, and only one of them worked.

Sources read for this entry