Posts
3806
Following
723
Followers
1597
"I'm interested in all kinds of astronomy."
repeated

you know that problem where it's actually in Google's best interests to sabotage their traditional search results to force everyone to use the AI results because then you never leave the site and direct prompt advertising becomes extremely valuable? yeah, it's like that for code, where it's actually in anthropic's best interests for all the code to be entirely unmaintainable and unsecurable except for with LLMs

5
10
0
repeated

In the 70s they could open Facebook by pressing the Meta key and there were Like and Dislike buttons right on the keyboard.

2
4
0
repeated

Here’s why it’s important to always use r2 from git. In r2land, we follow the law of full disclosure and fix any reported vulnerability within a 24h deadline, as stated in SECURITY.md https://blog.calif.io/p/mad-bugs-discovering-a-0-day-in-zero

0
3
0
repeated

It's so cool that anthropic is setting up a double-sided protection racket where it will profit from the massive token burn of attackers and defenders with a tool specifically designed to generate exploits and their only observable mitigation is a clientside system prompt that sternly warns the LLM to be good and not do malware
https://red.anthropic.com/2026/mythos-preview/

3
10
0
Spooler Alert: Remote Unauth'd RCE-to-root Chain in CUPS

https://heyitsas.im/posts/cups/

More LLM bugs: CVE-2026-34980 and CVE-2026-34990
0
2
2
repeated

To my security peeps: Was the introduction of widespread fuzzing similar to AI-based bug hunting now, or is this really a different beast?

1
4
0
@evilpie IMHO it's very similar, definitely larger scale though
1
0
4
repeated

Nope, no one from Anthropic Glasswing has been in touch.

4
4
0
[RSS] Milking the last drop of Intego - Time for Windows to get its LPE

http://blog.quarkslab.com/milking-the-last-drop-of-intego-time-for-windows-to-get-its-lpe.html
0
0
0
repeated
repeated

Systematically reviewing Python C extensions (575+ bugs found so far) and offering to analyze yours!

I’ve recently analyzed 44 C extensions for correctness and free-threading readiness. I'd love to run the analysis on your extension too.

If you want the deep dive into the methodology, the false positive rates, and what I've learned, I wrote a full post here: https://discuss.python.org/t/systematically-finding-bugs-in-python-c-extensions-575-confirmed-so-far/106875

But if you just want your C extension checked, reply below or DM me!

2
4
0
re: meta
Show content
@meowski again, if that is concerning to you, you are free to limit your posts visibility and vet your followers. otherwise, limiting search will not protect you.
1
0
0
re: meta
Show content
@meowski Nobody forces anyone to post embarrassing things on the public Internet. On the other hand many ppl post their thoughts on the public Internet so others can discover and interact with them.
1
0
1
re: meta
Show content
@lain @i @feld It's not only about journalists, I personally spend significant resources to preserve/dig up stuff as needed, all of which should be trivial if scraping wasn't a (really stupid) taboo. This also hurts the discoverability of posts&accounts.

I guess some would prefer hiding in their little bunkers with their chosen friends (and that's fine), but if we want to have an open social network it's probably the wrong strategy to design things around that concept.
1
0
3
re: meta
Show content
@i Yes, this is exactly the problem. I have accounts at multiple instances (pretty sure some have elastic), search is shit everywhere. We'd also need federated search which would require scraping, leading back to your comment...
0
0
0
meta
Show content
You know what would make Fedi an attractive place for journalists (and lots of others)?

Working search!
2
0
3
repeated

Talos Vulnerability Reports

New vulnerability report from Talos:

LibRaw HuffTable::initval heap-based buffer overflow vulnerability

https://talosintelligence.com/vulnerability_reports/TALOS-2026-2330

CVE-2026-20911
0
1
0
repeated

Talos Vulnerability Reports

New vulnerability report from Talos:

LibRaw lossless_jpeg_load_raw heap-based buffer overflow vulnerability

https://talosintelligence.com/vulnerability_reports/TALOS-2026-2331

CVE-2026-21413
0
1
0
repeated

Talos Vulnerability Reports

New vulnerability report from Talos:

LibRaw x3f_thumb_loader heap-based buffer overflow vulnerability

https://talosintelligence.com/vulnerability_reports/TALOS-2026-2358

CVE-2026-20889
0
1
0
Show older