iou

Before LLMs “just-patch-anyway” was a viable strategy because of the low volume. Now it’s amplified so much that taking that approach can introduce instability when the vulnerability was not even exploitable in your usage.

Take the recent example of Copy/Fail (CVE-2026-31431) if you were to evaluate it against your k8s seccomp and noticed that the argument to the syscall socket of AF_ALG is not allowed, then the vuln is not reachable in your pods.

I’ve not used this tool (I plan to check it out), but I think contextual evaluation of CVEs is important in modern times.

I thought mcsweeneys did satire?

What is this? It frames it like facts then you realize it’s just some religious agenda

That’s all they got?!

There’s people still using x?!

What’s the reason these always get flagged? Is there something inaccurate?

Aww was hoping this would be a Peter Thiel immortality quest story :/

I sure hope there’s an anti-debug framework called Durin’s Bane?

Oh noes, what do I call my Apple TV now?

“Welcome to the party, pal!”

Timely post with the vulnerability research this week? https://www.tarlogic.com/news/backdoor-esp32-chip-infect-ot-...

> I'm gonna need you to go ahead and RTO.

This is the one worth watching, it’s a total scam and PayPal is fine with it apparently.

As other commenters have said, a better solution needs to be something that is prohibitively difficult for bots to mint.

I’m sure there are a few contenders in the space but one I’m aware of is [worldcoin](https://world.org/)

I kinda like Safari…

If you like this blog post I think you’d like this book https://www.artofunittesting.com/

Test naming convention defined there of

[UnitOfWork_StateUnderTest_ExpectedBehavior]

Always resonated with me as from that you could also discern bugs in test code from developer’s intent.

It’s truly terrible, this is the right thing.

There was some writeup from a few years back https://e-estonia.com/estonian-e-state-has-experienced-sever...

It’s not going into granularity you may want though.

lol, the picture in the post is of a macaron, not a macaroon

https://www.foodnetwork.com/recipes/packages/baking-guide/ma...

Why the word Pro so many times!

Needs retitling to “Chrome and derivative browsers know your battery charging level”

Canada needs to do this, it’s out of control on every media avenue.

Yes&

If you like that angle I think you’d really like the part of this talk https://www.youtube.com/watch?v=k6pPcnLuOXY from Emina Torlak, goes into how they were able to have duel implementations to get both performance and formal correctness.

Did this in 2009 and it was so fun, I want to do it again when my kids are old enough to go too.

It’s not OSS :(

I figured with this type of blog post the finale would be, and everyone can try it out at…

Hopefully they do release it OSS eventually.

Did anyone else miss the sleight of hand from OpenAI with all this? I thought their goal was safety in AI usage? https://openai.com/charter/

But then they just sold to Microsoft and the race began, how is that not a violation of their charter there?

Take a listen to https://securitycryptographywhatever.buzzsprout.com/1822302/... the Q&A helped explain a lot

I saw a friend of mine (who’d done AA and had been sober for 10 years) be the life of the party all the time.

This allowed me to disconnect the idea that alcohol is needed to have fun in highly social contexts.

I then just quit cold turkey and that was 4 years ago.

Yeah, that is a reasonable question if you’re not familiar. People are mean if they’re downvoting :(