LiveLM

Holy shit I thought the same

I’ll still blame the corporation gaining god knows how much money with this over the individual person, even if I also think a Developer should have know better.

Poor headline.

It began in June when an employee on Binance’s wallet developer team thought they’d indulge in some vibe coding by installing a popular AI coding tool. But they ended up downloading a tampered installation of Homebrew, a tool that’s popular with software engineers, after clicking a malicious ad.

There’s lots of packages on Homebrew and it’s a popular package manager, even outside of MacOS. He could have decided to grab anything from Homebrew and get hit.

The real one to blame here is Google for doing zero vetting on the crap they put at the top of the search results. Malicious ads for popular software happen constantly and so far they haven’t moved an inch to fix it.

That’s exactly what I’m thinking.
98% of all the legacy code of Cisco? The whole corporation? The decades of it?

Assemble a team to do it, not just a single guy!

People out there really thinking the answer to everything is just “more tokens”

Can’t let the plebeian have too much fun

This does very little to convice me to not migrate away.
My #1 issue was them sacrificing Security for Speed and this latest change does jack shit to address it

Load bearing comment.

PS: Andy has partially responded to article in the ProtonMail subreddit. He has alleged that 404 took his comment about security out of context and offered absolutely zero context or explanation about that “Calling his employees losers” bit.

Here’s his full comment:

Happy to answer actually, since the quote above was taken out of context. Proton today does way more security reviewing than we have done at any time in the past. With the proliferation of AI tools, our code is also under more third party scrutiny than ever before. We see this across the industry, with critical software bugs (like the recent PHP bug) being found on an almost daily basis. However, several extra days of human review is not the correct way to confront this challenge. We still have human review, but now augmented by AI, has become exceptionally good at finding vulnerabilities in code. For some time now, Proton has also been using unaligned models with custom skills to do a thorough review of our code. This approach is better, and also faster.

Had I had even the most remote idea this would happen, I never would have migrated all my addresses years ago.

Fuck this. I can’t believe I’m to waste my time changing all my fucking addresses again.

My fault for not buying a domain for my email to at least make this slightly less painful.

So much for muh Secure and private mail. Don’t even know where to migrate next. Fuck this.

“Life’s not a checklist — it’s about shared moments and growth. I’m practical, open-minded, love rock, long drives, trivia, sports, and a good laugh along the way.”

🤖🤖🤖💻📢

I’ve thought about bodging something together with n8n and Tasker so I can just screenshot something or send it a voice note and have it add an event on my calendar.

That being said my server is an 8th gen i3 w/ 12GB of RAM and I’m not willing to leave my desktop running 24/7 so idk if I can run a model good enough to handle this over there. Even if it is a supposedly menial “OCR and call tool” workflow.

The author getting pissed every step of the way is really funny, great write-up!

I blacklist just about anything executable from downloading in Qbit but it stills feels a little clunky, I wish the ARRs would inspect the torrents and immediately ignore the .exe ones before they even hit Qbit, I feel like it should be a default option to help the Newbies out.

From the creator of Don’t Create The Torment Nexus comes a new tale: Stop Building The Thing That Could Kill Us All

This is why I’ve always preferred to enter the TOTP code myself instead of using the “Approve Sign-In” method.

Also the thing about the Redirect Loops and wacky login forms. Goddamn how come they ain’t fix it yet 😭

I still can’t believe a world potency as big as the fucking United States is publishing fucking deportation minigames to their official fucking website!

And they use Sega and Microsoft logos to peddle it on Twitter!! And of course they won’t do anything about it legally because lmao why would they?!

To hell with this clown republic 🤡

Some engines support searching by IMDB id, probably because of cases like this.

Scrapping is only okay when we’re the ones doing it!

~ Every AI Company ever

Ngl after trying out Rootless Podman on my system (I was playing with Distrobox) I kinda wanna switch my whole Homelab to it, I’m just lazy, afraid the move to rootless with blow up everything and have zero fucking free time.

For all that I’m scared this will enable terrifying new exploits, I’m equal parts happy all this proprietary crap is getting blown wide open faster than ever.

Hell yeah, fuck yo lock-in, fuck yo apps biatch 🖕

Playable could mean anything from “slightly janky debug build” to “load into texture-less world, walk around for 5 minutes and BSOD”