ike

TIL about a VSCode vulnerability involving auto-run tasks inside a repo. That got me thinking: could I use this to re-program a developer's AI agents and get them to do what I want? Even worse — could I do this to all a developer’s code repositories? Turns out: hell yes. ike.io/open-a-folde...

https://youtu.be/RiTTUCQFqdc ->perma

new sounds in bugland https://nojoy.bandcamp.com/track/s-ki-amadeus ->perma

https://absinthefather.bandcamp.com/track/marie – thanks to @catbus.phd ->perma

https://ike.io/scrapbook/kelvin-wake-in-the-clouds-formed-by-ile-amsterdam/

It’s a metaphor ->perma

https://ike.io/scrapbook/devils-horns-sunrise-during-eclipse/

https://ike.io/scrapbook/cray-2/

https://ike.io/scrapbook/barbara-and-michael-leisgen-mimesis-23-jpg/

adhd medication as sword of damocles: will you focus on what you want today? ->perma

i can now POSSE from my site to bsky, masto, and substack. pretty slick — https://indieweb.org/POSSE ->perma

https://quynnbell.com/how-to-set-up-a-kiosk-system-on-linux/ ->perma

https://ike.io/scrapbook/stefan-georgescu-gorjan-photographs-brancusi-filming-erection-of-coloana-infinitului/

first, remember/ that you are dying

"Mr Franklyn, trying to polka on the slippery stones, fell in twice. 'Nothing is simple,' he said with dignity as he oozed up the bank. -- Dylan Thomas, from The Outing, 1955 ->perma

https://ike.io/scrapbook/eikoh-hosoe/

https://ike.io/scrapbook/clara-scintilla-flying-south/

i am bowled over by this

https://ike.io/scrapbook/helene-sardeau/

https://ike.io/scrapbook/derek-jarman-in-his-garden-at-dungeness/

river water always runs / down your collar, clavicle – regardless / you must lift a little relentless drop

If I’ve learned anything about writing from @tacobellquarterly.org, it’s

a throwaway line ->perma

https://ike.io/scrapbook/fosters-pond-arno-rafael-minkkinen/

https://ike.io/scrapbook/james-baldwin-1987-by-gerard-gastaud/

Introducing the DevDefender Security Digest: a collection of relevant news, security threats, and vulnerability reports that affect developers, software pipelines, IDEs, and dev environments.

migrated to blacksky.community -- it was easy! I used move.eurosky.tech (didn't know about tektite.cc yet) now i just want a tshirt with the logo :)

i’ll take physiological meltdown for $600

Came across the phrase "cognitive DDOS" to describe our present culture. Understood instantly what it meant.

I have a poem in the new @alocasiamag.bsky.social anthology: 99 Queer Writers on Plants and Nature, edited by @sarahclark.bsky.social and Ashely Adams. "Mother of Thousands" thanks for reading 😊

'It exploded before anyone thought to check whether the database was properly secured.'

Memory is a fragile thing in this moment, so it is important to keep in mind that Hakeem Jeffries refused to whip his caucus against ICE funding earlier this week.

1. Create a standard security.txt 2. Cram it into your envs far and wide. 3. Make it easier for researchers to return your lost envs to you without splashing around in prod with your creds. lostenvfound.com

This is the real story.

my PoC could introduce this type of exploit into Cursor rules — terrifying ike.io/open-a-folde...

Today is the day. Right now hundreds of Minnesota businesses and institutions are shut down. Thousands of people are refusing to work. There’s a massive picket at the airport. Minnesota’s resistance to ICE today is changing the tenor our fight against fascism. www.jphilll.com/p/the-first-...

Thousands outside Terminal 1 at the Minneapolis airport now.

I will just keep repeating. I have never never never seen anything like this. 30 years of reporting.

A zero-click vulnerability in the tasks.json file allows attackers to silently hijack Cursor’s instructions across code repos.

Developer proves AI agents can be reprogrammed via new exploit: thenewstack.io/developer-pr... via @thenewstack Special thanks to @ike.io for his help on this and showing how the exploit can be used against AI agents.