mxey.bsky.social

This never gets old (& also shows how hard forecasting AI is even for AI) “Hey Claude Fable & GPT-6 Astra, Without looking anything up, when do you think we will solve the Exponential Time Hypothesis?” (I only show part of the answers for space)

when i was in school, "revising a draft to make it yours" was called plagiariasm

just FYI, today's Apple OS updates still put the bad eMudhra certs in /etc/ssl/cert.pem, so /usr/bin/curl and /usr/bin/git and so on still relies on them. if you already remediated /etc/ssl/cert.pem last week, install the update and then do it again.

people shit on the Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com> headers but actually they're *incredibly* useful for retroactive analysis of things like wordiness and failure rate on CLs produced per model etc. and you lose that if you reword or squash it away without "assisted-by:"

there isn’t really much of an advantage to floating around your house when you’re a ghost. turns out all the stuff in here was basically set up at the correct height for when I was walking around

AI assistants have a recognizable tendency toward the moderate, conventional, and socially uncontroversial. Everything gets translated into responsible habits, balanced perspectives, and incremental improvements. Its fucking infuriating

Oh hey its the fucking thing doll said they should have done in the first place, point the models at the sandboxes, and look it fuckin worked holy shit who would have thought

Reminder that "formally proved program X" is a meaningless statement. You formally prove that some program or a reduced model of it upholds some kind of property or invariant

One important piece of context that many people might not realize: Shutting down a game studio is expensive. Shutting down a French game studio — thanks to labor laws requiring an extended severance period — is VERY expensive. Xbox doesn't want to take on those costs.

Let me share some positive news for a change: Despite all the gloomy headlines today, my understanding is that there are multiple paths actively being explored that would save Arkane Lyon. Anything can happen during negotiations, but at this point I'd be surprised if the studio is shut down.

this is truly the best tankie bait ever devised by humanity

A thing I realized at some point is that a lot of the paranoia that has held me back from building certain things was completely justified. I used to admire others who could pull it off, but at some point it clicked that many of them just didn't know what they didn't know

Don’t patch your PHP because AI found the vuln so it’s not real and never happened Humans have only ever produced perfect code

BREAKING: Electronic Arts is cutting 400 jobs and shutting down BioWare, the legendary development studio behind Dragon Age and Mass Effect. www.bloomberg.com/news/article...

not to be the most annoying person in the entire universe but both these cves are memory issues that rust would have prevented

Two major PHP remote code execution vulnerabilities fixed today: www.php.net/archive/2026... If you run PHP, take your site down until you can update. And be ready to do this again in a few days. ("If you see two ants in your kitchen, you don't have a two-ant problem.")

The macOS built-in curl, git, pip, python3, perl, ruby, and openssl all read /etc/ssl/cert.pem, which still has the emSign root, but they don't check revocation like Apple's Secure Transport libraries. This is, uh, a problem. git and pip especially. I added a short-term workaround to this page.

Received some video evidence of the eMudhra key generation ceremony

I guess the cybersecurity apocalypse isn't all bad...

is today a good day to troll your overworked security friends? no, they don’t have the patience 4 it

Nothing has a moat anymore but somehow still none of the software does what I want. Interesting

The details are now public, as of two hours ago. bugzilla.mozilla.org/show_bug.cgi... The secret P-384 keys for these intermediate CAs are all zeros except the last 8 bits. All not-updated software can be MITM'ed now. IOT boxes that can't or don't update are now trivially MITM'able forever.

🚨 Six WebPKI Intermediate CAs are compromised. This is bigger than Heartbleed, but a client-side issue. Anything that verifies certificates against public roots, like most TLS clients, is/was affected. Details, live test, patched versions and workarounds at emudhra.we-have-a-problem.com Act now.

After the firefighting is done (and a nap) we'll need to have a long, serious conversation about the state of non-browser non-platform X.509 verifiers. The Linux status quo is "a pile of PEM files behind a dumpster" and that's not an acceptable excuse for a root store in 2026.

it's bread. #art #silenthill

i don't know what features http/4 will have but http/5 will feature sticks and stones

Modern homes are too eager to explain themselves immediately. It dislikes that. A proper house should reveal itself in stages. First you notice the woodwork. Then the oddities. Then the curious alcove. Then six months later someone says, “Oh, that? That door goes to the map room.”

The vibecoding tag has a good chance to eventually destroy this community entirely. lobste.rs/s/ggpwfi/it_...

The romanticization of decentralized traditional society has this extraordinary habit of forgetting that power does not disappear when the state withdraws. It becomes private. You haven't abolished government. You've created a vacancy, and the local patriarch is delighted to apply.

I ask Claude to write some tests. It writes a test containing: strings.Repeat("All work and no play makes Jack a dull boy.\n", 2<<20/44) That quote (nor any other Shining reference) doesn't exist in the tree. Uhhh.

What's a "mixed sex emergency ward" except *an emergency ward*. Vile from MP Tonia Antoniazzi It's also bullshit that your gran in an English emergency room cares. In fact it would be exceptionally strange that she should care Labour need to cut loose these MPs. How's polling at 26% going for it?

After 10 years, I disabled my lobste.rs account. I think it's clear I am not a culture fit anymore with whatever it is they have going on there. I feel more and more like I don't belong in almost any tech community because I believe LLM agents are real, passkeys are good, and fascism is bad.

Cloudflare has now published a detailed analysis of the Yandex outage. They looked at search crawlers, malicious automation, AND social media traffic. Their finding… blog.cloudflare.com/yandex-outage/

if you think "SRE" means "pager bitch", just fucking say it with your chest, rather than dodging around like this.

my husband just interrupted putting dishes away because he wanted to show me something called a “jj megamerge”. i’m scared i’m losing my husband to jj.

a lot of people on both the pro and anti-ai-for-coding sides have low standards. no, if you're not paying attention it's probably slop; no, we largely failed to produce quality software in the before times

I guess my thought is that substantially all the software I'm responsible for is "mission critical". I've always gravitated to problems that matter

TL;DR: I put three Jewish items in my game five years ago so it made it into a listicle on a Jewish Australian publication. That was enough to make a speaker accuse me of being "zionist", which in turn was enough for Freeplay to remove me as a sponsor, literally on the day of the event.

cpu is dogshit slow for inference, and self-replicating worms already exist (you may know them as rVPNs or botnets) alas they're just repackaging an existing problem as "you should be afraid of everyone's ai except ours"

Aha! I found the pic from the last time I painted her.

”The snake oil actually works” is such a perfect summary of this moment

Ant and Oai are pulling a rhetorical sleight of hand, but the core is that if you disregard decades of software security ai models will do dangerous stuff. "but glasswing exploits 0-days by itself", yes, if you let it

Publishing “Cryptographic Right Answers” for developers is a tradition by now. Colin Percival started in 2009, Thomas Ptacek followed up in 2015, and then Latacora carried on in 2018 and 2024. I put together a list updated for the renewed urgency of migrating to post-quantum algorithms.

If elected as the President of the Internet, I promise I'll continue and support Ukraine's war on Internet bullshit

Australopithecus 3 million years ago:

The problem is the execution, not the streaming. Streaming it is just saying the quiet part out loud. There's nothing "civilized" about killing people behind closed doors or using injections rather than bullets.

Man who won’t give his employees piss breaks claims many piss breaks on the horizon