Old Fucking Punk @lwriemen@librem.one

“It’s especially bizarre in this case, where AI is inserting a vulnerability on the server... to prove that the server is vulnerable to your ‘exploit any PHP instance’ attack!”
https://toot.matereal.eu/@schmittlauch/117498200389582450

RE: https://mastodon.social/@hyc/117497613299710498

This argument is just about true for any “but LLMs are useful” scenario that have been presented to me. Equivalent or better results with more sustainable side effects can be had for way less capital and compute invest.

This is *exactly* the trust burning I'm talking about. This is memory corruption. It would have been exploitable 30 years ago. This would have been a wild bug to find when I was in high school.

Today, this is being overhyped in a way that burns trust. You don't drop shit like this on a Friday, after PHP2shell (which was actually critical, but still may have been overhyped) and lead people to believe that if they don't patch immediately all their shit is getting owned. That is absolutely irresponsible.

There are a lot of things in the node patch set from Friday that needed to be rolled out. The eMudhra fixes were bundled in the update. We *do* need to upgrade everything. We absolutely need to patch a bunch of other stuff also. This shouldn't be ignored.

But this is a normal security patch. It's not log4shell. It's not Heartbleed. It's just normal memory corruption that's (partially) mitigated by decades old protections.

This hype is toxic. I want the ghouls out of our industry.

But it's not "node2shell". It's a normal memory corruption that's blocked by ASLR. It's not easy to exploit. You should fix it, yes. But using the "blah2shell" terminology is misleading.

It's misleading because it tells people that it can be trivially exploited. It cannot, unless you disable ASLR and compile without PIE.

OpenAI and the other ghouls want you to think LLMs finding all kinds of critical bugs that are trivial to exploit. They want you to think there's no other way to find them.

That's just not true.

I looked at the code, and you know the first thing I noticed? A fuzzer. Google fuzzes their code. OpenAI wrote their press release very cleverly so that it could be misinterpreted as them finding the initial bug, as others have reported, but this could have been (and probably was) found by the existing fuzzer.

“No Signs of AI Payoff Outside the Tech Sector | The Daily Spark”

https://www.apollo.com/wealth/insights-news/insights/daily-spark/no-signs-of-ai-payoff-outside-the-tech-sector?utm_source=substack&utm_medium=email

> Despite massive investments and widespread hype around artificial intelligence, the technology has delivered zero financial payoff to corporate America outside of tech.

“Slouching towards Bethlehem | deadSimpleTech”

https://deadsimpletech.com/blog/slouching-to-bethlehem

> What's happening to tech, and to the wider world in our current tech-infested era, is a collapse of our model of the world.

RE: https://sfba.social/@drahardja/117500530771409166

Message endorsed, reminding me that I should probably put out a similar note with respect to BLAG, which is likewise human-made and centred.

you can't automate prototyping because you can't automate design because you can't automate invention

@rhelune Large Language Mansplaining 🤯

@jasongorman ... and if you think good lawyers are expensive, wait until you find out what a bad lawyer costs :-)

This is also a joke about engineers or software developers.

“I am proud to say that as part of our new union contract, Current Affairs recently adopted one of the strictest anti-AI policies in the publishing industry. No text that is AI-generated may be published in our magazine. No AI-generated art may be used as a Current Affairs illustration. When you read Current Affairs, you are going to be reading the thoughts of a human, and seeing the results of human artistry.”

#ai #noAI #magazine

“Why We’re Banning AI”

https://www.currentaffairs.org/news/why-were-banning-ai

While the majority are struggling with the cost of living, politicians are perpetuating a system that rewards the super-rich and punishes the rest.⁣
⁣
All humans have the right to decent housing, good education and a good life. ⁣

An absolutely historical and massive pro-Lula rally took place in Brazil right before the second round. Some locals are calling it the BIGGEST rally of any kind ever.

h/t Dems Might

Hey, psst - are you a Boston area game developer who actively dislikes ai/LLMs... and feels out of place in the local scene?

Reach out, I'm putting something together.

(Do you need to be Boston area? No! But I'm just trying to make baby steps in reaching out...)

The appropriate response to any version of "never bet against Elon" is "citation needed." And yet I keep seeing versions of that evidence-free assertion from people who really should know better.

http://robpegoraro.com/2026/10/24/saying-never-bet-against-elon-does-not-actually-make-you-look-smart/

@baldur this reminds me that it’s time to sit down and write a “yes you need a code of conduct for your OSS project that explicitly rejects nazis” thing, because it’s definitely not a vague theoretical thing any more.

I have a faint hope that more than zero people will start being better about community management in their projects. Maybe even three people will do it.

Student activists at Cornell have started putting up these signs on campus. I commend them. When I was at Syracuse 35 years ago we plastered the campus with flyers that used "My Rapist" in them. "I saw my rapist in class today," "SU let my rapist off," an ad in the student newspaper that said "My Rapist reads this newspaper," etc. It is good praxis. The problem is that it doesn't seem to have gotten any better in the past 35 years. In fact it may have gotten worse.

A Black couple showed up to tour an apartment in Queens... and the broker accidentally texted THEM instead of the owner: "Ugh. They are Black."

They'd just moved from Delaware for her new job. Now they're SUING Douglas Elliman, the agent AND the owners.

"It doesn't change the pain. It doesn't take away the pain you caused us that day."

Think about it. They were judged before they even had a chance.

They only found out because she texted the wrong person. Most people never do.

I was in a taxi the other day, an electric Toyota, and it was constantly bugging the driver with various “driver safety aids”, like literally a stream of bongs and chimes and sirens. And half of them were “driver inattention! Sit up and look forwards!” He was sitting up and looking forwards, but also he was black, so the car’s interior camera was not registering him properly. But hey, tech is neutral and AI doesn’t encode bias.