Ambrose Andrews @znalo@librem.one

Throwback Saturday memory: there's something about Paris.

(This was taken from the high tower on the university campus).

We are in a very dangerous time, when "AI" security companies are competing to prove that their technology will provide returns on investment. The industry has always been broken. There has always been an incentive to inflate the importance of vulnerabilities, but there was always a risk of burning hard earned trust. In the end, a lot of folks decided it wasn't worth it.

But "AI" companies haven't worked to earn that trust. They have something to prove, right now, or they don't exist. So now everything is critical, "impossible to find without AI," and so on. Blah2shell sells, and now everyone wants their little vuln labeled that way regardless of the complexity or risk.

Burning trust in security is the absolute worst thing you can possibly do in terms of tech. I'm worried about where things are going right now.

There have always been more bugs than we can fix. We've had to triage. If we break that, we flood maintainers until they burn out. Our job is not to fix everything. It's to filter information for the people who do.

But right now I'm reading vuln reports that aren't distinguishing between a 100% reliable and trivial exploit like log4shell and complex memory corruption bugs that are incredibly noisy and basically impossible to exploit with ASLR. ASLR is like 25 years old. You have to do better than a simple buffer overflow now to get a shell.

But people have shit to sell, so we have more noise. Again, "we've put the attenuator on the wrong side of the equation."

Israeli occupation aircraft bombard the town of Kafr Tabnite, southern Lebanon.

#Israel #Palestine #Gaza #Lebanon

Breaking | Al-Shifa Medical Complex: Two Palestinians killed and others injured in an Israeli airstrike targeting a vehicle in the Tal al-Hawa neighborhood, southwest of Gaza City.

#Israel #Palestine #Gaza #Palestinian

internet taken offline by huge pulse of smugness from static site operators

Please stop anthropomorphizing AI executives.

They're not sentient and they can't actually think. They just predict the next token using statistical patterns scraped from LinkedIn, X and the Financial Times. The apparent "understanding" is simply a parlor trick: They produce text strings that *sound* plausible, but they don't actually have any understanding of the world.

I'll grant that they became a lot more technically impressive when Reinforcement Learning from Investor Sentiment pipelines were introduced, but fundamentally they're still just stochastic bullshit generators. Running them in a loop and giving them access to the internet will end up being the most expensive mistake in the history of technology.

Clashes in France as uprising swells to millions.

https://freedompress.org.uk/2026/10/19/clashes-in-france-as-uprising-swells-to-millions/

#france #news