Today in InfoSec Job Security News:
I was looking into an obvious ../.. vulnerability introduced into a major web framework today, and it was committed by username Claude on GitHub. Vibe coded, basically.
So I started looking through Claude commits on GitHub, there’s over 2m of them and it’s about 5% of all open source code this month.
As I looked through the code I saw the same class of vulns being introduced over, and over, again - several a minute.
Follow
@GossiTheDog Another demonstration of why free software repositories shouldn't be on #MicrosoftGitHub. #Microsoft is not your friend, and #GitHub is not free software. There are many, many, free software git hosting services, and transferring repositories is easy.
