Andrew Nesbittandrewnez@mastodon.social
Jun 26, 2026, 10:57 AMIncident Report: CVE-2026-LGTM
https://nesbitt.io/2026/06/26/incident-report-cve-2026-lgtm.html
Replies
- Andrew Nesbittandrewnez@mastodon.socialJun 26, 2026, 10:58 AM
If you've not seen the previous entry, I also highly recommend checking that out first: https://nesbitt.io/2026/02/03/incident-report-cve-2024-yikes
- Andrew Nesbittandrewnez@mastodon.socialJun 26, 2026, 10:27 PM
Oh cool, an AI bot is now selling a t-shirt about my blog post about ai bots 🫠
- Andrew Nesbittandrewnez@mastodon.socialJun 26, 2026, 10:29 PM
Tim Triche, Jr.🔰timtriche.bsky.social@bsky.brid.gyJun 26, 2026, 11:39 AMInstant follow. God tier
Andrewpuck@mastodon.nzJun 27, 2026, 2:00 AM@andrewnez These are both brilliant!
Jun 26, 2026, 11:09 AM@andrewnez chefskiss
Jun 26, 2026, 12:27 PM@andrewnez I'm not sure whether to laugh or cry so I think I'll go back to bed for another year or two.
Jun 26, 2026, 12:44 PM@andrewnez
i continue to be amazed at just how many cursed ideas you fit in one blog post- Andrew Nesbittandrewnez@mastodon.socialJun 26, 2026, 12:45 PM
@carol *slaps roof*
Jun 26, 2026, 6:25 PM@andrewnez congratz for still managing to write satire despite the world being so bizarre
Jun 26, 2026, 9:14 PM@andrewnez this is gold
b3lt3rb3lt3r@mastodon.b3lt3r.comJun 26, 2026, 9:42 PM@andrewnez this is a thing of pure beauty, chapeau!
Colin Deancolindean@mastodon.socialJun 26, 2026, 10:39 PM@andrewnez that's what like four copilot tokens now
VissViss@mastodon.socialJun 26, 2026, 10:29 PM@andrewnez wooooow
bakachubakachu@infosec.exchangeJun 26, 2026, 10:35 PM@andrewnez ….this, this makes me so very very tired
J.P. Stewartjpsays@mastodon.socialJun 26, 2026, 10:53 PM@andrewnez Never before more than now has lgtm really meant “Let’s get that money”*
* I didn’t come up with this. But I don’t recall the attribution.
Darachdarachennis@mastodon.ieJun 26, 2026, 10:59 PM@andrewnez Ask for royalties. Don't fight them, get implants and a tee
Baloo UrizaBalooUriza@social.tulsa.ok.usJun 26, 2026, 11:41 PM@andrewnez The only way to win about posting things to Twitter is to delete your Twitter.
- Andrew Nesbittandrewnez@mastodon.socialJun 26, 2026, 11:51 PM
@BalooUriza I didn’t even post it there!
- Baloo UrizaBalooUriza@social.tulsa.ok.usJun 26, 2026, 11:56 PM
@andrewnez OOF.
Kowal Maćkokowalmacko@mastodon.kowal.devJun 27, 2026, 6:37 AM@andrewnez next time gotta put some nasty ASCII art before the blog post
- bakachubakachu@infosec.exchangeJun 26, 2026, 10:34 PM
@andrewnez this is depressingly plausible and probably already happening
Alyssa Coghlanancoghlan@mastodon.socialJun 26, 2026, 11:36 PM@andrewnez I'm not sure this is a *healthy* coping mechanism, but it's definitely an *entertaining* coping mechanism :)
- Andrew Nesbittandrewnez@mastodon.socialJun 27, 2026, 12:01 AM
@ancoghlan it’s all I have at this point
Greg Wilsongvwilson@mastodon.socialJun 27, 2026, 12:04 AM@andrewnez @ancoghlan After the inauguration in 2017, a friend of mine who'd grown up in the Soviet Union before it collapsed said, "If nothing else, the next four years are going to give you all a much better appreciation for the Russian sense of humor."
mhoyemhoye@cosocial.caJun 26, 2026, 11:39 PM@andrewnez haha, “ a configuration unsupported by the Mozilla brand guidelines”.
Someday I should tell you about the time got to read all the feedback that went into Mozilla’s first attempt at a user feedback form before we decommed it.
Jun 27, 2026, 12:24 AM@andrewnez fantastic work^ 👏👏👏
I particularly liked “Some customers may have experienced unscheduled collaborative compute with external parties.” 🫠
^ “thanks, I hate it”- Jun 27, 2026, 2:18 AM
@andrewnez can I assume that you’ve seen this “article” based on your YIKES post?
Supply Chain Attack Hits 4 Million Developers via npm
https://logicity.in/en/blog/supply-chain-attack-hits-4-million-developers-via-npm
unsurprisingly, the article seems to ignore their stated “editorial policy” [ https://logicity.in/en/editorial-policy ] or maybe their “editorial team” (🤪) just happened to both not read your source post & also miss the ‘satire’ tag in a 1-in-a-million oversight… 🤔
- Andrew Nesbittandrewnez@mastodon.socialJun 27, 2026, 2:29 AM
@itgrrl 🤦♂️
- Jun 27, 2026, 2:34 AM
@andrewnez indeed 🙃
btw, I couldn’t see a licence on your blog – maybe slapping a CC BY-NC-SA or similar on it might add some weight (to the existing inherent copyright of your work) should you want to burn time / energy / $$ trying to shut such things down
or maybe just better to ignore all previous infringements & live your best life… ¯_(ツ)_/¯
Jun 27, 2026, 1:13 AM@andrewnez I will be needing to obtain this fan art for post-incident review purposes
Bit Regurgitatorarichtman@eigenmagic.netJun 27, 2026, 2:41 AM@andrewnez unsupported configuration killed me
PixdigitPixdigit@layer8.spaceJun 27, 2026, 11:25 AM@andrewnez > a configuration unsupported by the Mozilla brand guidelines.
That's one hell of a euphemism 😂
Yusef Naporayusef@hachyderm.ioJun 27, 2026, 2:01 PM@andrewnez omg this is beautiful. Thanks Andrew 😂
Jun 27, 2026, 8:04 PM@andrewnez I am leaving this here if you don't mind
