and yes, I think they've been suborned by claude because the solution is "way more code" instead of "simplify oom handling in an easy to understand way" and claude has a history of suggesting "create a vast new thing" before any other solution, as claude is a paperclip maximizer for software and it's gotten into everything.
something that's been bothering me about the phpocalypse - which, talking with @rain I was able to put a pin in, after they pointed out what they would do in a similar situation - is that this doesn't feel like a security patch at all.
this feels like a major feature upgrade.
which is weird in the circumstances.
the kind of patch that you would expect to see during a major all hands on deck kind of emergency would be the smallest, least-touch change possible - Rain suggested "abort on OOM" which is a nice sensible solution; sure it hits availability a little but in a way that synergizes nicely with defender goals (denying materiel to an attacker; reducing blast radius to "an instance becomes momentarily unavailable until the service gets restarted")
instead, this has a massive rework of how OOM situations are handled, with a completely new error handling mechanism added and -backported- to other prior versions?
that doesn't smell right at all.
and now a massive patch drops that MUST BE APPLIED NOW - so, intense pressure to comply without careful evaluation?
call me paranoid, sure. but this doesn't fit what I expect to see, and I don't like it, and I am feeling very suspicious that the people making these decisions are having their decisionmaking compromised in some fashion.
ooh and here's Apache Traffic Server with a hat trick
https://www.cve.org/CVERecord?id=CVE-2026-111815
https://www.cve.org/CVERecord?id=CVE-2026-111814
https://www.cve.org/CVERecord?id=CVE-2026-111812
3 billion devices run Java, and that's a threat.
oh hey another cvss 10
https://thehackernews.com/2026/10/critical-gitlab-flaw-cvss-100-could.html
I can't believe I have to fucking say this but:
DO NOT FUCKING VIBECODE YOUR OWN CRYPTO
Four is the number of tequilas that everyone in ops gets tonight.
* the "is/does" distinction is a model I've been contemplating for a while, about whether a concept is seen as an inherent trait of something, or as a quality that relies on intentional engagement with the thing - "this is blue" vs. "this looks blue" as a trivial example.
there's probably something in actual philosophy about this, but I haven't found the name for it yet.
** the botfuckers insist that you can just learn from the llm, but this makes several supply-chain assumptions behind the scenes that tend to be a bit of a Wimp Lo situation when they get applied in reality.
ah, there is greater scope when I go looking into things.
so the botsuckers are basically killing off communities by having problems understanding the is/does distinction*
which sucks, because this means that expertise is being removed from the human sphere - deskilling at the "humanity" level - and opportunities for people to obtain that skill via human interaction** are thus made unavailable.
it's also worth noting that this incandescent personality has also failed to engage with extant projects that have been working on the same concept: https://github.com/pret/pokeheartgold
(but ofc this is because I know what to look for, and I'm hardly starting from scratch here, and I have skills from the Beforetimes on how to find and identify reliable information, which the Kids These Days do not.)
it's worth noting that a cursory search on "decompile ds rom" reveals multiple tutorials and toolkits - many of which predate the claudepocalypse - that could do the job in a weekend or, if you're motivated, a few hours.
llm users never bother checking for prior art and this is a Problem.
so evidently, ~4 MB of nintendo DS decompiliation is worth $56k and has a 1-month lead time.
consultants, adjust your pricing schedule accordingly.
seriously - actually seriously - what the everliving fuck is wrong with the assholes that greenlit this behavior?
RE: https://hachyderm.io/@hazelweakly/117389204329470094
the 'gish gallop' pattern - commonly used by flat earthers and other such deluded charlatans - is a psychological attack intended to exhaust and demoralize anyone in connection with consensus reality.