apparently a tailscale privesc too: https://bsky.app/profile/ewindisch.ontological.observer/post/3mykgeqrggk2o

can the week stop eventuating? please? we're all a bit tired

RE: https://woof.group/@aphyr/117490642912620061

someone please make this film

he’s right https://social.wildeboer.net/@jwildeboer/117490035606267190

I am le tired

this week has eventuated far too much

the cynic in me: "can't wait to find out what real nasty thing slipped through the cracks while we were all worried about php and gitlab and nodejs and friends"

oracle jdk too: https://www.cve.org/CVERecord?id=CVE-2026-91403

2 core php issues, a CA that was roleplaying xkcd 221, and now a nice lovely little cvss 10.0 gitlab RCE? the latter of which again appears to be because ruby and regex are a security match made in hell?

what a day

(e:) and some java: https://www.cve.org/CVERecord?id=CVE-2026-91403

dunno the provenance of this image but, well, yeah

#eMudhra #ca #random #xkcd221

today's some serious heartbleed-esque vibes

haven't had to give this much of a shit about forced software corralling in ... a while

thanks php, I still hate you forever, and this just ramped it up :|

ah

I really do need to move off this to something I can reliably control :|

why is my masto UI now in LLM purple and laid out like twitter

what the fuck

hah nice, just saw an ooooold vw golf chico on the road, in that green. still such a lovely colour

You know, I’ve been mulling about this for a while, and it’s time to say something

I’m truly in awe of LLMs

No, seriously, I’m not joking!

It’s wild! This truly is a transformative and revelatory technology! Saves so much time!

You still don’t believe me? Look, the proof is easy: just how many shitheads slobbering over LLMs do a fucking speedrun to tell us they’re shitheads!

No other technology previously has made them self-identify so fast! Progress!

so how aware is @conservancy of the behaviour of one of their boys? anyone know whether they have any plans to deal with him?

welp, this just happened again

couple minutes ago: clicked a link, read some stuff

just now: clicked a link, read some stuff

earlier: the new tab button was available. now, gone. neither of the domains I clicked on were unfamiliar to me, or irregular

groan :|

second time in a week that my phone has the new-tab button in iOS safari disabled when in private browsing. works in normal, works in a testing tab group. anyone seen this bug before and have any idea what causes it?

#ios #safari

kernel/C devs who want to tell me I'm hilariously wrong, go right ahead but please bring detail

and, like, I'm not gonna fight you. I don't give a fuck about a kernel holy war.

I'm coming at this from "I've had to hack some C (for various reasons, in various software)" over the years, and this patch looks like a fucking mess to me. even in _other_ languages this patch would look like a fucking mess, imo

diffed against master (045958ac at time of me subjecting myself to this)... well, it was a pain to read (with `delta` as pager)

and it really did seem to just ... throw/collapse a bunch of logic

on the whole, impression: if the prompt didn't exist || if we were 6~8y in the past, linus himself probably would've shouted this branch into rejection

1) it uhhhhh kinda throws a lot of complexity/detail away? appears to, anyway. I didn't get the impression that it really managed to move the essential work component of that complexity elsewhere (but I am not intimately familiar with the kernel so this is read-only)

2) *wow* does his prompt hate uppercase names/symbols

3) ...... but only in file contents. filenames? yeah nah we good bruv, keep dat capital L, no matter the desync to content

so I read that `rcu-free-v3` branch (diffed against main) that 'ole torvalds chatted a prompt about

and while I'm no daily kernel dev (and most certainly not one under those ....lofty .....standards espoused in the more recent posts)

chat, I have questions

disclaimers: fuck C. I'm not gonna spend a thursday evening thinking _very_ hard about C. but, y'know, I can scan and get the gist

and with that out of the way, I have some remarks