well now this looks more like it, maybe? (our trap cuts off at 240 characters for nostalgic reasons)

POST /
Connection: close
Content-Length: 25212
Next-Action: x
Content-Type: multipart/form-data; boundary=------------------------bissa_cve_boundary
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Python/3.12 aiohttp/3.14.5

AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

@atax1a hack the planet!

did you all watch Hackers and think The Plague was the good guy? the LLM should offend your sensibilities! acid burn would never slop!

hackers of the world, unite. the megacorps are stealing our work and rather than being outraged, you are sucking at their teat, waving a white flag, and constraining yourselves to the envelope of an average random walk of stack overflow. put down their tools and take back your own destiny and independent thought

freddie mercury couldnt sing "is this the real life" and "mama i just killed a man" in 2025, he would have to sing "chat, is this real" and "mama i just unalived someone"

RE: https://mastodon.social/@CuratedHackerNews/117480794743808386

shout out to the 505

can't tell you how much i love that AInus's showcase 10x speedup patch for how good the chatbot was turned out to be (a) broken and (b) slower on real world loads

See now we're fucking talking

One of the only weapons we wield in this fight is our money and attendance, and if everyone involved with an event says "I'm not going unless you stop using AI" there's only two outcomes:
*No AI or No Convention*

Conventions are made by and for the community

Fighting game legend SonicFox ...

accepting more than 3 charsets? fuck you and die!

if ($http_accept_charset ~ '[^,]+,[^,]+,[^,]+,[^,]+,?') { return 402; }

ok, now, what the christ is this:

Accept-Charset: us-ascii,ISO-8859-1,ISO-8859-2,ISO-8859-3,ISO-8859-4,ISO-8859-5,ISO-8859-6,ISO-8859-7,ISO-8859-8,ISO-8859-9,ISO-8859-10,ISO-8859-13,ISO-8859-14,ISO-8859-15,ISO-8859-16,windows-1250,windows-1251,windows-1252,windows-1256,windows-1257,cp437,cp737,cp850,cp852,cp866,x-cp866-u,x-mac,x-mac-ce,x-kam-cs,koi8-r,koi8-u,koi8-ru,TCVN-5712,VISCII,utf-8

Oh huh, the guy who broke the embargo for the latest major PHP CVE has started posting about shitcoins and even a pump.fun link.

Guess this was all just part of a crypto scheme, then! Fun (/s).

#infosec #php #CyberSecurity

having used llms before for work, i have first hand experience of the effects they have on your mind, especially if you use them for creation (like writing code)

they're addictive gambling machines, even if you know they are. they can't be used responsibly. after stopping with their use for work, i noticed myself reaching for them. it took me months to fully recover. there was also very noticeable skill atrophy

i knew of the many issues, but these things work on your monkey brain, they're very hazardous

if you use them and you're not forced to use them, stop using them. they are not worth it in any way. if you can't stop using them for work, try to avoid them outside of work as much as possible. harm reduction is a valid strategy

this technology needs to be eliminated, there is no way to salvage it

and this is me focusing on the psychological issues, there are way more severe social and ethical issues with it

why the hell did OpenBSD use a slop extruded meme for the 8.0 release? I don't care if it's ironic. getting real tired of this shit. do I have to drop literally everything else just to work on my OS now?

honestly we saw the writing on the wall with PHP over a decade ago and took pains to remove it from our life and while it was slightly inconvenient it sure does pay dividends in not getting popped on the regular

anyway we're going to guess, without having looked at much of the details, that these shapes of requests in our ratrap that we've been getting for a while, with a declared boundary but only one byte of content, are somehow related to the PHP shit

POST /
Connection: close
Content-Length: 1
Cache-Control: no-cache
Pragma: no-cache
Content-Type: multipart/form-data; boundary=----cf52ce0c18488c6f5cdc
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:34.0) Gecko/20100101 Firefox/34.0

E

PHP and LLMs share a lot of the same character: fragile white people make a tool with strongly negative externalities core to their identity and consider any criticism of the tool to be a personal attack and also justify their usage with appeals to popularity

Ken Thompson, 1983: wouldn't it be awful if someone snuck secret code into a compiler that broke our ability to trust the output of a computer

AI Guy, 2026: wouldn't it be cool if we stuck something we know can't be trusted into every part of the computer

So today some of the worst people on earth using the most environmentally destructive tools on earth brought down a huge part of the internet by exploiting a potential problem found many years ago in PHP which was previously not practical for anyone to exploit.

It only became "practical" to exploit this problem because "AI" came along to automate the boring and repetitive work required to do so. Absurd amounts of computing power were applied specifically to break into other peoples' websites.

Now the same people who are behind this are trying to pretend that they're heroes for finding an exploit.

"AI uncovers critical vulnerabilities", their headline reads. But the vulnerability was only made to be critical by the very same people as hide behind that headline.

Many thousands of websites are offline, many people are losing money, many thousands of people are working hard to try to patch or work around the problem, many small guys are finding it almost impossible to patch, and we're all supposed to be thankful to OpenAI and others involved ? Nah. Fuck off.

Everything about "AI" involves a lot of externalized costs, but I've still yet to see even a single positive thing that has been achieved by "AI". That has definitely not changed today.
#php2shell #php #fuckai #openai