The Internet’s undersea backbone is slipping into the danger zone
Elisabeth Braw’s book Undersea War on rising risks for undersea infrastructure.
https://arstechnica.com/gadgets/2026/10/the-internets-undersea-backbone-is-slipping-into-to-the-danger-zone/?utm_brand=arstechnica&utm_social-type=owned&utm_source=mastodon&utm_medium=social
OpenAI, Google pushing new AI models easily tricked into making nudes, researchers say
Attack method exposes flaws in OpenAI, Google safeguards against AI nudes.
https://arstechnica.com/tech-policy/2026/10/openai-google-pushing-new-ai-models-easily-tricked-into-making-nudes-researchers-say/?utm_brand=arstechnica&utm_social-type=owned&utm_source=mastodon&utm_medium=social
Blink: Intent to Ship: Spell check custom dictionary API
Blink: Intent to Ship: Spell ...
RE: https://fosstodon.org/@rustnl/117365843978469877
The CfP for RustWeek 2027 is now open! As co-organizer of the Industry Track, we're looking for insights about Rust being used in production.
Specifically:
What business goals has Rust helped your company achieve?
Do you have measurable results from transitioning to Rust?
The CfP closes Jan 10, 2027.
2h agoIm Späti läuft immer laute Junge-Leute-Musik. Rap oder so, nicht mein Ding. Schlimmer aber: wild unterbrochen durch YouTube Werbung. Erstmal Firefox mit uBlock Origin empfohlen 😛
3h agoA #curl audit by Aisle
https://daniel.haxx.se/blog/2026/10/14/a-curl-audit-by-aisle/
3h ago#curl 8.23.0 with Daniel Stenberg
4h agoOn my way to #EuroRust26, see you there folks 👋
4h agoThe #curl release presentation is live-streamed and the stream is.... up!
4h agoThe full vulnerability report for the nasty #curl UAF problem is disclosed. It was submitted by people at Anthropic. The reproducer is a minor piece of art.
4h agoEven if we rewrote #curl in rust, the just reported UAF RCE could still happen when integrating third party libraries like OpenSSL, nghttp2 and others.
Look at the linked source of ‚upki‘ the new lib for certificate validation. Most of the code is ‚unsafe‘ and memory pointers are stored in OpenSSL via „*_set_ex_data()“ beyond any guard of the rust compiler.
#curl used such an „ex_data“ pointer beyond its lifetime in the CVE. C or rust unsafe, makes no difference.
https://github.com/rustls/upki/blob/main/upki-openssl/src/lib.rs
5h agoA UAF turned RCE
In the #curl 8.23.0 release we shipped a fix for one of the worst vulnerabilities in curl in a long time. We grade it severity HIGH. It is known as CVE-2026-92392 with the title HTTP/2 upload Use-After-Free.
6h ago
I'm not particularly interested in having a permanent swivel-mounted device right in the center of my living room. There's something that makes me a little sad about designing spaces that revolve around screens.
A little touch screen on the wall, flush and out of the way I can maybe get behind. That's especially nice for guests. But a screen as a permanent fixture of a kitchen or on a dining table feels gauche.
Dang, the new Apple HomeView screen is pricey. It won't be sold in Europe for the foreseeable future it seems, but 430 USD for a PoE-powered touchscreen is a bit rich for my taste.
Martin Shkreli livestreamed himself violating lifetime pharma ban, FTC says
"I can always find a couple of biotech stocks to smoke," Shkreli said in a livestream.
https://arstechnica.com/health/2026/10/martin-shkreli-livestreamed-himself-violating-lifetime-pharma-ban-ftc-says/?utm_brand=arstechnica&utm_social-type=owned&utm_source=mastodon&utm_medium=social
13h agowhat if jevons paradox and amdahls law kissed 👉👈
13h agodon’t work on optimizing compilers, it just causes more software. jevons paradox, look it up. i am very smart
13h agoCapitalism? What about lowercasism?
13h agoi wonder if judges chat with an llm while reasoning out their verdicts.
i suspect the answer is “mostly not but some of them a lot, probably too much and we talk about them behind their back”