hiddenvulkcan
Re:Debian apt security update: man-in-the-middle arbitrary code execution
on Wednesday November 04, 2026 @08:39AM (#50365364)
Well, at least it's Debian, so even if they used HTTPS they'd still be vulnerable!
I didn't know that about apt, interesting choice!
Re:Debian apt security update: man-in-the-middle arbitrary code execution
on Wednesday November 04, 2026 @07:56AM (#50364897)
Yikes, that vuln in apt is pretty bad! I think a lot of the newer wave of vulnerabilities being found generally seem to have a low likelihood of being reached, but this seems somewhat plausible? I'm assuming this would be done by compromising a mirror, in order to do the redirect?
Re:GLM-5.3 and the spread of advanced cyber capabilities
on Tuesday September 29, 2026 @04:09PM (#49899627)
Somewhat tone deaf from anthropic.
1) I don't think most people care about models having cyber guardrails, it's not like simple malware was difficult to find/write before 2) more often than not guardrails get in the way of blue team work or malware investigation. Any code I have that touches malware I now use GLM or DeepSeek on.
Re:First Principles Thinking
on Friday September 25, 2026 @04:18PM (#49849386)
I mean that's always been the paradox that good devs need to live in, and I often go backwards and forwards on the scale between technically pure, and straight up problem solving.
Fundamentally software we create exists to solve problems, if bad code solves the problem is it bad code? Counter to that is we are engineers and it's our job to design systems that mean problems can be solved safely and effectively.
Like most things in life the truth lies in the middle