Samuel @snrnjo

@saladperfect Droprates this good or lucky?

🚨🚨🚨 ALERTE SÉCURITÉ MAXIMALE ! Python est compromis. 🔸 Mettez immédiatement pip à la version 26.2.2 ou plus. 🔸 Dans chaque projet Python (chaque venv) : python -m pip install --upgrade pip 🔸 uv : uv self update (0.13.4 ou plus) 🔸 Mettez aussi à jour les certificats du système (apt / dnf upgrade ca-certificates) et vos images Docker pip install est compromis. L'autorité indienne eMudhra (emSign), qui signe les « passeports » prouvant qu'un site est bien celui qu'il prétend être, utilisait des clés secrètes ridiculement faibles : 8 clés, toutes inférieures à 256. L'une valait 4. Autrement dit, n'importe qui peut fabriquer un faux passeport valide pour n'importe quel site. Le risque pour Python : quelqu'un sur ton réseau (wifi public, FAI, État) se fait passer pour pypi.org, et ton « pip install » télécharge un paquet piégé sans aucune alerte. Aucune attaque n'a été signalée pour l'instant, mais c'est trivial à faire. Un paquet piégé peut installer n'importe quoi. Porte dérobée, virus, vol d'informations en tout genre. La situation est terrifiante ! Rien que dans l'écosystème Python, chaque installation de CPython, chaque venv, uv, tout est exposé. Et je ne vous parle même pas de npm, pnpm, yarn, Go, Rust. Ma stratégie de sécurité 2026 : rester chez moi et ne me connecter à Internet que depuis un FAI de confiance. C'est quand il y a de la mer qu'on reconnaît les vrais marins...

Several Linux Kernel Vulnerabilities Accidentally Posted To Public Kernel Mailing List As high as CVSS 9.0. Whoops. phoronix.com/news/LKML-New-…

🚨 JFrog Security Research has identified a supply-chain attack involving malicious code in the LiteLLM 1.107.0 PyPI release. Avoid this version and investigate environments where it was installed or executed. More details will be shared soon in our blog post.

shut... the ... front... door... was JAVA feeling lonely and wanted to get into the party????? Oracle Security Alert Advisory - CVE-2026-91403 CVS 9.1 oracle.com/security-alert… @uwu_underground

Everyone is always rooting for you. Your parents want you to be a great son. Wife wants you to be a great husband. Your boss wants you to be a slam dunk hire. Every first date you’ve ever been on they’ve been rooting for you to get laid. Every time you started to tell a joke people hoped it would have a hilarious punch line. Your proximity to anyone is a reflection of themself, meaning the deck is never stacked against you, and your failures are completely your own

Two critical vulnerabilities have been identified in PHP, a widely used programming language that powers websites and web applications. These vulnerabilities (CVE-2026-109618 and CVE-2026-109619) could allow malicious cyber actors to remotely execute code in PHP core, potentially compromising sensitive data and networks. The FBI urges organizations to take the following steps now: ➡️ If an immediate update is not feasible it is recommended that organizations take the system offline until it can be fully mitigated. ➡️ Immediately update affected PHP installations following the guidance on php.net. Inventory where PHP runs in your environment, prioritizing internet-facing systems and vendor products that bundle PHP. ➡️ Monitor web servers for suspicious activity, including PHP processes unexpectedly launching command shells or downloading files. Ensure appropriate process-monitoring capabilities are in place to help identify potential exploitation. ➡️ If you find signs of compromise, isolate affected systems, preserve your web server and PHP logs, and report it to your local FBI field office or ic3.gov. Those reports help us identify the actors involved and warn other organizations before they become victims. For the latest information, follow PHP’s announcement on php.net, CERT-EU Security Advisory 2026-018, and CISA’s Known Exploited Vulnerabilities catalog.

Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.

fmt.Printf(“here with val: %#v\n”, val) for the last time

hannah @erhannah

a week ago

one day you wrote console.log("here") for the last time and didn't even know it

213 2K 18K 603K 790

Guthix's Archive bears rewards for those who dare enter on October 20th From concept to animation, here's a look at what awaits within... 👀

Лучшее, что я видел за последнее время — чел пилит ASCII MMORPG, в которой вся графика состоит из букв и символов. Да, буквально весь мир, персонажи, окружение и спецэффекты нарисованы разноцветным текстом. Автор сейчас экспериментирует с магией, визуалом и боссами. Я прям залип на то, как из нескольких десятков символов получается такая красота. Буквально сны при температуре 37,2. Via: tiktok.com/@Ansenjeo

Incredible spray

(◣ _ ◢) @cs2lmfao

a week ago

holy fucking aura

23 64 2K 125K 147

CLAUDE FOUND THE SEEDS anthropic.com/research/ecdsa…

Holy shit I just got our entire company's Claude Enterprise account suspended 😭

Daniel Heinen @heinenbros

2 weeks ago

Claude hasn't hallucinated once today

68 44 2K 779K 168

Vitality overtime let’s go!

@xertioNCS @mousesports @PRcsgoo Great fucking game!

@HLTVorg MOUZ is looking amazing today, hoping for Vitality v MOUZ final

Organically sourced bugs

Klaas @forgebitz

2 weeks ago

honestly, most code before ai was also slop

617 883 17K 443K 404

🎠

Nice comparison to Luna 6

Claude @claudeai

3 weeks ago

Haiku 5.5 is a significant step up over Haiku 4.5 across coding, computer use, and knowledge work.

156 348 6K 924K 520