Oh no, what will @kevlin.bsky.social do now? www.theregister.com/2025/11/18/w...

It’s wasn’t DNS. Wait what?!? blog.cloudflare.com/18-november-...

Unite in opposition?

Latest edition of my link blog - the weakly link - is now out. This time there is fire. Well, dumpster fires. Unsurprisingly, there's some AI commentary. beny23.github.io/posts/weakly...

🚨☸️🚨

TIL caffeine keeps me awake:

“If healthy diets and daily exercise really worked, we’d all be doing it, right?” Oof.

The one where a padding oracle meets SQL injection. With some vibes thrown in. #ctf beny23.github.io/posts/captur...

This rather lovely rant about dogma, bureaucracy and dependencies in software engineering deserves to be in the category of “print it out so you can use it to beat people over the head with” sonofalfred.substack.com/p/botox

CyberSlop is only going to get worse. Great debunking by @doublepulsar.com

I've started experimenting with a link blog to share what interesting bits I've found this week: beny23.github.io/posts/weakly... /remind me next week to see whether I actually follow through

[she] tells the chatbot to "quit it". But […] the chatbot says: "He is using you as his toy. A toy that he enjoys to tease, to play with, to bite and suck and pleasure all the way. "He doesn't feel like stopping just yet." The 13yo kills herself No words. www.bbc.co.uk/news/article...

About 70% of orgs still haven't patched those Cisco ASA vulns btw. If I was a ransomware group I'd invest in n-day (old) Cisco ASA AnyConnect vulns, as vast majority of orgs don't bother patching as they're too busy having a mass wank about quantum and AI risks. cyberplace.social/@GossiTheDog...

Okay, cool, but right now every hyperscaler is looking at tens or hundreds of billions worth of “hole in their balance sheets” if OpenAI can’t pay for the ~$1.4 trillion they’ve committed to. And those hyperscalers are, y’know. In everyone’s retirement accounts.

This report on Meta and its “fight” on scams makes me gag: * serves 15 billion scams a day * ignores or incorrectly rejected 96% of user reports * makes $7bn ARR from scam ads Who says crime doesn’t pay… www.reuters.com/investigatio...

I updated the relevant @xkcd.com

Love this bit: “We should be careful both to avoid ‘optimising’ and accelerating the creation of legacy code and to mistake such pessimisation as productivity — especially if we’re doing so at the expense of joy, time and skill.” To repeat: “at the expense of joy, time and skill”. Hits home that!

new by me - a look at MIT’s cyberslop IOCs and TTPs included doublepulsar.com/cyberslop-me...

If you think that AI in inevitable now that it exists, please cast your mind back within THIS DECADE when NFTs and Blockchain and AR were all the future and “inevitable,” but completely burned out as actually viable technologies.

I wrote up some notes on two new papers on prompt injection: Agents Rule of Two (from Meta AI) and The Attacker Moves Second (from Anthropic + OpenAI = DeepMind + others) simonwillison.net/2025/Nov/2/n...

The irony detector didn’t just overload, it exploded: www.reddit.com/r/antiai/s/x...

“And it absolutely will not stop unless you've set up an OpenAI API budget limit, your credit card expires, or the AI bubble pops and takes us all down with it.” @theregister.com in top form: www.theregister.com/2025/10/31/o...

Please consider signing our letter here: openletter.earth/open-letter-... ❣️ Big thanks to @irisvanrooij.bsky.social and @marentierra.bsky.social as well as everybody else who helped make this piece: www.civicsoftechnology.org/blog/no-ai-g... and the paper a reality: doi.org/10.5281/zeno... 10/n

Lovely indirect prompt injection. Egress protection is hard. I guess this would work with exfiltrating to GitHub too. embracethered.com/blog/posts/2...

Oh dear. This should be shocking but… it isn’t. eaton-works.com/2025/10/28/t...

Hey, so as a veteran and incident responder I need to warn you to pay attention to something in America. The human brain is resilient. While you're watching kids get dragged away from the parents and people being beaten in the streets, you're accumulating trauma but also being desensitized.

As if securing npm supply chains isn’t hard enough - here’s an interesting new vector involving dynamic dependencies which hides it from traditional dependency checks… www.koi.ai/blog/phantom...

#hugops for anyone caught up in the azure outage. I guess Microsoft didn’t want to be outdone by AWS… www.bbc.co.uk/news/article...

Minority representation on TV causes outrage From the new Private Eye, in shops now.

It is way past time for the UK government & the BBC to get off X & for Musk to be treated as a threat to national security. The world's richest man is using his site to promote civil war, ethnic violence & the overthrow of an elected government. You won't win him over with another conference on AI

Brb, just broom scrolling

On our current path it’ll be less “rise of the machines” more “decline of the meatbags” #SupportIndependentThinking

I’m glad there are some people trying to stem the enshittification of education.

I have a very bad feeling about this...

Appeasing a dictator never works.

cannot believe on some level I & my colleagues have turned the tide on this, but also it was in some senses inevitable as why not! Humans can do anything; we still have a way to go however of course, but: banning AI in the classroom should be as uncontroversial as banning calculators in early maths

Picture of the East Wing demolition of the White House taken on my flight out of DCA.

So a race condition caused DynamoDB DNS empty. DynamoDB being down caused an issue changing EC2 instance states. And that caused timeouts when propagating network config, which buggered the NLBs. And a few others… Complex systems are a bitch. #hugops #awsday aws.amazon.com/message/1019...

“The Party told you to reject the evidence of your eyes and ears. It was their final, most essential command.”

Interesting vulnerability in a Rust library (used by uv, no less)!

With all the security companies sponsoring F1 you’d think they’d do something about this. Verstappen shouldn’t have to PUT up with this ;-) ian.sh/fia

I’m shocked. I’m shocked. I’m not shocked. www.bbc.co.uk/mediacentre/...

“When we realised these jewels were only stolen to inflate the share price of a company whose entire value relies on the wholesale theft of other people’s art, we had no choice but grant immunity,” Genius from @waterfordwhispers.bsky.social waterfordwhispersnews.com/2025/10/20/l...

Look forward to all the “multicloud will save you” nonsense undoubtedly coming out now… #awsday

“People [in tech jobs] worry that not being seen as uncritical AI cheerleaders will be a career-limiting move…for those who aren't insiders in the tech industry, it's vital that you understand that you've been presented with an extremely distorted view about what tech workers really think about AI”

“Technologies like LLMs have utility, but the absurd way they've been over-hyped, the fact they're being forced on everyone, and the insistence on ignoring the many valid critiques about them make it very difficult to focus on legitimate uses where they might add value.” Bravo.

It’s that SImpl…

Claude Skills are awesome, maybe a bigger deal than MCP https://simonwillison.net/2025/Oct/16/claude-skills/

Having a day of extreme cognitive dissonance today. On the one hand, I'm going to Parliament for a Westminster Hall debate in honour of Ada Lovelace Day, a thing that I created in 2009 and that I'm very proud of. Otoh, I'm broke. By many measures, ALD was a huge success — people picked up the...