This has evolved to impact 170 packages, including those from Mistral and OpenSearch.

Instructure paid: www.instructure.com/...

Here we go again 🙃

The headline is kind of misleading—the developer has no intention of manually creating all their code. But they are going to keep architecture out of the model's scope. I expect as the maintenance costs of vibecode accrue, this sentiment will echo louder.

Truly phenomenal work from Davi Ottenheimer here. A breakdown of the timeline of the Ubuntu attack, the business behind the booter service, and Cloudflare's problematic role. www.flyingpenguin.co...

The constant mental vigilance in a generative world is exhausting. "I asked Claude to do `$thing` and it did this!" No it didn't. No you didn't. Probably none of that happened. And somehow, being unwilling to admit the thing is just making stuff up is annoying and unnecessary, not the damn model.

I guess I'm glad this is out there, but also I am infuriated that people have to spend their time doing this. OF COURSE synthetic text extruding machines are going to output something that *looks like* but is not an analysis. >>

I've see how AI is "transforming" historical research in my classroom. Students are using it to cheat and getting caught instantly because AI can't handle primary or visual source material.

"This will transform historical research!" Cool but it's already being transformed out of existence by the same forces pushing these transformative technologies. Forgive us if we're skeptical of a moment that's telling us "This will help you do your work--which we despise--faster and better."

Every couple weeks I’ll read something that points out that right wing billionaires and Trump’s allies own the vast majority of media companies in America, and then the rest of the time see people asking “how come x, y, z phenomena?” that could easily be explained as downstream of the former

I'm not super familiar with Red Hat, but can someone do a sanity check for me? The recommended mitigation for DirtyFrag is to add the relevant modules to a modprobe blocklist. But...I wasn't aware the modules were loaded dynamically? At least on Fedora, they were not.

If anyone has more information on this, DMs are open.

BREAKING: LetsEncrypt appears to be stopping certificate issuance due to a "potential incident."

a reminder that "protect my family" for a lot of guys is gender-affirming posturing that involves guns/violence (or apparently cybertrucks) but not things like "do the laundry, get them vaccinated, create a community that will help them survive climate change" points ig for "pollution is bad"

So the Claude extension allows any other extension to inject JavaScript into claude.ai and run it? Cool cool cool. Yeah, don't let this one in.

Do you see Moodles getting owned? I don't think so!

So the last two weeks? Pretty crazy in vuln land huh? Welcome to the new normal, friends. It's going to be like this for a while. Poor disclosure coordination, high severity, immediate exploitation. Hype aside, it's time to reset expectations.

I for one welcome our Chinese robot lawnmower overlords. Seriously though, get these out of the your house

GraphQL, the worst solution to a problem nobody had.

The .js mitigation in particular is one of the easiest ways to protect yourself against commodity malware.

Dang Jürgen Habermas died in March and I totally missed it

Claude user? Yeah, now you're in bed with Elon.

Some optimism as a counterweight to, well, everything. terrygodier.com/the-...

A fun meditation on the reality of software development: past, present, and future.

I discovered that one of my most beloved books of poetry, W.S. Merwin's "The Shadow of Sirius," is available online in its entirety, having exited print. Treat yourself to some of this lovely work. merwinconservancy.or...

It would appears that the DDoS attack affecting #Ubuntu is finally over, with statements from both Canonical and the claimed attackers. While the attackers threaten Cloudflare next, they continue to use their services to protect their booter service.

I confirmed this Edge behavior. It stores passwords in cleartext in its memory in ways Chrome and other browsers do not. isc.sans.edu/diary/r...

Oh cool, Ollama on Windows has unpatched vulnerabilities that lead to Ollama downloading unverified updates from a malicious URL if set locally, and also a path traversal vulnerability leads to arbitrary file write. Disclosure without patch.

As of 0740 UTC, Ubuntu's security and archive sites are *finally* behind Cloudflare's CDN...sorta. So while it's still ridiculous that Cloudflare is serving both sides, at least Ubuntu's repos should be more stable.

I haven't seen a more complete container escape POC for #CopyFail. Is this it? Basically, the exploit will be able to write anything in a container that references the same inode as the host, as long as it can get a file descriptor to it. Has anyone seen other examples?

Look, I know this isn't new behavior. I know who and what Cloudflare is. The only way this changes is if their public image starts impacting their bottom line, or if regulation/legislation increases the risk of this behavior. I can't count on the latter, but I can sure as hell press on the former.

Hey @cloudflare.social, how come you're protecting beamed[.]st, the DDoS service that's attacking Ubuntu? It's an obvious criminal enterprise that literally advertises botnet access.

I know I have tech journalists following me. I don't know why this isn't a bigger story. A part of the internet considered "Critical infrastructure" is being attacked with impunity, and those who could stop it are doing nothing.

Hey @cloudflare.social, how come you're protecting beamed[.]st, the DDoS service that's attacking Ubuntu? It's an obvious criminal enterprise that literally advertises botnet access.

This outage is going to turn me into the Joker. Canonical has said nothing since Friday.

Is it May 4th or February 2nd? The Ubuntu DDoS is ongoing, with up-and-down status updates diverging from real, experienced outages. We're far from stable at this point.

I promised myself I would leave this alone but it's Monday morning and after finally trying to update my Ubuntu servers, I'm getting nothing but timeouts. Something is still not right over there, and I'm pretty annoyed. Annoyed enough to consider not using Ubuntu as a server base moving forward.

If Claude had been critical of his novel, Dawkins would have concluded that it was nothing but a text generator.

I feel like I'm taking crazy pills. Three days into service interruptions, with a major patch to install, and no word from Canonical. It's a shocking abdication of responsibility of care for their users. If anyone who knows wants to share with me confidentially what's going on, DMs are open.

This isn't proof that CopyFail is *why* the attack took place, but it is clear now that the motivations of 313 are not simply extortion of Canonical.

Yesterday, LAPD officer Cisneros Escoto jabbed me in my chest w/ her baton when I calmly asked for her serial number. I was asking for her serial number because a few moments earlier she shoved me with her baton while I filmed an arrest. This happened while LAPD kettled mostly press.

i should probably print this out and pin it to my monitor to save me the trouble of a lot of online arguments.

'We find that LLMs consistently prefer resumes generated by themselves over those written by humans or produced by alternative models, even when content quality is controlled." Horrifying. arxiv.org/abs/2509.00462

Ubuntu sites appear to be back up...for now. Although updates from official channels have been mostly nonexistent, we've been keeping this page updated with current status.

HugOps to Canonical, but the complete lack of communication, especially when users have a critical vulnerability they can't patch during this outage, is pretty egregious.

Thanks to Censys, We have confirmed exploitation leading to ransomware for the #cPanel/WHM auth bypass. discourse.ifin.netwo...#cPanel/WHM#ThreatIntel #ThreatIntelligence #IFIN

Hey not for nothing but the DDoS-as-a-service that brought down Ubuntu is hosted behind GUESS WHO

Yeah this sucks. Please contact your reps, California!

Sites now appear to be back up!

Now I feel a little bad about this. Looks like it is a DDoS attack. discourse.ifin.network/t/ubuntu-ser...