"Always comment your code!" ... 🤦

Working in tech, I'm profoundly torn based on my belief that the internet is one of the fundamentally best things we've accomplished, full of promise and possibility, and at the same time knowing that we've completely fucked it up in how we're using it and the effect technology has on us and our […]

In the previous post above, I looked at the arrangement of thread stacks in virtual memory. That leads to the question: can one thread reach over into the other thread and monkey with its local variables? And how is that different from a forked process, which has the same memory layout as its […]

R: If you don't let us take away people's health insurance, we'll literally starve them. D: That seems bad. R: Also, we'll fire people and not have backpay for those we keep. D: As a compromise, can you pinky promise not to fire more people, and then we'll let you take away people's health […]

I'm grading student papers, and I can report that one effect of generative AI is that I now suspect everything my students submit. And that's not a good place to be in while grading. #bangenaifromuniversities

Not every time a computer is involved in an algorithmic decision is that necessarily “AI”. That’s all. Thanks for coming to my TED talk.

Why, yes, nuking >470 lines of code and replacing them with a comment can make passing tests easier. AI generated pull requests FTW […]

You know, if you consider containers a security boundary, then you've pretty much already lost. I mean, they're useful and all, but maybe think of them more like crowd line dividers or barriers, not like concrete walls.

If you're using `runc` for your containers: congrats! You get to patch three new vulnerabilities that could allow for a full container break-out: CVE-2025-31133: symlink attack on bind-mount of /dev/null for masked paths […]

Oh,fuck yeah! A day starting with the grim reaper coming for an old, evil fuck and ending with young democrats being elected! I like it, gimme more of both!

Happy "Even if you sell your soul to the devil, he will eventually come and collect it." Day to all who celebrate! 🎉 There's hope yet!

Bug Bounty Facts: With enough eyeballs, all bugs reported to you are shallow.

Me: You have to check the return value of malloc(3) and other functions. My students: Ok. p = malloc(num); if (p == NULL) { } do-stuff-with p

TIL: the Hoatzin Contemporary flying dinosaur. Entirely folivorous, effectively a ruminant (complete with methane belches), shitty at flying, loud and stinky, and the chicks have claws like an archaeopteryx. Birds, man. Bird is the word.

You know, everything I see from BlueSky over here on Mastodon is either "you need to sign in to view this post" or some very angry doomscroll fodder that makes me think I'm really not missing much from that outrage machine over there. Pretty sure unfollowing 95% of bsky.bridge accounts won't be […]

I fell down a rabbit hole into a virtual memory layout landscape, trying to better understand how thread stacks are placed under Address Space Layout Randomization. Turns out, there's quite a bit of variability across different Unix flavors. https://www.netmeister.org/blog/thread-stacks.html […]

Quite a month for cloud providers, huh? First #AWS, now #azure. The great thing is y'all can just recycle your previous comments noting eggs, baskets, monocultures, tech giant dominance, etc. here. Just save a few for GCP next week.

Me when "hackers" ask for a reward for reporting a vulnerability of "weak SSH ciphers" on a hostname that resolves to 127.0.0.1.

Cloudflare just posted about 5 or 6 blog posts in one on #PQC: "State of the post-quantum Internet in 2025" - https://blog.cloudflare.com/pq-2025/ Nothing really new if you've been following the topic, but very comprehensive if you want to catch up on the current state. Also interesting: they […]

Sage advice. (Steps 1-3 are optional, but highly recommended.)

Oh yeah, y’all know what time it is. https://www.mcsweeneys.net/articles/its-decorative-gourd-season-motherfuckers

Akamai is rolling out #PQC support on the edge (as well as to the origin); good work by @jschauma#pqcand team https://www.akamai.com/blog/security/akamai-enables-post-quantum-cryptography-edge

Congress already said they’re fine with Trump wantonly killing people (>32 so far); the military evidently won’t refuse any orders of this sort. At what point does the international community start to act? https://www.nytimes.com/live/2025/10/22/us/trump-news

Hmm, this BIND Cache poisoning attacks with unsolicited RRs (CVE-2025-40778) is light on details. "Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache." Anybody done the source spelunking to sort out […]

Trump literally demolishing the White House may just be too much symbolism for me.

Corey Quinn on the #awsoutage: https://www.theregister.com/2025/10/20/aws_outage_amazon_brain_drain_corey_quinn/ It apparently took Amazon "a patently absurd length of time" to pinpoint the cause; he speculates on the brain drain and RTO as factors: "when you've hollowed out your engineering […]

Huh, that's a new one. Fake Cloudflare captcha asking you to please run the osascript from http://185.93 . 89.62/d/xxx33312 to collect and uplaod all your passwords and cookies.

Just about the only time I enjoy the crowd in Times Square. #nokings #nyc

#nokings #nyc

Reminder: #nokings protests tomorrow. Find your event here: https://www.nokings.org/ Fuck Trump, fuck Vance, most certainly fuck ICE, and fuck the whole vicious lot of them. See you tomorrow!

One thing folks really need to learn about AI is to never ask yes/no questions. The sycophant engine will lock in on giving you an answer and will go down the rabbit hole of predicting reasons to fit that answer.

“One Battle After Another” is a great movie, and I don’t think it would be made today if Anderson brought the script to the studios at this time.

This article by Pema Levy is very, very good at explaining how “the facade of normalcy [obscures] the fact of an authoritarian state”. https://www.motherjones.com/politics/2025/10/dual-state-supreme-court/ And Ketanji Brown-Jackson’s in the Birthright case is forcefull, on point, and… quite […]

Republicans are cool with Trump murdering random people. I guess at least they go on record saying so, but then again, it's not like there's going to be any consequences anyway. 😡 https://www.nytimes.com/2025/10/08/us/politics/trump-republicans-war-powers-caribbean-venezuela.html

I wrote a bit about post-quantum cryptography standards and guidelines beyond those from NIST: https://www.akamai.com/blog/security/guide-international-post-quantum-cryptography-standards #PQC

Read somewhere that some AI engines generate images with a “Getty Images” watermark, and I feel like that really sums up a lot.

All legal nonsense aside about the supposed state of armed conflict between the U.S. and Venezuelan gangs, what "I wish to emphasize is that there is a word for killings outside of armed conflict for which there is no domestic legal authority. That word is murder." [@benjaminwittes.lawfaremedia.org]

TIL: Wikimedia runs a public DoT / DoH service: https://meta.wikimedia.org/wiki/Wikimedia_DNS #DNS

It's been well over 30 years since I last read him, but yeah, Bukowski is still solid.

Man, watching anything about Los Desaparecidos during Argentina’s Dirty War reeeeaalllly hits different this year.

Steven Levy's latest article "I Thought I Knew Silicon Valley. I Was Wrong" in Wired is pretty good. "Tech got what it wanted by electing Trump. [...] turns out that you can run pretty well on a bended knee." https://www.wired.com/story/silicon-valley-politics-shift/

Over the last few months, I've repeatedly had people tell me about how "well, the Military will refuse an illegal order", to which I can only gesticulate in a bewildered manner in the direction of at least 17 dead from the Venezuelan boats they happily blew up, why not. And the third one barely […]

Anybody else here use Quad9's DoH? For the last three or four weeks or so that's been frequently but intermittently failing for me during normal browsing. (Y'all are gonna make me run my own resolver for my home network next, aren't you.)

libxml2's sole maintainer Nick Wellnhofer steps down, meaning libxml2 is now no longer maintained. https://discourse.gnome.org/t/stepping-down-as-libxml2-maintainer/31398 It's hard to estimate just how many companies depend on this software and critical security updates to the library, so I'm […]

Ah, yes, a very normal headline in a thriving democracy, a beacon of light, a shining city upon a hill, where Freedom of Speech is enshrined in the Constitution as the very first Amendment. Not at all something you’d only see in an autocracy lead by a […] [Original post on mstdn.social]

Die Prinzen haben schon 1993 über KI gesungen. https://youtu.be/yMR45cZbvDw

Those damn woke liberals and their cancel culture good thing that's over now and we have all that free speech back and can say whatever we want.

"Who controls the past controls the future: who controls the present controls the past," repeated Winston obediently. [...] We, the Party, control all records, and we control all memories. Then we control the past, do we not?" […]