FeedCity

xai-org/grok-build, now open source xAI's grok CLI tool faced severe community backlash yesterday when it became apparent that running the command in a directory could upload that entire directory to xAI's Google Cloud buckets. One user reported running it in their home dire...

How I tricked Claude into leaking your deepest, darkest secrets I've been impressed by the way the Claude web_fetch tool is designed to avoid data exfiltration attacks. Ayush Paul found a hole in that design. To recap: regular Claude chat is at risk of lethal trifecta attack...

Watching the bits disappear.

The post The case of the invalid function pointer when shutting down the display control panel appeared first on The Old New Thing.

On July 15, 1996, German PC manufacturer Escom declared bankruptcy. But Escom wasn’t necessarily just an ordinary PC manufacturer. Escom went bankrupt less than 2 years after acquiring the Commodore and Amiga brand names and starting to use their technology.

The post Reasons for Escom’s bankruptcy appeared first on The Silicon Underground.

Gedonder op kantoor, de WC blijft maar lopen. En erger nog, hij trekt niet meer door. Strontvervelend!
In een beetje grote organisatie gaat er nu druk gebeld worden, maar met wat pech loopt dat niet soepel. Facilitair beheer meent dat het niet hun probleem is. We bellen de verhuurder, maar die zegt wel over de riolering te gaan, maar niet over de toiletten. Na een weekje driftig telefoneren, betrokkenheid van juridische zaken, en escaleren is uiteindelijk duidelijk wie erover gaat.

The Fourier series is a great tool for analyzing periodic functions. But what about functions that don’t repeat? We’ve seen that we can compute Fourier series for a non-periodic function defined on a finite interval, as long as we don’t care about its behavior beyond that interval …

"Build a smart home", they said. "It'll make life so much better", they said. Well, life wasn't very bloody good at 23:00 the other night after travelling 33 hours from Paris only to find the IoT doorlock batteries dead and the

Dependabot now waits until a new release has been available on its registry for at least three days before opening a version update pull request. This cooldown is now the default and requires no configuration.

— GitHub Changeling, embracing dependency cooldowns

Tags: dependency-cooldowns, packaging, security, github

simonw/pedalican Clearly I wasn't paying attention when these were first announced back in May, but today I accidentally activated a "pet" in Codex Desktop - a little animated robot, reminiscent of Clippy - and then learned you can create your own. So I did, and now I have a...

Release: datasette 1.0a37

A minor release. Performance and documentation improvements to the permissions system, plus I reverted a cosmetic API change which caused almost every existing plugin test suite to break.

Tags: datasette

I like building websites. But in some circles, I might as well say that I like to drive to the forest before sunrise, chop down a tree, load it in my trunk, and gather some dry wood as well, then drive back before first light. All this just to use the wood to start a fire an...

TL;DR: is your refrigerator running malware? If so, you better catch it!

Microsoft Corp. today released software updates to plug at least 570 security holes in its Windows operating systems and other software, almost triple the number of vulnerabilities the software giant fixed in its record-smashing Patch Tuesday release last month. Microsoft attributed the burgeoning patch counts to vulnerability discoveries aided by artificial intelligence.

lobste.rs is now running on SQLite Community site Lobsters has been planning a migration away from MariaDB since August 2018 - originally targeting PostgreSQL, but last year they decided to investigate SQLite instead. This weekend they completed the migration, and now consid...

The shared language of a software project is not English or Python but it is the common understanding of what its concepts mean, where the boundaries are, which invariants matter, who owns what, and why the system has the shape it does. This language is rarely written down ...

A presigned URL is a replay attack you did on purpose. Replayable auth tokens are the textbook way to create vulnerable systems, but Tigris ships them as a first-class feature with presigned URLs and so does every other object storage system on the pl...

I feel that some vibecoded software changes somewhat randomly and unexpectedly. That made me think about Bruegel’s “The Tower of Babel” which shows an already quite chaotic depiction of the Tower of Babel. The story is usually told as one about pride and ambition and ultima...

How to discount your expectations

I’ve been thinking about ICD-10 codes; they come up a lot in my work. The ICD-10-CM standard is divided into 21 chapters, which generally correspond to the first letter of a code. However, a chapter may contain blocks beginning with more than one letter, and codes starting with a single letter, namely D, can span […]

The post ICD-10 chapters and code letters first appeared on John D. Cook.