rvz

They could have indeed. Because...

> TL;DR: GNU Savannah hosts Bash, Coreutils, and hundreds of other GNU projects. Using Hacktron, we found that an email address like a`touch${IFS}/tmp/savane-rce-proof`@attacker.example gave any registered user code execution on its backend. From there, we made our account a superuser, impersonated Bash’s maintainer, and confirmed we could add an SSH key with push access to the upstream Bash repository. An unpatched kernel gave us root access and access to a GNU backup server. We reported it to the FSF on May 11, 2026.

> Savannah runs Savane, a PHP application that is itself free software, so we pointed Hacktron at the source and audited it.

Imagine attackers reading that and ordering swarms of abliterated frontier models onto an open source project like that.

Many projects like the FSF do not use AI themselves maybe "by principle", but the attackers don't care and will unleash AI agents on to anyone as a backdoor target.

Given all that you have seen with the mass discovery of these security issues and hacks, there will be no choice from open source projects to conglomerates to use AI to protect themselves ahead of the attackers.

> Many of the new representatives have zero experience in politics. But their unparalleled professional expertise should be helpful in reforming Serbia,

So non career politicians.

This is essentially a technocratic government that is left leaning. Just because they are academics, researchers, doctors, engineers and sociologists does not mean they cannot go corrupt themselves (it will). The EU itself is heavily corrupt as well.

We have also seen how corrupt a technocratic right government can get in the US. It will be no different to a left leaning one once money and promises are involved.

To give an analogy of what this is, this is like electing effective altruists from Anthropic with the difference being that they are using your money (taxes) instead of theirs and giving lots of promises for your vote.

If they are serious, they need to pass the world toughest anti-corruption laws while also significantly growing their own economy or borrowing economic policies from the least corrupt nations in the world such as Singapore and to exceed them.

> Student List has promised to fight corruption and establish meritocracy, accountability, and the rule of law.

While these are good promises, the problem is that this is the first lie that they have already made.

They better do all four of them without angering the electorate otherwise they can’t be trusted.

The "job" that will still continue to exist will be the one who has to defend a company from getting their data breached against swarms of AI agents at >20,000 TPS.

Someone will have to be the technical bodyguard that needs to thwart an attempted breach as quick as possible without causing an outage and that is the difference between a $45,000 breach vs a $450M breach. Enough to bankrupt a startup.

Using something like Cloudflare won't be enough this time.

Almost $1T of stock evaporated and yet no-one cares.

China catching up very quickly.

Let the be a warning to those who want to slow down.

Many companies IPO'd in the late 1990s and did not exist 10 years later.

Let's say that the house of cards crashes down and takes the market with it who will shutdown, survive or have no choice but to get acquired for a 90% discount.

Some will be just alive long enough for the early investors to pull out enough before the market crashes.

> It also helps combat the "LLMs ArE nOt DeTeRmInIsTiC" complaints.

Reality says otherwise, especially from those who run LLMs in production at a large scale. Hacks such as baking in the weights with tiny experiments doesn't disprove anything.

The same LLM boosters also continue to repeat one of the biggest misconceptions: "sEt TeMperaTurE tO zERo tO aChiEvE fUlL dEterMinIsm."

This is embarrassing to Anthropic given here that they lack basic security procedures to prevent this and they have gotten themselves hacked to push malware.

Claude Code was already malware, but with this attack you cannot trust the vendor either.

In the next 2 weeks, no one should download / install / update anything as I predict at least one developer's key for a GitHub, NPM, Crates.io or any other CI or login was leaked and the attacker will target those services to propagate their trojan to more victims.

Good. So as you as a long time Emacs user, no donations to support them at all.

Thank you for proving my point.