solyin

Human nature. Obviously we know some things are just true. It's common sense! Why would I invite a non-deterministic hallucination machine that can't think to challenge my world view with something inconvenient like facts?

> we're going to police what kind of programs you can compile" ?

We don't have to imagine. Oracle's Java said you weren't allowed to use it in nuclear power plants. back in 1998. Naturally the number of people that were held back by that was a bit smaller, but the idea's not without precedence.

The S stands for slopcore

Is step 3 reading the CVE for long enough to understand that disabling mptcp is an incomplete mitigation? What happens if someone discovers a bug in the particular firewall software you're running?

Google has their own dialect of Python that they use internally that could stand to be faster. Microsoft also uses Python all over the place. (GvR has worked at both of them.) Both of them have, at one time or another, sponsored teams to make Python faster, along with Meta. Just not for the above specific cause.

I had my Claude refuse to do anything interesting with the recent php vulnerability, yet it'll readily identify issues in the code of web apps it whips up for me, so I don't think that's entirely the case. Though that may be a case of me knowing what I'm doing, so I'm able to draw on my experience and ask specific questions (like why doesn't that bit lead to an XSS?) without realizing that someone newer to the field wouldn't know to ask. Yeah, idk.

That's interesting but if the Azure hypervisor on the server hosting the VM is off limits then it's kind of false sense of security. They protect the key via a sidecar AMD SEV-SNP VM, and if you can't break into the hypervisor, sure, there might be an attack that doesn't involve doing that and only doing lateral movement, but an actual attacker isn't going to respect that boundary.

Not to get in the way of a lovely bit of racism, but it was American entrepreneur and LinkedIn co-founder Reid Hoffman that coined the famous quote: "If you are not embarrassed by the first version of your product, you've launched too late".

Absence of evidence is not evidence of absence! We're on this thread because Cisco is sponsoring piles of tokens at the problem. No such megacorp sponsor exists for this problem for Python. The megacorps have decided not to sponsor that specific problem.

That presumes billionaires have no agency and aren't at all responsible for the world we live in. It assumes they don't spend millions on political ads and lobbyists and politicians. That they aren't responsible for the actions their companies take. That private equity does the things they do and the billionaires funding them don't have any say in what they do. It assumes billionaires' companies aren't also responsible for how the world is going, and that they don't meeting with other billionaires and make plans together.

> No action is required from customers using managed certificates. We will post a further update on our status page once this process is complete.

> If you manage your own TLS certificates, we recommend revoking and reissuing them with new private keys as a precaution.

Only if you manage them yourself. If Bunny is managing them for you, they'll roll them for you.

Yeah but we got AI now. Ask codex to get rid of McAfee for you.

Not everyone makes the transition. In the rise of AWS, someone I know's last task at this one company, a company they'd poured their heart and soul into; it was to move everything off the on-prem servers that he'd procured and the company had been running in for years. He moved it all onto AWS, got rid of that hardware, and then he was out of a job.

How does that help with CVE-2026-98432? Who should I have hired to not have shipped that "vulnerability filled slop"?