Federated

@jap this, by the way, is a good way to see the actual limits of nodern chat-bots: take a personnal hobby you're very good at and query the slop machine to extrude an explanation or answer for something non trivial that you know very well. Be prepared to be extremely disappointed. This is the same "quality" of "answers" the slop machines have been extruding each time you queried about something you're not fluent in, you merely didn't notice how much of a garbage the "answer" was.

I took the older nephew to the downtown Denver skate park this morning. Took the train down, skated through downtown to the park. This very sheltered young man was confronted with a pretty rough looking group of local skaters, almost all adults. I just hung around and kept my eye on him. It was cool to watch him navigate the interactions. By the end of the session he had been given advise and encouragement by 4-5 different skaters. Watching him learn that appearances can be deceiving was priceless.

If you are looking for detection rules for recent vulnerabilities, you can use rulezet

https://rulezet.org/vulnerability/CVE-2026-109618

It's pretty nifty.

#rulezet #opensource #opendata #cybersecurity #detectionengineering

An early version of the previous post said "support teams", and with a broken heart, I changed it to "support operations", because evidently, in Duolingo, it's not quite a team any more, and probably in many other companies.

Bakan Çiftçi açıkladı: Suç örgütlerine 9 ayda 1.741 operasyon düzenlendi
https://abcgazetesi.com.tr/politika/bakan-ciftci-acikladi-suc-orgutlerine-9-ayda-1-741-operasyon-duzenlendi-875316?_unique_id=6add335c8a807

The symbolic order is enforced by libraries, while media technology distributes power by registering particulars beyond self-representations.

I'm just an old man yelling at cloud, but:

1. BUGS IN SOFTWARE EXIST.
2. Too many software companies run their customer support operations as if they don't.

Every few weeks for several months, I've been reporting the same bug in #Duolingo, and I've been getting a response from an LLM, telling me about a different way to report that bug. That different way doesn't exist in the app at all, but the LLM insists on suggesting it to me.

The International Space Station is currently passing over the following coordinates:

Lat: 51.3598
Long: 85.9301

https://www.openstreetmap.org/?mlat=51.3598&mlon=85.9301&zoom=3

We've got a house full of 11-year-olds having a Halloween-themed sleepover. There's currently way more shrieking around here than usual.

Well-behaved women seldom make history.

-- Laurel Thatcher Ulrich (Essay, 1976)

#feminism #quotes

For a platform where "things don't go viral" I'm sure seeing that dog buthole Jesus WAY more than I want to.

what idiot called it the USRDA and not your sodium per diem

Automating a YubiKey for Agentic Logins
https://jon.oberheide.org/blog/2026/10/24/automating-a-yubikey-for-agentic-logins/

🚨Initial Access: Two Corporate GlobalProtect VPN Listings

A threat actor is advertising GlobalProtect SSL/VPN access to two unnamed companies.

🌏 Asia - Engineering company with approximately 2,000 employees and $250M in revenue. The actor shared connection logs indicating the VPN tunnel successfully established.

🌎 LATAM - Manufacturing company with 50-200 employees and $50M in revenue. The actor claims the company has major technology partners and large investors.

Both accesses reportedly remain largely unexplored to avoid alerting the targets.

Claims are currently unverified.

💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing

RE: https://mastodon.social/@daringfireball/117497867954240320

@[email protected] ICYMI… (at the very end!)

Focus: Tapis Rouge 2026 https://filmkrant.nl/agenda/focus-tapis-rouge-2026/

Aloha! 🌺

#bloomscrolling #Today #TokyoSnap #Yoyogi
#morning
#rightnow

My 9 albums
I like this site!

#my9albums https://my9albums.org/s/7ba997282a11

29 Ekim tatili kaç gün? 30 Ekim Cuma okullar tatil mi?
https://abcgazetesi.com.tr/yasam/29-ekim-tatili-kac-gun-30-ekim-cuma-okullar-tatil-mi-875315?_unique_id=6add322fe8e76

pity the censors, who fear ideas

Calendar Newsletter (1.1.20) http://apps.nextcloud.com/apps/calendar_news

Ok so what was that band after the opener and before who I assume was mdx

Niclas Fullkrug scored twice from the spot as Werder Bremen beat Mainz 05 3-2 in a Bundesliga thriller. Read the full match report, goals and highlights from Mewa Arena.

#Football #bundesliga #werderbremen #footballnews2026 #Mainz05 #footballhighlights #mainz

https://www.mondiaries.com/2026/10/fullkrug-double-fires-werder-bremen.html

dust
arrives

Listen up, people. You think you know Brett, but you know nothing. Exhibit A. His résumé. He said he worked at the State Department, but he did not say it was as a personal trainer.

GrapheneOS Messaging version 17 released:

https://github.com/GrapheneOS/Messaging/releases/tag/17

See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.

Forum discussion thread:

https://discuss.grapheneos.org/d/43079-grapheneos-messaging-version-17-released

#GrapheneOS #privacy #security #android

saw a post arguing that Mythos was used to audit PHP and still missed the pre-auth RCE, and that a lot of the frontier-lab fearmongering around these models is overstated.... pretty much agree.

been writing about this for time AI is decent at local / taint-style bugs or single primitives but still weak on the ones that only exist in composition/topology. this is why the bounty programs is now only profitable for bug hunters who were in the game before AI.

AI mostly thinks in lists. it reads functions, follows a few calls, and looks for obvious sinks. it doesn’t really build or reason over the actual call graph + system model of how state moves across components and request boundaries like a human would. Trail of Bits are actually the only people i see solving this with trailmark.

#PHP2Shell is a clean example of this logic. multipart parser + upload-progress bookkeeping + unserializer state etc etc. the individual pieces don’t contain an obvious local “this is broken” defect. the problem only appears when you connect them.

the bug isn’t “line X is bad.” it’s that the request lifecycle + exceptional control flow + worker reuse create a state machine where trust assumptions break across the boundary. same shape as the topology cases i previously described.. hard to see in one place, only appears when you model the whole sequence.

Why is AI generated language so hard to understand?
https://arxiv.org/abs/2610.29162

https://news.ycombinator.com/item?id=50223647

Microsoft retira 8 funciones de Copilot en Windows 11

https://blog.elhacker.net/2026/10/microsoft-retira-8-funciones-de-copilot.html

Veja a letra da música “O Tempo de Deus” de Rose Nascimento
#RoseNascimento #OTempoDeDeus
https://daletra.com.br/rose-nascimento/letra/o-tempo-de-deus.html