John D. Cook retweeted
The only way out is through.
They're calling it the Bugpocalypse. LLMs are being used to find long-hidden cracks in the software infrastructure, and it's happening at a furious rate. 3% of all compromises in computing history happened in the last week, claims one source? I believe it.
There are people saying public access to the frontier models ought to be locked out, or heavily guardrailed, over this. The problem with that idea can be summed up in one sentence: when lockpicks are outlawed, only outlaws will have lockpicks.
The lockpicks will be Chinese open-weight models, if nothing else. There's no way to stop those from becoming ubiquitous.
There are two futures in front of us. One in which only the bad guys have lockpicks, and security holes go undiscovered until they're exploited. Another in which everybody has lockpicks and is aggressively red-teaming their own software so it gets fixed before the holes are exploited.
The corpus of human code is huge but finite. The number of defects in it has to be finite too. We can fix those defects now; we have a million friendly robots to do it with.
The only way out is through.
They're calling it the Bugpocalypse. LLMs are being used to find long-hidden cracks in the software infrastructure, and it's happening at a furious rate. 3% of all compromises in computing history happened in the last week, claims one source? I believe it.
There are people saying public access to the frontier models ought to be locked out, or heavily guardrailed, over this. The problem with that idea can be summed up in one sentence: when lockpicks are outlawed, only outlaws will have lockpicks.
The lockpicks will be Chinese open-weight models, if nothing else. There's no way to stop those from becoming ubiquitous.
There are two futures in front of us. One in which only the bad guys have lockpicks, and security holes go undiscovered until they're exploited. Another in which everybody has lockpicks and is aggressively red-teaming their own software so it gets fixed before the holes are exploited.
The corpus of human code is huge but finite. The number of defects in it has to be finite too. We can fix those defects now; we have a million friendly robots to do it with.
The only way out is through.
141
481
3,259
194,386
John D. Cook retweeted
JUST IN: UK police arrest 15 y/o boy, seize his devices, & collect his DNA after he posted photo of a local politician edited to look like a rabbit.
3,853
10,621
74,176
5,896,108
“Starting in 2027, a silent update, nonconsensually pushed by Google, will block every Android app whose developer hasn't registered with Google, signed their contract, paid up, and handed over a government ID.”
keepandroidopen.org
keepandroidopen.org
2
6
33
1,835
“Van Gough couldn’t doomscroll. If he could, maybe he wouldn’t have painted so much.” — Brian Chesky
2
1
24
1,905
John D. Cook retweeted
How bad is administrative bloat in higher ed?
At MIT, the “student body has grown by 8% and its faculty by 9% since the mid-1980s. By comparison, the tally of administrators jumped by 189%.”
At MIT, the “student body has grown by 8% and its faculty by 9% since the mid-1980s. By comparison, the tally of administrators jumped by 189%.”
149
802
4,131
209,313
On the bright side, I don’t have to worry about the Linux kernel vulnerabilities that came out today because my Linux box is bricked.
1
0
14
528
To be fair, the interviewer said "you're not related to him at all" and she said "not to my knowledge." Didn't ask if he's her brother.
I expect she's lying, but it's plausible to say "not to my knowledge" when asked whether you're related to someone.
x.com/BillMelugin_/s…
I expect she's lying, but it's plausible to say "not to my knowledge" when asked whether you're related to someone.
x.com/BillMelugin_/s…
Rep. Ilhan Omar (D-MN) when asked by MS Now tonight if she married her brother:
"Not to my knowledge."
1
0
16
1,796
Knoll’s Law of Media Accuracy:
"Everything you read in the newspapers is absolutely true except for the rare story of which you happen to have firsthand knowledge."
"Everything you read in the newspapers is absolutely true except for the rare story of which you happen to have firsthand knowledge."
3
3
50
1,901
John D. Cook retweeted
Reminder that we're only 2/3 the way through Cybersecurity Awareness Month.
Pretty sure we've outdone all of the previous months combined.
Well done everyone.
Pretty sure we've outdone all of the previous months combined.
Well done everyone.
34
129
1,153
15,800
John D. Cook retweeted
I read this and I'm terrified, the situation seems intractable.
In the python ecosystem alone every cpython install, venv, UV is at risk.
Don't get my started on npm, pnpm, yarn, go, rust.
My current 2026 security posture: stay home and only connect to the internet from a trusted ISP.
The winter is coming.
discuss.python.org/t/information-…
In the python ecosystem alone every cpython install, venv, UV is at risk.
Don't get my started on npm, pnpm, yarn, go, rust.
My current 2026 security posture: stay home and only connect to the internet from a trusted ISP.
The winter is coming.
discuss.python.org/t/information-…
73
373
3,281
397,434
“There are decades where nothing happens; and there are weeks where decades happen.” — Lenin
This seems like one of those weeks.
This seems like one of those weeks.
1
3
70
2,915
John D. Cook retweeted
The Abduction of Persephone, by Nicola Maria Rossi, early 18th c
143
5,928
71,541
1,070,138
John D. Cook retweeted
I just started coding with PHP this morning, anything I should look out for?
31
44
687
21,890
