2026-06-29 14:00:31
from my link log —
Inko: Friendship ended with the garbage collector.
https://yorickpeterse.com/articles/friendship-ended-with-the-garbage-collector/
saved 2021-08-26
Mac Jones recalls 'crazy journey' to 49ers after being passed over during 2021 NFL Draft https://www.nfl.com/news/mac-jones-crazy-journey-49ers-passed-over-2021-nfl-draft
Sean Penn to direct January 6 drama with Bradley Cooper set to star
#news
Security Vulnerability Patterns in AI-Generated Code: A Cross-Model Comparative Study
Shanna M. Kahn, John D. Hastings
https://arxiv.org/abs/2607.20713 https://arxiv.org/pdf/2607.20713 https://arxiv.org/html/2607.20713
arXiv:2607.20713v1 Announce Type: new
Abstract: LLM-based coding tools enable non-expert users to generate routine automation scripts that may enter enterprise workflows without meaningful security review. This study examines that risk directly. Code was collected from ChatGPT, Microsoft Copilot, and Google Gemini using identical prompts across three automation domains. Claude Code performed a standardized vulnerability review. Each identified vulnerability was scored using CVSS v3.1 and mapped to the OWASP Top 10:2021 and the MITRE ATT&CK frameworks. Every script contained exploitable vulnerabilities. Nine of the 17 identified vulnerability classes appeared in code from all three models, while 14 of the 17 vulnerability classes appeared in at least two models. The weighted CVSS scores across platforms differed by less than 10%. The risk is not tied to any particular model but rather to the task category. Organizations should therefore ask not which tool to trust, but instead whether LLM-generated automation code should be deployed without review.
toXiv_bot_toot
from my link log —
Behavior inheritance in Rust.
https://abadcafe.wordpress.com/2021/01/08/behavior-inheritance-in-rust/
saved 2021-06-11
⚡ What triggered it: GitHub rolled out a new token format for GitHub App installation tokens: ghs__. Base64url encoding uses - chars, which Composer's 2021-era regex didn't permit. Any such token would fail validation and leak.
😱 Making it worse: GitHub Actions' secret masker failed to redact the token. Symfony Console wraps error output with ANSI sequences, bypassing masking. Popular actions like shivammathur/setup-php auto-register GITHUB_TOKEN — no special config needed …
from my link log —
An incomplete list of mistakes in the design of CSS.
https://wiki.csswg.org/ideas/mistakes
saved 2021-01-24 https://dotat.at/:/…
from my link log —
Reverse engineering Prodigy.
https://www.vintagecomputing.com/index.php/archives/2921/reverse-engineering-prodigy-part-1
saved 2021-01-16
Parteien kritisierten 2021 einhellig und scharf den Tages Anzeiger für seine Recherchen zum Spitalskandal. Diese gemeinsame schönredende Erklärung sieht heute ziemlich alt aus, und die Parteien sollten sich entschuldigen. “Wir bleiben dran. “ https://www.fdp-bezirkbuelach.ch/aktuell/news/news-detail/news/gemeinsame-fraktionserklaerung-von-svp-edu-sp-fdp-glp-und-gruene-51888
from my link log —
Pink Floyd’s Young Lust telephone signalling explained.
https://telephoneworld.org/landline-telephone-history/pink-floyds-young-lust-explained-and-demystified/
saved 2021-10-16