Anthropic says it partnered with Theorem to use Claude to formally prove security properties at the assembly level across 100 real-world open-source libraries (Anthropic)
https://www.anthropic.com/research/formal-verification
From the archive
https://slab.org/2018/02/27/datalove/
This bit made some people surprisingly angry:
"I suppose the more radical positioning of live coding in general, more common in the early days, is now being lost. This is the idea that live coding is about experience, not end-pro…
Zumindest eine kleine Genugtuung für die Entscheidung in meinem Heimnetz kein PHP zu nutzen.¹
Und nein, das ist kein Argument gegen oder für PHP, das ist ein als Exploit ausnutzbarer Bug, und sowas kann in aller möglichen Software auftreten.
Und obgleich ich den Blogpost zum Exploit gelesen hab, bin ich nicht sicher, ob das der C-Implementierung geschuldet ist oder auch in einer Sprache mit strikterem Speichermodell hätte auftreten können.
__
¹in der Uni galt es zu pat…
After this week, this was a comical relief.
I hope you can enjoy the joke as well.
https://github.com/mitmproxy/mitmproxy/commit/169234499088fc2c414644a67efaed3d64ae2e3b
Well, if a software engineer at #Plex is telling you to jump ship... Might as well...
(The post is now deleted, but I have verified that it was there and was deleted in real-time)
The term "single use software" currently lives rent free in my head.
People use LLMs to create software specific for their needs. But neither can other people use it (hardcoded variables, no rights management, too specific), nor do they use it again (too specific, easier to produce a new one).
Single use software is not maintained. Nobody understands it or has an interest in keeping it working.
The creation of single use software feels cheap, but isn't. It tak…
Sources: Datadog offered to buy Israeli cloud cybersecurity startup Upwind Security for ~$4B; Upwind is finalizing a $300M funding round at a ~$3.8B valuation (The Information)
https://www.theinformation.com/articles/datadog-offered-buy-se…
The free software developers saying "We will not fix your CVEs unless you pay us" are correct, and we should all really adopt that mentality.