@davidgerard As someone (unwilling) embedded in AI dev culture, this is the dream. People want a particular AI tool and process that removes the necessity of reading the generated code. I just read a "state of the industry" report that described "PR review theater", where people would "review" pull requests but not actually read them, in the "best case" scenario throwing them at the AI and interrogating the AI about them before just approving them.

At work we have a consultant teaching us "AI security" best practices1 and he says he doesn't even read the generated code anymore, and encourages us to do the same. Does it matter that, as a consultant, he doesn't have to maintain the systems he consults on? I certainly think it does, but apparently I'm in the minority.

My biggest hope with the AI bubble was that it would burst soon enough that people wouldn't immediately switch to open models on local hardware, but I unfortunately think that ship has sailed. Most devs I know would saw their hands off before hand-typing code again.

This is the Bad Place.

1 They boil down to "don't give the AI privileges it shouldn't have or it will fuck you".

The abject cruelty of the US Administration, it’s border services, and it’s healthcare system, and how it killed a Canadian citizen living in Point Roberts, USA, is the top story this morning on the CBC.

As it should be.

This is what the USA has become. Cruel. Inhuman. Uncaring. Indifferent.

https://www.cbc.ca/news/canada/british-columbia/paige-adamson-death-fear-immigration-deportation-9.7392450

#CanPoli #CdnPoli #USA #Canada #Healthcare #Immigration #ICE #HomelandSecurity

@beccadax @siracusa I originally wrote this document. The DVD Playback framework was decoding a blob for decryption, saving it unsigned to disk, and then manually loading the saved file into process memory. It no longer does this (I filed a radar as soon as I found the issue), but it stayed around for a couple of releases and we got some support requests about it, necessitating it be explicitly mentioned when rolling out the hardened runtime requirement.

Wordwrap now supports embedding your journal entries on other web pages. I've added a section on the About page covering the process and configuration. (It's really easy!)

https://wordwrap.lol/neatnik/2026-10-23_105643

Well, to be fair, those of us aware of it have spent decades shouting from the rooftops that the Republican Party was a fascist party and that for some reason the Democrats never did anything about it; and only now are more people recognizing it.

No.

In the USA, the wealthy do their best to make life hell for the poor, in order to keep others from affecting them. This includes preventing them from having food and healthcare, having their lives criminalized, being restricted from voting or kicked off the voter rolls or kept in prison.

And then the wealthy do their best to make the remaining people against the fascism attack the people the wealthy want to use as scapegoats.

Judging by your comment and others like them, they’re succeeding.

@thermia Overachiever.

lmfao. remember the gitlab 10.0 yesterday?

turns out they werent gitlab bugs, but ruby 0days

gitlabs "fix" was to just ship patched ruby runtimes lol

TBF Brazil is only richer than Portugal in terms of GDP, because it has like 15 times the population. Portugal still has twice the GDP (PPP) per capita of Brazil. Of course, in terms of politically power, Brazil dwarfs Portugal, which is probably more important for this particular issue.

It’s like they come almost parallel with self awareness then panic and intentionally jackknife in to a tree. To own the libs or something.

what'd you call me?

This is how it went with my autistic toddler. He’s always known his brother as his brother, but he didn’t start transitioning until 2 months ago. We just told him big brother is a boy on the inside and soon he’ll match on the outside. Kid went “oh, ok” and went back to playing. It’s not complicated, it’s their hatred that makes it complicated for them.

the USA we knew before Jan 2017.

Standards are low

For my 2c, I think it’s a good idea. If you don’t, and it gets any use, attackers or contributors will.

It’s kind of a lose/lose tho. The target audience is very anti-LLM, so some people will hate it. It’s that or leave low-hanging fruit bugs in there.

Either way, make sure to include an AI disclosure and explanation front-and-center. If I see a new project posted any more, I immediately write it off as low effort, vibe-coded slop until I have a reason to think otherwise. But using LLMs is not necessarily equivalent to slop imo.

Honestly not everyone will agree, but personally I can’t see any flaw in using AI to read through your code and point out security flaws. It’s going to happen regardless of whether you initiate it. It’s not like us sys admins are going “well I’m not going to patch the dirtyfrag vulnerability because it was discovered with AI”. I’d say knowing if AI can find a vulnerability in your code, is just a requirement right now.

You’re directly contradicting yourself in the first paragraph, and your statements on Trotsky’s beliefs are far removed from anything we actually know about the man.

For about a year as a hobby I’ve been writing an app that scratches several itches that I’ve had with the fediverse (multiple accounts at once, supporting both microblog- and threaded-style content, synthetic/hybrid feeds, etc.) and for the past month or so have been using it exclusively on the desktop and about 50% of the time on mobile (Voyager is my main mobile client and source of inspiration here). I’d like to open source the whole thing. But the code is mine, therefore buggy and bad. Normally I’d not worry too much about that, but in the age of LLM attacks I don’t want to contribute more security vulnerabilities to the world. Should I use an LLM security tool to analyze my code and point out security issues so I can patch them before releasing the code? If so that would more or less be the only AI contribution. I’m a practical-minded person and use AI tools at work so it doesn’t bother me, but I know lots of people here have strong (and often helpful) opinions on the matter.

@lowqualityfacts 'But his cankles' is the new 'but her emails!' Anything but govern.