Stephan

@davidgerard@circumstances.run @tante@tldr.nettime.org The whole story was implausible from the second sentence: Where Huggingface claims that their “AI” detected the attack.

@marcel@waldvogel.family Sollte niemanden überraschen. https://www.wheresyoured.at/how-openai-kills-oracle/

@isotopp@infosec.exchange Falls aus RISC-V was wird, gibt es vielleicht auch irgendwann maßgeschneiderte Chips von den Serverherstellern für Webshops ohne überflüssige FPUs, gefertigt wie alle anderen bei TSMC.

@flyingpenguin@infosec.exchange @paelnever@masto.es @reeter@infosec.exchange @GossiTheDog@cyberplace.social Yes, please! PS: Your breakdown of the Mozilla report was also helpful to understand the Mythos hype. https://www.flyingpenguin.com/could-mozilla-security-hot-air-fill-mythos-sails/

@McCovican@infosec.exchange @davidgerard@circumstances.run Firefox has always been a very special open source project in many regards. It started with a dump of closed Netscape code, and the whole point of the Firefox open source project was to declutter the codebase, not to add features. The glorious days of Firefox were when every release was faster and lighter than the previous one.

@wdormann@infosec.exchange Has the number changed now? https://lore.kernel.org/linux-cve-announce/2026051554-CVE-2026-46333-662a@gregkh/T/#u

@wdormann@infosec.exchange The Linux kernel team famously disagrees. Also note that today is a holiday in most of Europe.

@HonkHase@chaos.social @bsi@social.bund.de Wer hätte ahnen können, dass DNSSEC nie eine gescheite Idee war? “For something as harebrained as the CA system, remarkably few criminal breaches trace back to it. The real threat to CAs is “the global adversary”. Whichever system replaces CAs needs to make TLS more resilient to government attacks. And governments control the DNS.” https://sockpuppet.org/blog/2015/01/15/against-dnssec/ https://sockpuppet.org/stuff/dnssec-qa.html

@GossiTheDog@cyberplace.social What about Teams, Signal Desktop and other Electron dumpster fires?

@GossiTheDog@cyberplace.social By the way, the article says that a full report by Anthropic is due on June 6. Has that been seen somewhere now?

@wdormann@infosec.exchange https://security-tracker.debian.org/tracker/CVE-2026-46300

@wdormann@infosec.exchange What? Greg is the one assigning and announcing CVEs for Linux. Why should it matter that some NVD websites are slowly syncing?

@mysk@mastodon.social Are you sure it is from the same developer (technically, as in signed with the same developer key)? Whatsapp was in the store long before Facebook bought it.