Yoooo we found an overflow in a video codec used in command and conquer that could lead to remote code execution if you emulate ipx/spx on hamachi while reciting lorum ipsum, backwards, and facing east while mercury is in retrograde.
Neat.
We spent 50k in tokens finding it. Also we deny legitimate bug bounties. Also the patch we wrote with another 15k and will produce 10 more CVEs in 6 months or less.
And, despite this, I find myself utterly uninterested in microslop and apple. Still the best option - and only getting better. What flavor? Doesn't matter. Choice is the entire point.
17 replies
Finding vulnerabilities and thus fixing them is a good thing. At least with Linux we know what is happening.
Imagine thinking that's a large amount of patches.
https://www.pcworld.com/article/3230491/microsofts-september-updates-fix-a-record-973-security-flaws.html
1,313 were in the Linux patch.
now it feels like they're just showing off. lol
New rules for what counts as CVE.
Yoooo we found an overflow in a video codec used in command and conquer that could lead to remote code execution if you emulate ipx/spx on hamachi while reciting lorum ipsum, backwards, and facing east while mercury is in retrograde.
Neat.
We spent 50k in tokens finding it. Also we deny legitimate bug bounties. Also the patch we wrote with another 15k and will produce 10 more CVEs in 6 months or less.
...
This. Basically all kernel bugs get CVE numbers now.
"Security Vulnerabilities".
No. "Code changes that could one day be a vulnerability but aren't yet exploited or even proved".
Slop.
And, despite this, I find myself utterly uninterested in microslop and apple. Still the best option - and only getting better. What flavor? Doesn't matter. Choice is the entire point.
I mean, it's not like there are any fewer vulnerabilities over there, either. 966 with 2 zero days in 1 month
https://www.bleepingcomputer.com/news/microsoft/microsoft-september-2026-patch-tuesday-fixes-966-flaws-2-zero-days/
Right - so all things equal - I'd be sticking with the one that isn't pattenting new and creative ways to spy on you.
Please someone make this an actual animation with the music lol
You're in luck it already is https://x.com/NathanFlurry/status/2105874931586310248
ELI5 what is this about?
LLM's found a mountain of security exploits of different magnitudes in the Linux kernel which got patched.
Is this because Torvalds has embraced AI/vibecoding?
No, most of these existed pre-AI, and are just being discovered in large volumes by AI.