#code

59 posts · Last used 3d

Back to Timeline
st1nger :unverified: 🏴‍☠️ :linux: :freebsd: @st1nger@infosec.exchange · 3d ago
A use-after-free bug in #Linux's #SCTP #networking #code can be turned into full #root on a host, and #Tencent researchers say they used it to escape a #container and reach the machine underneath. The flaw has existed since 2008. The fix already shipped: stable kernels 7.1.6, 6.18.42, 6.12.101 and 6.6.148, released August 3, close it. Anyone running an older kernel with SCTP reachable should update. https://thehackernews.com/2026/08/18-year-old-linux-sctp-flaw-could-let.html?m=1
0
0
0
C++ Wage Slave @CppGuy@infosec.space · 6d ago
Replying to @erinaceus@chaos.social
@erinaceus@chaos.social Right. It really depends on the job in hand. For simple and obvious fixes, just a few #test cases might be enough. For a larger feature or one with lots of tricky edge conditions, I might write tens or hundreds. Occasionally (for things like numeric rounding or date-formatting near boundary conditions or line-wrapping UTF-8 text) I'll write a #Perl script to autogenerate some of them. I don't use an #LLM to write tests for the same reason that I don't ask QA to write the tests for me: I have a deeper understanding of how the code works, the problems and bugs I encountered while writing it, and sometimes the bugs that a future maintainer might allow to slip in. I do ask #QA to review the tests to make sure I've not missed anything. Knowing that a review is coming helps to keep me honest. I have a fairly radical view that the tests are almost more important than the shipping #code, because a good set of tests enables you to overhaul and improve the code in ways that would otherwise be too dangerous. Lack of tests leads to small, timid localised fixes, which leads to a dense thicket of special cases, which leads to an unmaintainable codebase that eventually has to be thrown away. If you don't have decent tests then, sooner or later, you won't have a product. @icing@chaos.social
0
0
0
gary @gary_alderson@infosec.exchange · Aug 04, 2026
the cold card attack was outrageous, the hardware was designed to stop hacks and attacks #cold wallet #usury #mountebank #code 'mistake'
0
0
0
Alan E. Yue (He/Him) @alaneyue@infosec.exchange · Aug 04, 2026
Nice initiative by @jaredwhite.com a growing opt-in directory of software developers who write code by hand. If you're coding without the use of LLMs, you're invited to add yourself to the list… handcraftedcode.org #code #coder #coding #NoAI
0
0
0
Cees-Jan Kiewiet :rp: :wm: @wyri@toot-toot.wyrihaxim.us · Jul 31, 2026
That random junk file to you is a mystery needing to be solved for an LLM: #AI #LLM #junk #code
0
0
0
Martin Owens :inkscape: :flag_nonbinary: @doctormo@floss.social · Jul 26, 2026
All free software maintainers will be randomly assigned a local user. You must go to their house and watch them install your rust crate, python wheel, flatpak and you must watch them use it all the way through. If they like it you will be given a cup of tea. Library maintainers will be assigned a nearby junior developer and script writers will be assigned a fresh faced junior admin. I don't make the rules, this is just the law now. #foss #oss #code #design #ux
235
15
103
🍁 Martin Guay 👨‍💻🌈🎮📱 @MartinGuay@mstdn.ca · Jul 25, 2026
I'm building a Core Web Vitals Engine (CWVE) for my website within a function at the core of the platform. #corewebvitals #cwv #internet #web #php #wordpress #js #javascript #code #engine
0
0
0
AllAboutSecurity @AllAboutSecurity@infosec.exchange · Jul 24, 2026
CodeMender: Google bringt KI-gestützte Code-Sicherheit als Vorschau Entwickler- und Sicherheitsteams können damit Software auf Fehler prüfen, deren Ausnutzbarkeit mit echtem Exploit-Code nachweisen und anschließend getestete Korrekturen einspielen. https://www.all-about-security.de/codemender-google-bringt-ki-gestuetzte-code-sicherheit-als-vorschau/ #code #codesecurity #google #exploit
0
0
0
BGDon 🇨🇦 🇺🇸 👨‍💻 @BrentD@techhub.social · Jul 23, 2026
Would you trust your data to these chuckle heads? Researchers throw a giant red flag on Grok Build. When Grok Build reads or processes a file, the contents of that file were transmitted without redaction to a Google Cloud Storage bucket used by SpaceXAI. They also found that Grok Build packages entire repos and uploads them as Git bundles. Users also report an entire user directory, containing SSH keys, password manager databases, and more, were opened and uploaded. These uploads have now been stopped. https://www.theregister.com/ai-and-ml/2026/07/14/musk-promises-purge-after-grok-build-caught-sending-entire-repos-to-the-cloud/5271123 #Software #Code #Coding #GrokBuild #Repos #DataPrivacy #Data
1
0
2
openSUSE Linux @opensuse@fosstodon.org · Jul 23, 2026
Not sure how to get involved with #openSUSE? Whether it's packaging, #testing, writing, #design, or #code, there's a way for everyone to contribute. Find your fit! #Linux https://contribute.opensuse.org
6
0
2
Nuno Maduro @nuno@phpc.tv · Jul 20, 2026

what web framework did y'all start with?

❤️ sponsor this channel: https://nunomaduro.com/sponsorships 🙌🏻 this video was made possible by: 🐰 coderabbit / ai code reviews with instant feedback on pull requests: https://coderabbit.link/nunomaduro 🔴 redberry / work with the best laravel digital agency: https://redberry.international/?ref=nunomaduro 🛠️ jetbrains / code with phpstorm for world-class php development: https://jb.gg/nuno 🔎 serpapi / instantly access real-time search data from Google, Amazon, and more: https://serpapi.com/?ref=nunomaduro 💌 bento / the best way to send email with AI: https://bentonow.com/?ref=nunomaduro 🗣️ tts at $5 / donations: https://streamlabs.com/nunomaduro/tip ✨ socials: x: https://x.com/enunomaduro website: https://nunomaduro.com twitch: https://twitch.tv/nunomaduro tiktok: https://tiktok.com/@enunomaduro linkedin: https://linkedin.com/in/nunomaduro instagram: https://instagram.com/enunomaduro #php #javascript #laravel #typescript #claude #code #software #ai #vibecoding #mobile
0
1
0
(roll m3tti) @m3tti@functional.cafe · Jul 19, 2026
To all the #developers that love #ai and say how awesome it is to generate #code. I have one question for you. How do you suppose to cope with the energy and water consumption? No clue if a technology that waste enormous amounts of water and energy is a great thing to have if thats the case why don't all humans have super computers in their house? Furthermore how do you think will people with less income cope with that technology. I don't personally think that tokens will get cheaper.
2
0
1