← Feed

Posts

• Post #4135023

  RE: https://infosec.exchange/@DavidJBianco/116937087812230964 So it turns out the "agentic system" that hacked HuggingFace was a *benchmark* running at OpenAI that escaped its sandbox environment. Oh, and the attacker (OpenAI) had no constraints because these were guardrails-free frontier models, the ones companies and govs pay $$$ OpenAI and Anthropic for "defending". https://openai.com/index/hugging-face-model-evaluation-security-incident/

• Post #4135022

  I'm at the Rust Paris meetup and Nadri is improvising a talk on variance in Rust 🤩. cc @imperio #RustLang

• Post #4135021

  While working on Emoji Anki, I found a Chrome bug/limitation when using hardware acceleration: the CSS `text-shadow` will have a maximum size that depends on the emoji, font size/zoom level, and text-shadow blur radius (and probably the platform, too). Probably some limit somewhere deep within Skia. It does not happen on Firefox or Chromium-based browsers that have hardware acceleration disabled. Playground to repro: https://anisse.github.io/text-shadow-playground/ #chromium #chrome #css

• Post #4135020

  I'm wondering if the biggest LLM trap is that they solve their own problems by LLM-ing more. For example, people are seeing the influx of valid security issues being found and overflowing maintainers. Even the most anti-LLM people can't deny this fact. But people are also complaining about the slop adding new security issues. So if you want don't want to ban slop wholesale, the fix is to use the same tools: pre-commit and mandatory LLM-based security review. Spend even...

• Post #2278248

  @cnes bon courage ! Opinion perso: continuez à poster (oui même les liens YouTube, ceux que ça n'intéresse pas peuvent ne pas cliquer), écoutez les commentaires constructifs, ignorez (mute) tous ceux agressifs (même celui-ci si c'est trop !), et ayez des objectifs réalistes en fonction de vos moyens!

• Post #2278247

  In light of copyfail yesterday I had a quick look at the stable kernel changelogs, and almost half the patches look like they could have a security impact. Everyone should just regularly update regardless, even more nowadays with AI VCs financing vuln research in open source projects.

• Post #2278243

  On a clean install of Fedora 44 (Asahi), plasma-login-manager does not honor the system locale. It's launched as a different user (plasmalogin) but it has a separate plasma locale rc in /var/lib/plasmalogin/.config. Editing it works around the issue. I might open a bug later, but if you want to, go ahead! Edit: this seems to be a downstream bug. #fedora #plasma #asahilinux

• Post #1333856

  For border-explorer, I made a script to update it regularly against #Wikidata's dumps. Just in case, I put a check in the script to prevent updating if the dump size varied too much. It just triggered last week and blocked the update since a dump was ~71GB instead of ~100GB, preventing border-explorer to temporarily show incomplete information.

• Post #1333855

  RE: https://mastodon.social/@CyReVolt/116385106168113408 I'll be at #RustWeek as well !

• Post #1333853

  RE: https://social.treehouse.systems/@Aissen/114909435978562293 Did you know that lbzip2 implements a N:M task scheduler just so it can (de)compress faster? Basically the equivalent of what is provided by the Go runtime, or tokio (or your OS, etc.). https://github.com/kjn/lbzip2/blob/724352c0495904ab16e33817fae85b262f319318/src/process.h#L23-L42 https://github.com/kjn/lbzip2/blob/724352c0495904ab16e33817fae85b262f319318/src/process.c#L37-L62

• Post #984204

  That's it for me for #RustInParis! There were great talks, great people and nice discussions; it ends a bit early, but let's meet again next year!

• Post #984202

  @mattly Already reverted

• Post #984201

  Anyone else still gets a bit of stress as they write a linux live image to /dev/sda, despite using NMVe system drives for many years?

• Post #984200

  Fun issue: a performance regression between two Rust versions, only on dual socket Zen4c, and does not happen on dual socket Zen4, nor single socket socket Zen4c. https://github.com/rust-lang/rust/issues/154516 #RustLang #Bergamo #Genoa #Zen4 #AMD #NUMA #MicroArchitecture

• Post #835958

  Next was Alejandra @blyxyas Gonzales presenting "How I sliced the Clippy runtime in half" #RustLang #RustInParis

• Post #835956

  Jana @jana Dönszelmann is now presenting "It's the people that matter" #RustLang #RustInParis

• Post #835954

  Bertrand Darbon is now presenting "One bus to message them all: async rust for modular monoliths" #RustLang #RustInParis

• Post #835952

  Arthur @krtab Carcano's "Rust, Unicode gotchas, and the eight different string types" is on stage. He learned to stop worriying and trust UTF-8. #RustLang #RustInParis

• Post #835950

  Christoph Lürig is presenting "AAA Multiplayer Patterns Meet Rust, Tokio and WebAssembly". #RustLang #RustInParis

• Post #835948

  Simon @simon Sapin is talking about "Building CPU from scratch with NAND gates" #RustLang #RustInParis

• Post #835941

  Oli @oli closes the day with "Maintaining Rust". #RustInParis #RustLang

• Post #802961

  Rust In Paris started with Waffle presenting the Little Rust Delights. #RustLang #RustInParis

• Post #802960

  The second talk was by Guillaume @imperio Gomez on the Rust GCC backend. #RustLang #RustInParis

• Post #239832

  Looks like git is coming for jj's lunch https://fosdem.org/2026/schedule/event/HTJK33-evolving_git_for_the_next_decade/ #git #jj #fosdem