7-Zip: RCE vulnerability in archive parser - update now
A critical vulnerability in 7-Zip allows remote code execution via a booby-trapped archive. The patch is available; given the installed base, the urgency is real.
7 h ago 2 1
wp2shell: a critical vulnerability in the core of WordPress allows remote code execution without authentication
A sanitation flaw in the WordPress core allows an unauthenticated attacker to run arbitrary code on the server. Patch immediately.
15 h ago 3 1
Regressive JPEGs: when a developer reverses the algorithm to create images that regress
A tinkerer publishes a reverse exploration of the JPEG codec: generating images that, when decoded, produce deliberate artifacts by playing with DCT quantization. Curious, instructive, and an excellent exercise to understand the format.
19 h ago 10 2
A Haskell enthusiast switches to AI, the community lynches him
A recognized contributor to the Haskell scene publicly explains why he now codes with AI. Reaction: social banishment, hate mails, and the community rediscovering its own slogan.
yesterday 15 3
Torvalds cuts it short: the Linux kernel will not be an "AI-free" space
On the LKML, Linus Torvalds cut short the controversy in one sentence - contributors who refuse any code touched by AI only need to fork. What this technically says about how open source will live with LLM.
yesterday 5 2