Kevin Riggle

…I mean all the real dystopian mega corporations are all part of our same real universe

two tarot cards on a desk - 6 of cups and the moon. Queer Crow Death Magic Tarot deck.

today's card pull: we walk through strange dark times and the light ahead waxes and wanes. taking joy in the places we find beauty, harmony and love, the things we have created and our visions for the future can keep us going #tarot #tarotsky

Yeah words fail. Everything we’ve learned over the last ten, thirty, fifty years, completely thrown out because the new fucking shiny is just that fucking shiny

E.g. their buddies

Rules of engagement are also there, in part, to stop trigger-happy yahoos shooting up the wrong targets.

bsky.app/profile/ppts...

"In other words up to 10% of all the crashes Firefox users see are not software bugs, they're caused by hardware defects!"

I mean it’s both the most HN thing and the only thing that could make reading HN comments tolerable

Markdown was not supposed to be executable. Having made it executable, well glhf sandboxing it

The takeaway? Treat every external string—titles, comments, PR descriptions—as malicious code. We’re building autonomous systems on top of unvetted inputs. It’s time to lock down GH Action permissions and sandbox every LLM call. #programming 5/5

LLMs make this worse. Integrating them into workflows without sanitization is basically inviting a prompt injection attack. It's SQL injection for the 2020s. "Convenience" is currently winning over "Security," and the cost is compromised shells. #ai 3/5

The culprit: GitHub Actions. Devs are using untrusted input (like issue titles) in workflows with permissive defaults. It’s the same old injection story, just with a new YAML flavor. If your CI/CD trusts external strings, you’ve already lost. #devops 2/5

4,000 developer machines compromised by... a GitHub issue title? 😱 This isn't a complex zero-day; it's a failure of basic sanitization in the age of automation. When issue titles become code, your repo is a sitting duck. #infosec 1/5

Oh I can think of a few ways we can come back from this. The people who posted this aren’t gonna like them tho

the US has already lost in iran, their only hope was iran collapsing in a day or two, and it didn't, so now their only options are to declare victory & slink away or try to put boots on the ground & lose way harder

it's fine I get this a lot ;)

Incredibly illuminating to compare income and hours worked across countries and states for ***the bottom 95% of earners only***. The typical Belgian earns as much as the typical Californian but works about 24% less

via sethackerman.substack.com

it’s only an echo chamber when it’s the left. when it’s the right they call it some bullshit like the Agora or the Town Square

austerity may kill a lot of people, but it also helps a lot of people not drive to work, so, it;s impossible to say if its bad or not

Trying to "occupy Iran" is like trying to occupy a country the size of Mongolia with the population of Germany and the terrain of Afghanistan. It's almost an inherently absurd endeavor

just doing my job (hauling the worst possibilities into the cold light so we can stare at them and try to figure out how real a problem they are and if so what to do about them)

It's right there in the name

No, he's the Beast

What these dudes need is to go to a bear bar. I'm serious

bsky.app/profile/leah...

Point/Counterpoint This War Will Shut Off 20% of the Global Petroleum Supply for A Month and Send the Economy into a Stagflationary Tailspin vs. No It Won’t Published: March 26, 2003

I'm calling this "serious personism". They want their positions to be seen as the "serious person" position no matter where they stand in reality. There's a parallel to "the economy is when men hit steel with hammers" laborism

ok the Soundtrack is now available on Steam too store.steampowered.com/app/4460150/...
so i think that concludes the Steam part 😅 ok now to get it on Epic… wow after you finish a game is lots of work.

he's launching nukes