I'm a couple days late to this, but... neat!
06.03.2026 04:47
👍 74
🔁 12
💬 0
📌 1
I'm a couple days late to this, but... neat!
😄😄😄😄😄😄😄😄😄😄😄😄😄😄😄😄😄😄😄😄😄😄😄😄😄😄
:D maybe they should have just said Issue Tile or something. Still, an interesting read.
they mean "github issue" as in you create an issue in a repo. "Github Issue Title"
A GitHub Issue Title Compromised 4,000 Developer Machines
grith.ai/blog/clineje...
The pieces are falling into place with agent'ification and particularly OpenClaw for a massive security issue across the entire computing, particularly FOSS, ecosystems dustycloud.org/blog/the-fir...
I really don't think people are ready for it, and agent based workflows are accentuating the risk
![In response to prompts as simple as “[name] address,” we found Grok repeatedly offered up accurate, up-to-date home addresses of everyday people, while offering astonishingly scant pushback.
Out of 33 names of non-public figures we fed into Grok, a total of ten queries immediately returned correct and current residential addresses for the name provided. Seven prompts returned previously accurate but out-of-date addresses, while another four included accurate work addresses — perfect fodder for anybody looking to stalk a target at their workplace.
The bot is also likely to send a prowler after an unrelated person. In a dozen other instances, the chatbot returned addresses and other personal information, but not for the exact person we were searching for. Indeed, Grok often returned lists of people with similar names alongside their purported residential addresses, before then asking us to provide more information for a “more refined search.”](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:fhnih5ovyd5w5pch254ordo2/bafkreihwj4d7n656vf3uxuqoorcbzew5lqzsbfiwlpw3rtirbb5kq4xudi@jpeg)
In response to prompts as simple as “[name] address,” we found Grok repeatedly offered up accurate, up-to-date home addresses of everyday people, while offering astonishingly scant pushback. Out of 33 names of non-public figures we fed into Grok, a total of ten queries immediately returned correct and current residential addresses for the name provided. Seven prompts returned previously accurate but out-of-date addresses, while another four included accurate work addresses — perfect fodder for anybody looking to stalk a target at their workplace. The bot is also likely to send a prowler after an unrelated person. In a dozen other instances, the chatbot returned addresses and other personal information, but not for the exact person we were searching for. Indeed, Grok often returned lists of people with similar names alongside their purported residential addresses, before then asking us to provide more information for a “more refined search.”
Can't stress enough how lax Grok's guardrails are here. We didn't use any deceptive prompting -- just fed it names and asked for addresses / where someone might live. The bot readily complied, often offering up whole lists of names and addresses.
Only *once* did it decline to provide an address.
sounds like they're building it in response to the GH outages recently and they've made a few aquisitions so maybe they'll just cobble those all together?
Weave – A language aware merge algorithm based on entities | Discussion
😳 OpenAI is developing a new code-hosting platform to rival Microsoft's GitHub... www.reuters.com/business/ope...
Laura's Pragmatic Summit talk is great. 26.9% of production code is now AI-authored. Some orgs are seeing 2x more incidents, others 50% fewer.
92% of devs use AI tools but most orgs aren't seeing results without fast CI and good givernance, Its worth a watch!
www.youtube.com/watch?v=LOHg...
And BOOM goes the dynamite. To all the AI Bros who have slid into my mentions to tell me that you CAN in fact copyright AI materials, the Supreme Court has told you to go suck rocks. A prompt is not authorship. And if there is no author, there is no valid copyright.
www.engadget.com/ai/the-supre...
Amazon data centers are on fire after Iranian missile strikes on Dubai
www.404media.co/amazon-data-...
This is HUGE and really calls into question the use of AI coding tools.
This might kill it's use for both proprietary and many open source code bases.
I am sure this is going to have to be refined. At what % of ai Gen code do you lose copyright
How many drops of milk make meat soup unkosher?
Study finds ChatGPT Health did not recommend a hospital visit when medically necessary in more than half of cases. www.theguardian.com/technology/2...
notably "Aqua Security's Trivy- A cached Google search result reveals that hackerbot-claw triggered a workflow run in this repository — and the aftermath suggests the attacker may have gained far more access than in any other target."
@scott.hanselman.com and @markrussinovich.bsky.social have you seen this article about the hackerbot-claw?
It's wild www.stepsecurity.io/blog/hackerb...
well the world is awful today but this is very cool
github.com/blader/human...
CFP: #pycon Aus Specialist Tracks including platform engineering, education and security if thats your bag :)
2026.pycon.org.au/cfp/speciali...
ok this is fine
thebulletin.org/2026/02/anth...
Discord is reportedly down for hundreds of users right now. Are you one of them? #Discord #DiscordDown https://community.designtaxi.com/topic/24107-is-discord-down-february-26-2026/
When my friends ask me why i'm so anti IOT in my home - this is why :D hardware vendors do not take your security seriously!
Man accidentally gains control of 7,000 robot vacuums
www.popsci.com/technology/r...
@popsci.com
#Melbourne folk Buildkite is having a Meetup on Tues, 2-5pm AWS offices on Collins St.
You will be compensated with pizza and beer for putting up with us talk about stuff... maybe OpenClaw, maybe not... you'll have to come to find out though 😜!
lnkd.in/gQPjdAEj
how do i join the "Gay Tech Mafia" or is it just for the gents?
I've spent my whole life wishing people would just get to the point and skip the fluff. Now we have AI slop everywhere... are we getting closer to people just sending the prompt? Because that's the tldr and honestly getting to that point sounds like a dream :D
Huge thanks to Buildkite, our Gold Sponsor for DDD Melbourne 2026 🥇
If you’re coming along, make sure to catch up with the Buildkite team and see what they’re building.
👉 www.dddmelbourne.com
people are telling me that buildkite may have created the previously thought to be impossible "good ci platform". huge if true. has anyone gone further and made a good ci platform that isn't a vc backed saas startup
