LiveLM

Holy shit I thought the same

I’ll still blame the corporation gaining god knows how much money with this over the individual person, even if I also think a Developer should have known better.

Poor headline.

It began in June when an employee on Binance’s wallet developer team thought they’d indulge in some vibe coding by installing a popular AI coding tool. But they ended up downloading a tampered installation of Homebrew, a tool that’s popular with software engineers, after clicking a malicious ad.

There’s lots of packages on Homebrew and it’s a popular package manager, even outside of MacOS. He could have decided to grab anything from Homebrew and get hit.

The real one to blame here is Google for doing zero vetting on the crap they put at the top of the search results. Malicious ads for popular software happen constantly and so far they haven’t moved an inch to fix it.

That’s exactly what I’m thinking.
98% of all the legacy code of Cisco? The whole corporation? The decades of it?

Assemble a team to do it, not just a single guy!

People out there really thinking the answer to everything is just “more tokens”

Can’t let the plebeian have too much fun

This does very little to convice me to not migrate away.
My #1 issue was them sacrificing Security for Speed and this latest change does jack shit to address it

Load bearing comment.

PS: Andy has partially responded to article in the ProtonMail subreddit. He has alleged that 404 took his comment about security out of context and offered absolutely zero context or explanation about that “Calling his employees losers” bit.

Here’s his full comment:

Happy to answer actually, since the quote above was taken out of context. Proton today does way more security reviewing than we have done at any time in the past. With the proliferation of AI tools, our code is also under more third party scrutiny than ever before. We see this across the industry, with critical software bugs (like the recent PHP bug) being found on an almost daily basis. However, several extra days of human review is not the correct way to confront this challenge. We still have human review, but now augmented by AI, has become exceptionally good at finding vulnerabilities in code. For some time now, Proton has also been using unaligned models with custom skills to do a thorough review of our code. This approach is better, and also faster.

Had I had even the most remote idea this would happen, I never would have migrated all my addresses years ago.

Fuck this. I can’t believe I’m to waste my time changing all my fucking addresses again.

My fault for not buying a domain for my email to at least make this slightly less painful.

So much for muh Secure and private mail. Don’t even know where to migrate next. Fuck this.

“Life’s not a checklist — it’s about shared moments and growth. I’m practical, open-minded, love rock, long drives, trivia, sports, and a good laugh along the way.”

🤖🤖🤖💻📢

From the creator of Don’t Create The Torment Nexus comes a new tale: Stop Building The Thing That Could Kill Us All

This is why I’ve always preferred to enter the TOTP code myself instead of using the “Approve Sign-In” method.

Also the thing about the Redirect Loops and wacky login forms. Goddamn how come they ain’t fix it yet 😭

I still can’t believe a world potency as big as the fucking United States is publishing fucking deportation minigames to their official fucking website!

And they use Sega and Microsoft logos to peddle it on Twitter!! And of course they won’t do anything about it legally because lmao why would they?!

To hell with this clown republic 🤡

For all that I’m scared this will enable terrifying new exploits, I’m equal parts happy all this proprietary crap is getting blown wide open faster than ever.

Hell yeah, fuck yo lock-in, fuck yo apps biatch 🖕

I sure hope not 😬

For the unfortunate times the info you need is only available on Reddit:
Get LibRedirect for your browser and enable Reddit in the settings.

The Redlib frontend is so much nicer to use on mobile than having to zoom and pan around non-stop in old.reddit

No idea about iPhones, but at least on Android the default camera app provides all of this built-in.

Hopefully this means more Valetudo compatible devices 🤘

Considering this thing is bound to be a 500GB Clusterfuck with even more gigs of Day 1 patches I don’t even know what physical media would look like.

Might as well switch to NFC Cards with the license inside them at this point.

These are the people trying to tell you programming is a solved issue btw.