Post

Russ Cox
@swtch.com

“There’s a tidal wave coming. You can see it. We can all see it. Are you going to lay down and die, or are you going to do something about it?” Be ready to patch your systems, repeatedly, for at least the next 12 months.

This post is unavailable.
Russ Cox
@swtch.com

The GitHub remote execution bug is fine and all, but the bigger story is the LLM (with IDA) quickly decompiling GH's binaries to enable the analysis. A lot of companies shipping "closed" binaries are going to learn the hard way that they might as well be shipping source. www.wiz.io/blog/github-...

Klaus Post
@klauspost.com

Yes, OSS is seeing the flood right now because it is low-hanging. But OSS has prepared for it for decades. The "binary distributed" flood will be SO much worse. Don't want to think about device drivers, but just winword.exe seems a big enough target.

1 repost3 likes

No replies yet.