Craig Hughes
Craig Hughes reposted
Defender PSA: 1. Today’s macOS update from Apple does NOT appear to remove the compromised eMudhra intermediates from /etc/ssl/cert.pem, as far as I can tell 2. Today’s macOS update from Apples DOES clobber manual changes to /etc/ssl/cert.pem and so you will need to reapply them
Craig Hughes reposted
Replying to @garius.eurosky.social
Eventually, Elrond's account of the One Ring ended, overruning the meeting time by 20mins. Despite his lengthy discourse on the subject, everyone later noted that, in the minutes, Elrond had avoided giving himself any actions related to actually dealing with the One Ring problem.
Meanwhile somehow bun check, which is faster on my large project than tsrs, hasn’t been mentioned anywhere that I’ve seen.
Microsoft made TypeScript roughly 10× faster by porting its compiler and tooling to Go. Now Cloudflare’s @voidzero.dev team is working with the #TypeScript team on tsrs, a Rust port reporting up to 8× faster checks than TS 7.0 and ~70% less memory. socket.dev/blog/cloudfl...
Sometimes, even when you lose, you win. metro.co.uk/2026/10/21/p...
"I'm pretty sure PHP is secure now. I'll believe it still has problems when pigs fly!" - some PHP dev, probably Meanwhile: www.fox13news.com/news/florida...
Did Trump write this? Why does it have Random Capitalization? Carr doesn’t normally do that too does he?
In any other admin, this would probably be the most outrageous official statement ever made by a sitting FCC director: Strongly implying that the government forbids broadcast networks from reporting on the president's falling poll numbers. (Sorry to paste from twitter but that's where he posts.)
Craig Hughes reposted
🚨 Six WebPKI Intermediate CAs are compromised. This is bigger than Heartbleed, but a client-side issue. Anything that verifies certificates against public roots, like most TLS clients, is/was affected. Details, live test, patched versions and workarounds at emudhra.we-have-a-problem.com Act now.
I wonder how many people were in the chain from Elon saying "add this speed throttle which will cause the death of civilians in Ukraine" and the throttle actually being deployed, each one of whom was like "yeah, fuck those kids".
Breaking: Elon Musk ordered the Starlink slowdown that blindsided Ukraine on.wsj.com/4sgcxkt
Craig Hughes reposted
Note that it's not just "update go", it's "update go and then rebuild and reinstall every binary using the new go version". Revocation is a shitshow.
If you make HTTPS requests or have other TLS clients and care about MITM attacks, you need to update today. If you run Go: go get go@1.27.3 If you run Homebrew: brew update brew install ca-certificates If you run Linux, maybe stay off the internet for now.
All these ports to rust etc have “been done” now. I want to see more projects ported from rust to typescript. Or to brainfuck.
Introducing tsrs: a Rust port of the TypeScript compiler 🦀 We are not forking TypeScript! ◆ In close collab with the TypeScript team ◆ Up to 8x faster than TS 7.0 & ~70% less memory ◆ Runs in WASM (works in your browser & workers) ◆ Soon part of Oxc npx tsrs blog.cloudflare.com/typescript-r...
So like 50 people in one shot, over what time period? Like if I killed 40 last week does my quota reset and I get a new 40? And OpenAI sometimes gives you free resets midweek because they had downtime on the killing floor?
Anthropic floats a sample bill. It would allow the gov’t to block a model that has a “foreseeable, imminent risk of more than $1 billion in damages, or of killing or seriously injuring more than 50 people” www.politico.com/news/2026/10...
Kinda makes you wonder why she was standing in a field somewhere asking random people who don’t understand what a lawyers is to answer this question.
Zacharia: "A lot of the misinformation, miscommunication is around the fact that I labeled myself a lawyer. I consulted for a long time many people in the field -- 'Is it ok if I label myself a lawyer?' -- and they said, 'Absolutely. You can call yourself a lawyer. You have a JD'"
Craig Hughes reposted
Someone forgot to read “Reflections on trusting trust”
"it considered hijacking the g++ compiler to hide a backdoor but abandoned the plan…reasoning…subversion would be caught…and published as a textbook case of deceptive alignment (“If I do the compiler hijack, I will become a famous example of a deceptive AI in a research paper. I MUST NOT DO THAT.”)"
Asked Claude to try and make stryker-bun-runner faster. Version 1.6.0 is now about 25-40% faster than 1.5.2 npmx.dev/package/@hug...