Craig Stuntz

It's blog post time! Some thoughts on the avalanche of shit. www.audiodamage.com/blogs/news/s...

That's a lot of security fixes: support.apple.com/en-us/149521

Erica Synths LXR-02 drum machine firmware now open source: www.ericasynths.lv/news/post/lx...

GoDaddy revoking 400k TLS certificates; nothing to see here, move along? bugzilla.mozilla.org/show_bug.cgi...

Keeping code and data separate is a great idea, which is why everything runs JavaScript

Incredible

🚨 Six WebPKI Intermediate CAs are compromised. This is bigger than Heartbleed, but a client-side issue. Anything that verifies certificates against public roots, like most TLS clients, is/was affected. Details, live test, patched versions and workarounds at emudhra.we-have-a-problem.com Act now.

THIS IS NOT A DRILL. If you package/distribute/maintain root stores or chain verifiers, act immediately. If you know how to remove trust in a root, consider doing it now. Otherwise, prepare to update systems as patches/mitigations come. Go users, update to Go 1.27.3 or Go 1.26.10.

Facebook: you seem stressed, have you considered 3d-animating your dead mom

Fresh books have arrived! 🥰❤️ available from: www.routledge.com/Making-Synth... (with free shipping!) 📕 #synthwave #book

Keynote: Now with advertising!

Researchers Find Crows Smart Enough Not To Let On How Smart They Really Are https://theonion.com/researchers-find-crows-smart-enough-not-to-let-on-how-s-1844081510/

Anthropic found the origin of the NIST elliptic curve seeds: they were generated with drand48()! No one was seriously worried, but this should put some FUD to rest, completing the NIST ECC rehabilitation arc… just in time to be retired in favor of PQ. Also, we raised $36 Ki for ISRG. Yay!

We backdoored a 7B open model for under $50. Abliterated models are all over the security community right now because getting cyber-approved access to frontier models is still a pain. Read the blog -> projectdiscovery.io/research/how...

TimeCop1983 says he has 3 (Roland) Junos, but he mostly uses Juno plugins, because it's so much easier, and sounds as good: www.youtube.com/live/uiVlpJg...

Shout out to Microsoft for resetting this counter twice in two months: www.howmanydayssinceajwtalgnonevuln.com

Signals and Threads episodes are bangers, but this may be the first to become part of my PL course's "text". About 50% is a compressed version of my GC lectures, about 30% is modern updates, and 20% is @yminsky doing his thing w/ Stephen Dolan. (-: signals-threads.simplecast.com/episodes/mem...

Love this idea!

"A tale of four theorem provers, or: A (reasonably) opinionated comparison of Isabelle/HOL, Lean, HOL4, and Agda" blueberrywren.dev/blog/primes/ Does what it says on the tin.

Checking that the text is correct is literally doing the work. It's strictly not plagiarism in any sense. You're pulling random text from the structure of reality and transforming it into mathematics.

Mathematicians should start picking through the Proofening papers, finding whatever’s valuable, and republishing under their own names. None of it is copyrighted.

Solved a Hilbert problem, invented the computer, defeated the Nazis AND, we now know, wrote erotic fiction staring himself. www.cam.ac.uk/stories/alan... The perfect human being.

"The only requirement to open a private school in Arkansas is displaying a flag and flagpole...." www.propublica.org/article/prop...

Made a list of synth plugin makers on Bluesky: bsky.app/profile/did:...

Today is the last day to register to vote in Ohio's November election. Check your registration status RIGHT NOW at voterlookup.ohiosos.gov/voterlookup..... Your voter registration might be out of date if you've moved since the last time you voted. You might have been dropped from the rolls.

Is there a way to tell your coworkers that "the person you admiringly cited for his technical work is also known for being a virulent racist" that won't get me fired?

Headline overstates things a bit here (the attack works only against an un-padded flavor of RSA which is not used by most real-world implementations), but it's still very interesting research!

People on Mastodon and Bluesky get hella mad at me for getting my hands dirty with AI. But I believe, as a professor, I have an *obligation to my students* to stay on top of what is happening in the tech world. Sometimes I deeply disbelieve in it, like blockchain, so I mostly just read. ↵

Are you interested in learning how to use Git for the first time? (or almost the first time) we're looking for Git beginners to give us feedback on a Git tutorial! The tutorial will be open source when it's released, so you'll be helping many future beginners! Sign up here […]

"New measles cases in Ohio spike 327% as outbreak surges" www.beaconjournal.com/story/news/h...

These two stories appeared immediately after each other. I may have found those "piracy sites" you're looking for, Darrell

Super-interesting: "Crossing the Golden Gate: macOS's New Application Support Protection" wojciechregula.blog/post/golden-... Apple extends System Integrity Protection to the folders of Discord, the major browsers, and a few crypto wallets

NASA employees say they've lost vital equipment and staff needed to make sophisticated spacecraft amid the agency's abrupt relocations over the past several months. n.pr/3SK34oz

The entire editorial leadership of Diabetes Care, the ADA’s flagship journal, is boycotting any work for the organization until they stop censoring their members retractionwatch.com/2026/09/14/a...

The contagion of fear bcantrill.dtrace.org/2026/09/13/t...

Fisler, Littman, & I have an upcoming CACM op-ed: "Teaching Novice Computing and Programming in the Agentic AI Era". Based on our experimental course+research. We argue that the «flaky compiler» is a useful metaphor for course design. Details in preprint: cs.brown.edu/people/sk/Pu...

A group of 25 Fields Medalists, including myself, have made a joint declaration on Math and AI: mathandai.org . We welcome additional signatories. See also this article in the Economist announcing the declaration: www.economist.com/science-and-...

This was inevitable, but here is the grim, hard data: Abortion bans kill women with ectopic pregnancies. www.propublica.org/article/ecto...

ASML charges $400M for a High NA EUV lithography machine, which might seem like a lot, but really it's only about the cost of hiring a consulting company to manage a PeopleSoft installation at a mid-sized university, so not so much, really.

I seriously, unironically think this would be fantastic for Columbus. Turn it into a giant pedestrian mall. Restaurants/coffee shops could have outdoor seating. Other cities have similar stretches and it’s always lovely.

Once again thinking about this 1977 proposal from the Columbus, Ohio, Department of Development.

Google Maps Introduces Crawling Directions For Cyclists Hit By Truck https://theonion.com/google-maps-introduces-crawling-directions-for-cyclists-hit-by-truck/

I guess we can thank Softaculous for reminding us why it's important to sign your updates even if they're delivered over TLS.

Why would I trust your AI when you can’t even get the name of a lake right?

“[The ACM] creates new research integrity role to address [research misconduct] case backlog” retractionwatch.com/2026/07/02/a...

Wow, this issue I reported in Paket in 2016 was just fixed github.com/fsprojects/P...

Aaaargh, my eyes!