ivy

🎵 Don’t say I didn’t, say I didn’t warn ya 🎵

My interactive design sessions are like “That’s dumb as shit, Sol—why would we make it a cli??”

TIL: someone has ported English to Rust github.com/Aaryan-Kapoo...

Shout out to the high functioning masking girlies who saw The Talented Mr. Ripley and said “Oh, we can study and role play through social situations? Bet.”

The takes are like “Trillion dollar valuation? Yeah, but no moat” as if procuring a six figure amount of GPUs is not a comically absurd logistics problem rn

The “Sent from my iPhone” of our times—which I guess I’ve also had on for 18 years I’m not strongly for or against, but my first question when people complain about inconsistent AI results is harness/model/effort and this is providing auditable information about that

lmfao brutal

Good night, Claude. Good work. Sleep well. I'll most likely /clear you in the morning.

IT Ops: "Why is this Windows setting gray'd out?" Me: "It's insecure we can't... Actually, I jumped ahead of myself. Why does the user know this option exists? What is the problem they are trying to solve by changing it?" IT Ops: "Actually we don't know." This is why they pay me.

The coolest thing about atproto is that you have as much power over data presentation as you dare to claim

the internet is about watching cybersecurity disasters on your phone slowly get closer and closer until you're the one having the cybersecurity disaster

This works. Great POC. We are absolutely not shipping this, and as your outside platform architecture consultant I will give you half a dozen reasons why and guide you down a better path

I’m going to lose it. This kid used a command line task in the classic pipeline gui to write an inline python script which posts Azure Test Plan results to the ADO Test Plan API. Fuckin’ ship it! 😭

Some man asking me for a woman's opinion on asking for a girl on public transit's number and whether that was genuine or a line I'm flattered. Out here passing in one of the least queer parts of the metropolitan area

Pwn Day got me on my soapbox about how software and infra job titles are a disgrace to the fields of engineering and architecture. We barely do systems thinking and design

Some people will do anything to avoid clawing back the locus of control waiting for someone to Do Something then complain about how you used it

Claude: "No! That's too far! I will not use leaked certs to impersonate Sony! Go buy a new cable!" Astra:

PHP RCE, GitLab vulnerability, TLS with Node.js, SSL signed with 4

Pwn Day 2026 now has a live scoreboard: 29 CVEs / 7 projects / 4 major non-CVE incidents in the seed tally, plus a watcher polling cvelistV5/main every 3 minutes for new records rated 9+. It caught two more before I finished the page. https://pwn-day.wisp.place/

this must be what it feels like to live in gotham and friends are texting you shit like the joker just made money poisonous and the penguin has had an army in the sewer for over 6 years now

been seeing these two xkcd comics around since the emudhra keys thing went public, surprised i haven't seen anyone combine them

they pwned you and are posting your hacked jira ticket proving that you knew about the exploit in the comments

The problem for cybersecurity enjoyers is that there hasn’t been enough incidents to achieve the regularity and excitement of say, watching sports. Finally, with AI we have solved this

They were careless people, Sam and Dario.

don’t tell me we found vulnerabilities in cold fusion apps now..

I came up as a sysadmin by way of help desk which I feel lselects for a near sociopathic sense of duty and AI folks are somehow bigger cowboys than their “move fast and break things” predecessors

okay, what the hell? i expected php to bungle their security patch. i did not expect openai to brag about how smooth and great the process was and how proud they are of it here they should not be proud of it this was bungled af

How bad is it? This bad:

We can do stunning technical lifts with AI acceleration but it’s useless at teaching nerds the difference between a project and a product

Terrible week to carry a pager

Dr. Schneier or: How I Learned To Stop Worrying and Love the Critical CVE

drafting the "two recent major cybersecurity incidents..." intracompany comms and then they hit you with the third recent major cybersecurity incident

Finding out node is also hosed is what I get for laughing out the other CVEs. I still don’t have to do anything but we’re creeping closer. I feel like I should pre-emptively do a hardening pass on the Azure terraform provider before I’m clowned on by karmic backlash

I blew off and failed a req php class once. Teacher declined my appeal and told me he’d see me back next semester and he knew I’d make a great php dev. We had a mic drop hallway confrontation where I told him I updated my degree program to dodge the retake to his face. Feeling high key vindicated

2hrs - Design agent 5hrs - MVP agent 300hrs - Debating about the right name and domain 3hrs - Bugfixing and final polish agent Someone please help me, I can't seem to ship anything using AI

I used to joke that my disaster recovery plan was to drop my pager down a storm drain and start a new life in Colorado as a plumber, so anyway, good luck with the php thing lol lmao

I don't want to hear any whining about fixing certs from the information security types today. you chose to join the techno-priest caste, now shut up and perform the rites of exorcism

shitposts aside, this one is serious, my loves: if you’re just waking up and you have any service online running PHP 5.4 to latest, you need to take it down RIGHT NOW and don’t put it back online until after it’s patched absolutely catastrophic vulnerability dropped in the middle of the night

I vote we rename the eMudhra intermediate certificate incident to “Amuse Bouche compromise.” Because the keys are one byte.

claude saved me an incalculable amount of time and money vs no it didn’t 🙄

I don’t have a role where I need to fuck with certs rn, but I’m thinking about the existential crisis I had over Heartbleed in solidarity