Do It by Code
54 subscribers
708 photos
99 videos
14 files
1.24K links
We uhhhhh... do things by coding them.
Download Telegram
‼️Two popular Rust crates, arrayref and append-only-vec, were compromised in a supply chain attack. arrayref alone has 244M downloads. The malware ran at build time, which means anyone who compiled a project that pulled one in was hit, without ever calling the crate.

Here's the breakdown 🧵

Posted by Aikido, 40 minutes ago
🔥2
CVE-2026-33824: Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability (critical; score: 9.8/10)

Affected versions: nearly all supported versions of windows.
actively exploited, needs no auth or user interaction. The only requirement is for the service to be reachable over the network.

Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.
The bug lies in how Windows handles IKEv2 fragmented network packets. Attackers can target any exposed machine by sending malicious traffic over UDP ports 500 or 4500.


- Microsoft Update Guide
- CISA
🔥1
Do It by Code pinned «CVE-2026-33824: Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability (critical; score: 9.8/10) Affected versions: nearly all supported versions of windows. actively exploited, needs no auth or user interaction. The only…»
Do It by Code
CVE-2026-33824: Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability (critical; score: 9.8/10) Affected versions: nearly all supported versions of windows. actively exploited, needs no auth or user interaction. The only…
Mitigation:

1. if you are not using any windows vpn (most people don't, really); just disable the service:

Stop-Service -Name "IKEEXT" -Force
Set-Service -Name "IKEEXT" -StartupType Disabled


2. Update and apply the security fix during the April 2026 Patch Tuesday cycle
3. or you can also block inbound traffic on UDP ports 500 and 4500 on your firewall

how to see the network service is actually listening on the target ports
(ports 500 and 4500 are the most common ports used by this service)
you can run this read-only powershell command:

Get-NetUDPEndpoint | Where-Object { $_.LocalPort -eq 500 -or $_.LocalPort -eq 4500 } | Select-Object LocalAddress, LocalPort, @{Name="ProcessName";Expression={(Get-Process -Id $_.OwningProcess).ProcessName}}


If you see an output like this:

LocalAddress LocalPort ProcessName
------------ --------- -----------
:: 4500 svchost
:: 500 svchost
0.0.0.0 4500 svchost
0.0.0.0 500 svchost

it means you are probably affected.

Here are the powershell commands to block inbound traffics to these ports: (not readonly; requires admin perm):

New-NetFirewallRule -DisplayName "Block CVE-2026-33824 (Port 500/4500)" -Direction Inbound -Action Block -Protocol UDP -LocalPort 500,4500
👍2
Media is too big
VIEW IN TELEGRAM
Last post about the Minecraft clone running on a custom CPU

GPT-5.6 Sol upgraded the CPU to support 256 KiB of RAM, along with a few other changes

This is about as far as it could push it within Turing Complete’s limits without everything breaking

Posted by Angel 🌼, 17 minutes ago
This media is not supported in your browser
VIEW IN TELEGRAM
People asked for DOOM so here's DOOM running on GPT-5.6 Sol's custom CPU, it called it Codex-R32

"The CPU is built from primitive logic components and wires inside Turing Complete. DOOM uses the C-based PureDOOM port, compiled into native RV32IM machine code that runs directly on the custom Codex‑R32 CPU"


Posted by Angel 🌼, 1 hour ago
In powershell:
if you accidentally type $LogPath = "C:\logs" but later write Remove-Item $LogPth\*, normal PowerShell treats $LogPth as null and evaluates the path to \* and attempts to delete your root directory.

Strict mode stops the script instantly on the typo (Set-StrictMode -Version 1.0 (or higher))
Telegram has a new bug (only for accounts from a very specific region):

if you send a text message with a URL in it, it may not be send. some clients will show the error to you (such as Unigram); it's a floodwait error coming from their backend

the issue is with web preview. when you want to send that message, disable web page preview on that message. it doesn't matter even if there is no web page preview shown, you just have to disable it

here is how to disable it:
as you write the URL, a small panel shows up on the message box. click on "x", so it goes away

if that panel doesn't show up, it means you are trying to send a private URL (e.g. a message URL in a private channel/group), in that case, try to write a public URL first (e.g. https://github.com); once that panel showed up click on the "x"
👍1
You can now play chess with bots in telegram: @RichChessBot

The bot uses new "rich messages" feature, so you have to update your telegram client to current latest version to be able to see the message
frontier of the Artificial Analysis Intelligence Index v4.1.1
All 59 models from Artificial Analysis · cost per Intelligence Index task
🔥1
Re: GLM-5.3-Flash

July 16th: The "Kimi K3 moment" - China has caught up to Opus!

4 weeks later: GLM 5.3 - Same performance, but cut the amount of parameters and cost to a third!

12 days later: GLM 5.3 Flash - Almost GLM5.3 performance but cut the parameters in half, cut prices to a fifth and serving on Chinese chips!

bertili, 1 day ago
This media is not supported in your browser
VIEW IN TELEGRAM
We found a preauth rce in @whmcs 9.0.0 to 9.0.6, since this has been already fixed in 9.0.7, I'll drop the details soon.

Posted by azizk, 7 hours ago
sorry, but glm-3.5-flash needs to be steered a lot by a smarter model. and don't get me wrong, i'm really a fan of fast, affordable and smart flash models, but the hype and artificially blowing it up as if it were on the same level as gpt sol or fable just isn't true.

Posted by Kevin Kern, 2 hours ago
tip: if you want to compare games made by different engines listed on Steam (and their stats like Peak, Online, Released, etc):

- Unreal
- Unity
- Godot

click on each column to change the sorting

list of Engines/SDKs/AntiCheats: https://steamdb.info/tech/

* alternative: search filter
A significant amount of Suno AI's source data has been leaked. Upon investigation, it was found that:
Their primary tech stack is MERT25, and they’ve used web crawlers to gather a large amount of YouTube Music content....

Posted by 青龍聖者, 1 hour ago
Tencent has released and open-sourced Tencent Hy4 preview, a next-generation large language model with 770B total parameters and 49B active parameters, and a context window exceeding 1M tokens.

Article, Comments