A Proof-of-Concept using Cache Smuggling + Exif data to passively download a second stage payload - signalblur/exifsmugglingpoc

Our next npm major version, v12, introduces security-related default changes to npm install. All these changes are available behind warnings in npm today on 11.16.0 or newer, so you can…

Anthropic's Claude Fable policy turns coding assistants into non-neutral infrastructure for product companies.

We used agents to port all of Git to library-first, memory-safe Rust and it passes the entire C Git test suite.

SignalTrace “links devices that regularly travel together, correlating them to license plate.” It is a surveillance product that will sweep up and add all sorts of Bluetooth and other data to license plate readers, linking specific devices—and people—to cars.

Oscar's thoughts too large for a tweet

I’m feeling hungry, so I go to my kitchen and turn on the stove. I inadvertently have the handle of the frying pan sitting above the flame and when I go to pick up the pan my entire hand melts off in an instant.

A tool for creating and running Linux containers using lightweight virtual machines on a Mac. It is written in Swift, and optimized for Apple silicon. - apple/container

Jonathon Ready highlights one of the more eyebrow-raising details from the 319 page system card for Fable 5 and Mythos 5. Here's a longer excerpt, highlights mine: In light of …

A new and possibly controversial perspective:
In this video, I explain the sense in which generative AI trained by supervised learning is incapable of making novel discoveries.
https://t.co/LhAU6AyDkh

The text of the speech:

AI Creativity and Discovery…

A German regional court has ruled that Google is directly liable for the content of its AI search overviews. According to the court, previous limited liability protections for search engine operators don't apply to AI overviews. In this case, Google's AI…

What's the right behaviour when "try for free" ends?

Owen arrives On September 23rd, 2021, my first son Owen was born. Clearly inheriting his mom’s type-A personality, he arrived on his due date at a chunky 8.75 lbs. We were over the moon.  Until we weren’t. At a few … Continue reading →

Google Chrome is looking to finish off the various bypasses that help uBlock Origin and other such MV2 extensions to keep functioning. Edge and Opera could soon follow too.

This is an experimental, work-in-progress port of React Compiler to Rust. Key points:

Work-in-progress - we are sharing early, prior to testing internally at Meta, to get feedback from partners in...

A major ECFR poll finds the European public, in a time of rupture, thinking differently and questioning old assumptions. It reveals new political space availabl

## Vulnerability Summary

**Product**: Notepad++ v8.9.6.1 (latest patched version)
**Type**: CWE-42 (Path Traversal) / CWE-59 (Improper Link Resolution)
**Impact**: Arbitrary Code Execution...