One reason vibe coding is so addictive is that you are always almost there but not 100% there. The agent implements an amazing feature and got maybe 10% of the thing wrong, and you are like "hey I can fix this if i just prompt it for 5 more mins". And that was 5 hrs ago.
Sounds like a gambling, considering that you are paying for agent tokens and there are no guarantees for a valid result.
Sounds like a gambling, considering that you are paying for agent tokens and there are no guarantees for a valid result.
This is one of the biggest and dangerous 0day vulnerabilities in the Linux kernel 👉🐧👈.
The vulnerability is CVE-2026-31431, nicknamed "Copy Fail," disclosed recently by Theori. It has been sitting quietly in the Linux kernel for nine years. 😱
This vulnerability affects the following:
🔴 Shared servers (dev boxes, jump hosts, build servers): any user becomes root
🔴 Kubernetes and container clusters: one compromised pod escapes to the host
🔴 CI runners (GitHub Actions, GitLab, Jenkins): a malicious pull request becomes root on the runner
🔴 Cloud platforms running user code (notebooks, agent sandboxes, serverless functions): a tenant becomes host root
Mitigation: update your kernel to a build that includes mainline commit a664bf3d603d. If you cannot patch immediately, turn off the vulnerable module:
https://copy.fail
The vulnerability is CVE-2026-31431, nicknamed "Copy Fail," disclosed recently by Theori. It has been sitting quietly in the Linux kernel for nine years. 😱
This vulnerability affects the following:
🔴 Shared servers (dev boxes, jump hosts, build servers): any user becomes root
🔴 Kubernetes and container clusters: one compromised pod escapes to the host
🔴 CI runners (GitHub Actions, GitLab, Jenkins): a malicious pull request becomes root on the runner
🔴 Cloud platforms running user code (notebooks, agent sandboxes, serverless functions): a tenant becomes host root
Mitigation: update your kernel to a build that includes mainline commit a664bf3d603d. If you cannot patch immediately, turn off the vulnerable module:
lsmod | grep -q '^algif_aead' && echo "algif_aead is ACTIVE loaded -> check by hand" || (echo "not loaded -> deactivate & blacklisted"; modprobe -r algif_aead 2>/dev/null; echo -e "blacklist algif_aead\ninstall algif_aead /bin/false" > /etc/modprobe.d/disable-algif_aead.conf)
https://copy.fail
Xint
Copy Fail — 732 Bytes to Root
CVE-2026-31431. 100% Reliable Linux LPE — no race, no per-distro offsets, page-cache write that bypasses on-disk file-integrity tools and crosses containers. Found by Xint Code.
This media is not supported in your browser
VIEW IN TELEGRAM
🧔 This is how it felt to be a software developer before AI and StackOverflow.
ᕙ( •̀ ᗜ •́ )ᕗ
ᕙ( •̀ ᗜ •́ )ᕗ
C or Rust for microcontroller firmware development?
A study published by Cornell University tries to answer the question. The researchers gathered two teams of engineers working on STM32 MCU firmware. One team worked on C firmware, and the users on Rust firmware using Ariel OS RTOS.
Each team worked separately for 6 weeks, and then in tandem for four more weeks to optimize the results. Rust and C firmware ended up having similar footprints and the exact same performance (when capturing sensor data).
https://www.cnx-software.com/2026/05/06/study-compares-rust-and-c-languages-for-embedded-firmware-development
A study published by Cornell University tries to answer the question. The researchers gathered two teams of engineers working on STM32 MCU firmware. One team worked on C firmware, and the users on Rust firmware using Ariel OS RTOS.
Each team worked separately for 6 weeks, and then in tandem for four more weeks to optimize the results. Rust and C firmware ended up having similar footprints and the exact same performance (when capturing sensor data).
https://www.cnx-software.com/2026/05/06/study-compares-rust-and-c-languages-for-embedded-firmware-development
Hear me out 🚨 NodeJs developers (and software) should never be trusted.
They have a kind of a culture to do not care about code, performance, package quality etc. Now it is widely exploited by hackers with supply chain attacks.
https://www.aikido.dev/blog/red-hat-npm-packages-compromised-credential-stealing-worm
They have a kind of a culture to do not care about code, performance, package quality etc. Now it is widely exploited by hackers with supply chain attacks.
https://www.aikido.dev/blog/red-hat-npm-packages-compromised-credential-stealing-worm
www.aikido.dev
Red Hat npm Packages Compromised to Spread a Credential-Stealing Worm
Multiple official @redhat-cloud-services npm packages were compromised with a credential-stealing worm derived from the open-sourced Mini Shai-Hulud malware, targeting cloud credentials, and developer tooling across CI/CD pipelines.
Good news everyone 🦀
New borrow checker will be available in rust soon.
This one should make some code parts less clunky.
#rust #programming
https://blog.rust-lang.org/2026/08/04/enabling-polonius-alpha-on-nightly/
New borrow checker will be available in rust soon.
This one should make some code parts less clunky.
#rust #programming
https://blog.rust-lang.org/2026/08/04/enabling-polonius-alpha-on-nightly/
blog.rust-lang.org
Enabling the next iteration of the borrow checker on nightly | Rust Blog
Empowering everyone to build reliable and efficient software.
🤔 Claude models will have invisible watermarks embedded in ALL text, and metadata attached to files.
Thanks to new EU AI Act 😖
#ai #claude #eu #anthropic
https://support.claude.com/en/articles/16266773-how-claude-marks-ai-generated-content
Thanks to new EU AI Act 😖
#ai #claude #eu #anthropic
https://support.claude.com/en/articles/16266773-how-claude-marks-ai-generated-content
This is how it feels to steal content from the internet and put your own watermark on it 😆
#anthropic #claude
#anthropic #claude
🐳 DeepSeek just open-sourced their first official harness for AI agents! 🔥
"Everything is a plugin": models and tools are freely interchangeable.
You can try it yourself.
https://github.com/deepseek-ai/deepseek-harness
"Everything is a plugin": models and tools are freely interchangeable.
You can try it yourself.
https://github.com/deepseek-ai/deepseek-harness
GitHub
GitHub - deepseek-ai/deepseek-harness: DeepSeek Harness: Everything is a Plugin.
DeepSeek Harness: Everything is a Plugin. Contribute to deepseek-ai/deepseek-harness development by creating an account on GitHub.
This is what USA's use of #AI could look like soon.
This media is not supported in your browser
VIEW IN TELEGRAM
🤯 I couldn't imagine such stuff 2 years ago. But now is possible using GPU/CPU split and proper MoE #AI #LLM model.
The numbers taken from my tests of Gemma4 26B A4B on a notebook with 32Gb RAM + RTX 4060.
Such performance allows you to code 100% offline without eGPU or Mac.
But you need to know how to tread local LLMs limited abilities.
The numbers taken from my tests of Gemma4 26B A4B on a notebook with 32Gb RAM + RTX 4060.
Such performance allows you to code 100% offline without eGPU or Mac.
But you need to know how to tread local LLMs limited abilities.