DeepYogurt

Very innocent behavior /s

In theory that's a manager's responsibility, but managers get (effectively) punished for firing people so that never happens in practice.

cve.now looks like a temu version of osv.dev

I care. I don't want to see the brute forcing of academic publication

GitHub's been doing CVE requests since at least 2022

https://github.blog/security/vulnerability-research/removing...

Severities are not directly comparable. The CVSS docs leave the choice of the "vulnerable component" as an exercise for the reader. The choice of the "vulnerable component" is also not encoded in the score so a critical may be a critical in the context of a library scored against a theoretical (and bad) program or it could be scored on a single website with known mitigations.

Neither, I'm trying to assert that AI generated code would follow the (flawed) pattern we encoded in it. I think they're great for cyber stuff

Which it was trained on

I prefer the tornado

https://rogolabs.net/tornado/

Mistral has an opening

> Who are they kidding?

Themselves.

Tesla hitting their lambo era?

What are these people running from? They're not! They're running to the world's toughest competition in town!

the chickens are coming home to roost

I always wanted to live through TWO pandemics! /s

Gold farming is solved!

Hmmmmm, almost like these models aren't generally intelligent

I wonder if this will cause a mini cyber insurance crisis. I don't think any of those data loss plans have been tested at scale.

I was there this morning and it was poppin'

We're entering consolidation

Anyone afraid of being laid off at google right now? Perhaps this is a backup :)

Like what? Do you get tokens for "helping open source" or something?

Why though? Is everyone karma farming? What's the motivator here?

This'll be very painful in the short term, but hopefully this leads to a reduction in software dependency tree sizes in the longer term.

This is good internet

Who's accountable for the 33%?

CPE is a joke. The offical spec doc asserts that correctness of names is not in scope for the spec. See section 5. Well-Formed CPE Name Data Model

https://csrc.nist.gov/pubs/ir/7695/final

I guess this shows how low of a bar there is for getting something in as an ietf draft. Adds context for that ipv8 post from the other day for sure

Long overdue to be honest.

The shoe company? Edit: The shoe company.