414 karma · joined October 9, 2025
Just pasted the code into claude to try and decipher the minified js and looks like it tries to find the server via the blockchain? and then download further stuff from there.
We are temporarily no longer accepting OSS VRP product vulnerability submissions. This does not impact OSS VRP supply chain reports, or any outstanding reports. As an alternative, we encourage you to find impact across our other VRP programs and submit there instead, or pursue the Patch Rewards Program.
Why is this happening? This pause is due to a significant rise in automated submissions, the vast majority of which are not valid. We will continue to reformat and work on this aspect of the OSS VRP and commit to giving an update in Q1 2027.
https://bughunters.google.com/about/rules/open-source/google...
The vibes are off.
I feel like this can be applied to a lot of things, but this is pretty much how I've felt working in tech for the last 2ish years.
Why are they the arbiters of what is made? Also does this break s230?
"You're trying to kidnap what I've rightfully stolen."
Not enough people are noticing this, they juiced the benches
If agi why not agi shaped?
am i missing something?
why would I pay 200 out of pocket and then some for the best model, it seems very silly.
Dont quite think its ready yet.
The other week I spent about an hour trying to figure out why my actions jobs were just stuck on waiting and not starting.
For my personal stuff, I think I'm going to migrate to either my own selfhosted instance of something like gitea or codeberg, the juice just isn't worth the squeeze anymore imo for GitHub, even with stuff like free runners and pages.
I personally think this is mainly attributed to GH Copilot and I would love to know if MS/GH even makes a profit on it.
Anthropic is slightly better but where is 4.6 or 4.7 haiku or 4.7 sonnet etc.
Can't think of much use for it at the moment but I have it just read and summarise my email, calendar events and git repo in a daily briefing format, it only has readonly access to both, as I dont trust it to do stuff for me or on my behalf.
The briefing thing is nice though not super useful.