R49
67 posts
Ubuntu 26.04 (Long Term Support) is shipping tomorrow… and Canonical has published an update on their quest to replace GNU CoreUtils with Rust-based re-writes. Highlights: - After developers raised “some serious concerns”, Canonical hired an external security research firm to evaluate the Rust re-writes (known as “uutils”). - That security firm quickly found 113 significant issues, with a large portion of them being severe security issues warranting a CVE. - Only some of those issues in the Rust re-writes have been fixed for the Ubuntu 26.04 release. - Repeat: Ubuntu 26.04 is shipping with significant known issues in the new Rust coreutils. - Some of the most critical Rust-Re-Written commands (cp, mv, and rm) were found to contain a large number of significant “Time-of-Check to Time-of-Use” issues, the kind of issues which create race condition vulnerabilities. The kind often exploited by hackers. - As such, cp, mv, and rm will not be shipping in Ubuntu 26.04. Even with their clear “it’s fine if Ubuntu 26.04’s rust re-writes contain significant bugs” policy… the issues with cp, mv, and rm were simply TOO severe. - Despite this undeniably disastrous rollout of the Rust-based rewrites of Coreutils, the Ubuntu team plans to ship the next release, in 6 months (26.10), with 100% of the GNU Coreutils replaced with the (currently comically broken) Rust re-writes. discourse.ubuntu.com/t/an-update-on…
💰 DEVELOPING STORY – If you’re wondering why the accounts @Doomerzoomer and @higgsfield got banned, here is the whole story: I was invited into a private Telegram group. I’m usually very hesitant with paid promotions and I rarely trust setups like this, but I joined anyway to understand what was going on. What I found was not organic support or independent creators sharing tools they liked. It was a coordinated system. Inside the group that was run by @Doomerzoomer, creators were given exact instructions. What to post, which words to use, what to retweet and when. There were external briefs that linked directly to the companies’ websites, basically telling people how to frame their opinions. The process was as follows: You filled out a Google form with your X handle, the link to the post, and the agreed payment. Then you submitted it and were promised of being paid within a week. I never got to the payment part and here is why: After a few days of collecting evidence, I stopped. Because it became clear this was not just aggressive marketing. It was literally a scam. Two examples: – Perplexity AI was pushing influencers to avoid disclosing that posts were paid. – Higgsfield told people disclosure was optional. That’s deliberate platform manipulation. This had been running for months. There were around 150 large creators in that group, all being directed on what to post. In private chats, @Doomerzoomer would tell people what to say and not to say publicly. He told me, for instance, to stop talking about Israel. A huge red flag imho. Benjamin’s mistake was that he contacted me via his private phone number. As a white-hat hacker, I was able to identify the person behind it. His name is Benjamin S., a Chinese individual living in New Zealand. From there, more pieces came together. Old data traces, profiles, behavior patterns. Even things like him cheating on chess dot com, which says a lot about character. The arrogance in his messages matched exactly what I found. It painted a very clear picture of the kind of person operating this system. In the middle of it all (between companies and the creators), Ben acted as a single coordinator and gatekeeper. He recruited creators, controlled the flow of information, and based on everything I could verify, positioned himself to take a significant cut (7 digits per month) while keeping the creator side unclear about how the money actually moved. – Payment rates were inconsistent. – Stories did not match. – Nothing about it was transparent. Many of the creators involved were making between $15,000 and $50,000 PER MONTH from these campaigns alone. Doomer most likely made 50% of each payment on top as a “one person agency.” Do the math. I understand why some of the creators are upset with me now. And I’m sorry. I could have stayed quiet. I could have played along. I could have taken the money. BUT I DIDN’T. Because if platforms like this are going to mean anything, they cannot turn into pay to play schemes disguised as real opinion. And it did not stop there. Ben kept pushing for more. More creators. More reach. More volume. There were even incentives to recruit additional people into the system to expand it further. The screenshots below show how that recruitment worked. At some point, you have to ask yourself how no one in that group felt like cattle. Because that is exactly what it felt like. Controlled messaging, controlled behavior, scaled and monetized. I want to be clear about one thing. There is nothing wrong with getting paid to post. But if you are getting paid, be honest about it. Say it openly. Do not disguise it as organic belief. Yesterday I contacted @higgsfield via email and asked them about their relationship with Benjamin S., the structure behind these campaigns, and the briefing material being distributed. They did not respond to my questions. Today, they got suspended. I also have their full briefing texts saved. In the long run, honesty wins.
OMG THE CEO OF MCDONALD’S WAS CAUGHT ON CAMERA DOING IT 😱
