Chris Buguet

La mutuelle Alan touchée par une fuite massive de données personnelles. Certaines particulièrement sensibles, comme le numéro de sécurité sociale. Encore une fois, c’est via l’entreprise Almerys, déjà visée en 2024, qui a visiblement beaucoup de mal à sécuriser nos données.

Microsoft is investigating mistralai PyPI package v2.4.6 compromise. Attackers injected code in mistralai/client/__init__.py that executes on import, downloads hxxps://83[.]142[.]209[.]194/transformers.pyz to /tmp/transformers.pyz, and launches a second-stage payload on Linux. The file name transformers.pyz appears deliberately chosen to mimic the widely used Hugging Face Transformers library and blend into ML/dev environments. The main payload is a credential stealer, but it also includes country-aware logic; it avoids Russian-language environments and contains a geo fenced destructive branch that has 1-in-6 chance of executing rm -rf / when the system appears to be in Israel or Iran. To mitigate this threat: isolate affected Linux hosts, block 83[.]142[.]209[.]194, hunt for /tmp/transformers.pyz, pgmonitor[.]py, and pgsql-monitor.service, and rotate exposed credentials.

SECURITY ADVISORY — TanStack npm packages A supply-chain compromise affecting 42 @tanstack/* packages (84 versions total) was published to npm earlier today at approximately 19:20 and 19:26 UTC. Two malicious versions per package. Status: ACTIVE — packages are deprecated, npm security engaged, publish path being shut down. Severity: HIGH — payload exfiltrates AWS, GCP, Kubernetes, and Vault credentials, GitHub tokens, .npmrc contents, and SSH keys. If you installed any @tanstack/* package between 19:20 and 19:30 UTC today, treat the host as potentially compromised: • Rotate cloud, GitHub, and SSH credentials immediately • Audit cloud audit logs for the last several hours • Pin to a prior known-good version and reinstall from a clean lockfile Detection — the malicious manifest contains: "optionalDependencies": { "@tanstack/setup": "github:tanstack/router#79ac49ee..." } Any version with this entry is compromised. The payload is delivered via a git-resolved optionalDependency whose prepare script runs router_init.js (~2.3 MB, smuggled into each tarball at the package root). Unpublish is blocked by npm policy for most affected packages due to existing third-party dependents. All 84 versions are being deprecated with a SECURITY warning, and npm security has been engaged to pull tarballs at the registry level. Full technical breakdown, complete package and version list, and rolling status updates: github.com/TanStack/route… Credit to the security researcher for responsible disclosure.

1) Le sketch est vraiment insoutenable mdrr 2) Laurent Lafitte il a pris le nom de sa mère mais c’est tellement la copie conforme de son daron.

@franceinfo Vous êtes ridicules avec cette mode américaine puritaniste de merde. Il n'y a aucune loi qui vous empêche d'écrire des gros mots ou Guerre.

🔴 Gu*** au Moyen-Orient : Israël affirme que le cessez-le-feu "n'inclut pas le Liban" #canal16

@GazzettaFerrari Everyone likes a good comeback.

LEWIS HAMILTON IN TOKYO WITH FERRARI F40 🇯🇵😮‍💨

Earthset. The Artemis II crew captured this view of an Earthset on April 6, 2026, as they flew around the Moon. The image is reminiscent of the iconic Earthrise image taken by astronaut Bill Anders 58 years earlier as the Apollo 8 crew flew around the Moon.

Le gouvernement souhaite faire passer la loi Yadan, une loi ayant pour but de condamner en France la critique du régime israélien alors même qu’Israël vient d'adopter il y a 4 jours la peine de mort pour les Palestiniens Il faut 500k signatures sur cette pétition pour qu'elle passe à l'Assemblée Nationale petitions.assemblee-nationale.fr/initiatives/i-…

Orange a commencé depuis 00h l'extinction de son réseau 2G en France. Le GSM, lancé en 1992, tire sa révérence après 34 ans de service. Un thread sur pourquoi c'est plus qu'un simple changement technique 🧵👇

enfin une fédération pour encadrer et promouvoir ce loisir pas assez connu fflsls.fr

Its not Simcity, but business school students who were good at Civ V also turn out to be better planners, organizers, and problem-solvers in this small experiment.

STRIKE. 💥🦅

Flying to San Francisco today to show The Last Night in private around GDC. Last year was an absolute pleasure, met many creative heroes. Gamedevs, platforms, angels, VCs, publishers, TV / cinema producers: hit me up. I have something special. Here for the full week.

@timsoret @oddtalesgames Ils sont chanceux à GDC 😊 Good luck Tim!

AI devs are cooked. I just wrote a script by hand

Is it weird that AI coding assistance is not giving me identity fracture? A lot of software developers are feeling disoriented and threatened these days. Programming by hand is clearly going the way of the buggy whip and the hand-cranked auger. Which is how we're finding out that a lot of people have their identities bound up in being good at hand-coding and how it feels to do that. That's not me. It's not me at all. Rather to my surprise, I don't miss coding by hand, not any more than I missed writing assembler when compilers ate the world and made that unnecessary. (That was in a couple years back around 1983, for you youngsters.) Maybe the fact that I'm not feeling any of this disorientation disqualifies me from having anything to say to people who are. On the other hand...if you can learn to emulate my mental stance and be completely unbothered, maybe that would be a good thing? So. If you're a programmer, and you're feeling disoriented, try this on for size: I like being a wizard. I like being able to speak spells, to weave complex patterns of logic that make things happen in the world. Writing code is a way to manifest my will. Yes, I've piled up a lot of arcane knowledge over the 50 years I've been doing this. But languages of invocation, they come and they go. Been a long time since I've had any use for being able to program in 8086 assembler, and that's okay. I have better spells now, and these days some rather powerful familiars. What I'm inviting you to do is think of yourself as a wizard. Not as a person who writes code, but as a person who is good at assuming the kind of mental states required to bend reality with the application of spells. And if that's who you are, does it matter if the spells are painstakingly scribed in runes of power, versus being spoken to an obedient machine spirit? It's all one; it's all the manifestation of will. Arcane languages come and go, machine spirits appear and then diminish to be replaced by more powerful ones, but you? You are the magic-wielder. Without you, none of it happens. Same as it ever was. Same is it ever was. And so mote it be.

If you are a software engineer "experiencing some degree of mental health crisis", now hear this, because I've been coding for 50 years since the days of punched cards and I have a salutary kick in your ass to deliver. Get over yourself. Every previous "programming is obsolete" panic has been a bust, and this one's going to be too. The fundamental problem of mismatch between the intentions in human minds and the specifications that a computer can interpret hasn't gone away just because now you can do a lot of your programming in natural language to an LLM. Systems are still complicated. This shit is still difficult. The need for people who specialize in bridging that gap isn't going to go away. As usual, the answer is: upskill yourself and adapt. If a crusty old fart like me can do it, you can too.

I am settling in for a showing of ‘Melania’ and the theater is PACKED! Earlier, a bystander asked if I was heading in to see Avatar, and I stopped dead in my tracks. “Avatar? No, son,” I curtly replied. “I don’t watch woke movies. I’m here to see the groundbreaking documentary about our incredibly talented First Lady.” The man’s two little girls began jumping up and down, pulling on his sleeve, and begging, “Daddy, we want to see Melania!” “But. But…” he stammered, “I thought you girls wanted to see Zootopia 2?” “No, no, NO,” they said, now nearly shouting. “We want to see Melania!! She is the most beautiful First Lady EVER.” Their father was scrambling, stressed out, and disoriented. “Girls, I’m afraid you aren’t the only ones who are captivated by President Trump and his beautiful wife,” I said, kneeling to get on their level. “Virtually everyone in this theater is here for the 7:30 PM showing, and it’s been sold out for days.” Tears began to well up in their eyes. “But…” I said in a hushed tone, “I happen to have a few extra tickets with me, and I’d like you and your dad to have them.” They jumped for joy and began hugging their father. He looked relieved as he wiped the sweat off his brow with a smile. I handed him the tickets and pulled him close. “Raise these girls right,” I whispered. “Teach them to be classy conservative women of faith like Melania, don’t let them become like Meghan Markle. Capisce?” He hugged me and thanked me profusely. “What are you going to do now?” He asked. “Don’t worry about me, son,” I told him, with a twinkle in my eye. “I’ve already got tickets to the next showing.”

Trump just posted this