scriptjunkie (Matt)

I just want everyone to know that I was out today and saw two separate mullets. This is not a drill.

@politicalmath Before is on the right.

Does losing this much weight make your chest hair fall out?

Kimi K3 just fixed 15 critical security bugs that Codex and Fable refused because of “cyber guardrails.” There’s no reason to limit American models on tasks that Chinese models handle without issue. We’re only making ourselves less competitive.

👀🚨🔥U.S. government offering relocation and reward for information. In other words, get out of your current life and start over with a new bank account.

Trial lawyers are lobbying against self-driving cars because they're too safe. They need people to be killed and injured so that they have material for lawsuits.

@HackingDave So glad I switched to a networked iot one. Now I get a mobile notification telling me exactly which detector needs a battery change

This fn every like 10 min beeping smoke detector .. I’m going to find you and smash you with a hammer.

One of my favourite Falklands facts: When the referendum was held in 2013 about whether they wished to remain British or become part of Argentina only 3 people voted for Argentina. There were 18 Argentinians living on the island at the time… 😂

k3 vibes seemingly collapsing, not meaningfully frontier and also incredibly expensive / slow / token-inefficient in practice. this plus the deepseek v4 routing to fable debacle is just overall a really bad day for chinese model hype

🐚 wp2shell RCE now needs no cracking. thanks @rez0__ for the nudge. forge a fake WP_Post (route confusion) → it runs a customize_changeset as an existing admin → POST /wp/v2/users makes a new admin → log in → shell.

Here's wp2shell 🐚 single-file, zero-dependency PoC for the WordPress core pre-auth RCE (CVE-2026-63030 + CVE-2026-60137) one anonymous HTTP request: REST batch route confusion → unauth SQLi → admin hash → shell default install. no plugins. no login. the best of other public PoCs, unified into one file. scanner + full-chain code + deep dive + lab to play 👇

Hard to overstate how messed up the economy & lives of young Americans got due to mass college subsidies. Universities receive ~$200 billion regardless of grads' ability. The "factory" would learn really quick to not waste years of students' lives if it meant they didn't get paid

@astuyve $29.5 quadrillion for one of our customers

@KentonVarda 0.1!

This page has been up since 2021 and it has never said "yes" before. isthelakefullyet.com

Spending my Friday night just sitting here refreshing this page...

🚨 Critical Security Alert: wp2shell: Pre-Authentication RCE in WordPress Core eu1.hubs.ly/H0x0V5W0 Our security team has discovered a critical vulnerability in WordPress Core, impacting a significant portion of the estimated 500 million websites running on WordPress.

I’m back after LinkedIn locked me out for 48 hours because apparently, my engagement “goes beyond what’s humanly possible”. This is the third restriction on my account, following a 1 hour and then an 8 hour timeout, both triggered simply because I was going through my connection requests too quickly. I’ve spent at least 10 back and forth emails with LinkedIn support trying to get to the bottom of this. Every single time, I’ve told them the exact same thing: I use absolutely no software, bots, or AI to pull or push anything on this platform. Hopefully if they fix their AI for me it will fix it for others. The lockouts keep getting longer. If this isn’t fixed, the next could be a week, then a month, then forever. I don’t know whether their system simply can’t handle a heavy human user, or whether my posts draw the kind of attention that some people would rather not see. 👁️ But this bureaucracy exposes a much darker reality. Governments are aggressively trying to force everyone to verify their real identity to use social media under the guise of child safety. Right now, a permanent account ban is just an inconvenience because you can start over with a new email address. Under mandatory identity laws, a permanent ban means you’re banned from the digital world for life. Your verified legal identity gets blocked from the service for good, and no new email will ever get you back in. We’re allowing AI to run moderation with no human in the loop and no real way to appeal. For people who rely on professional networks for their careers, their visibility, and their income, one false flag from a broken algorithm can destroy an entire business overnight, with no one to talk to and no way to explain the mistake. LinkedIn should automatically notify a human team when accounts with meaningful engagement is blocked by their AI. I need to drastically accelerate the development of my new website where I’ll publish everything I write.

So I read the election files and the main takeaways, aside from a zillion ineligible people registered to vote, are: - All the PII has probably been breached and - Voting machines and registration systems have vulns too So states and counties running election related things (but also the rest of you) should do the following: - Back up data files regularly - Audit data integrity and implement alerts - Test out your backups - Watch out for phishing, re-used passwords, enable MFA - Watch out for ransomware, patch, least privilege - Do network segmentation and not once was AI mentioned. Honestly kind of impressed.

Death by Community Note

@TonikJDK That's nothing. I owe a hundred eleventy billion dollars to AWS

Last night I was told the market was a beautiful thing! Best market ever! Today I am down 20 grand.

@FSDominguez I just really want to know what would have happened if they tried to charge that to my credit card

@scriptjunkie1 Maybe the new AI billing system is predicting you will win the lottery and thus has adjusted the price to make you feel rich already :p

Anyway, does anyone know a cloud provider that does not randomly change a monthly $0.26 bill to $111,814,843,461.26? I don't need this AWS feature.