わるる💎

発言は個人的なもので、所属する組織・団体としての公式コメントではありません🙇‍♂️

[こぎそ @kgsi]

TypeSafeのJevで、ライブコメントを「質問・感想・要望・その他」に振り分けるデモを作ってみた、動かしてみるとイメージしやすい。

コメントの意味をAIが判定して、その結果で行き先が変わる。アプリやワークフローの小さな判断を、AIに任せる使い方とかに向いてそう。

[koooootake @koooootake]

スマホアプリ開発ハッカソン #SPAJAM
第3回予選 テーマ「味」#9

持ちアジでバトル
『アジのたたき』

質問に答えるとあなたの持ちアジを教えてくれる！専用アジデバイスで持ちアジバトル！指示された向きにアジを振って持ちアジを活かせるアドバイスをもらえる！

インパクトすごすぎる🤣

[ITmedia NEWS @itmedia_news]

Google、「Gemini Notebook」に購入済み電子書籍を追加できる「Expert Intelligence」
https://t.co/cj3TJDybYr

[Slack @SlackHQ]

Now building is a team sport.

Introducing Slack Code: a new way for your team and AI agents, like @AnthropicAI's Claude Code, Claude Tag, Devin from @cognition, @github Copilot, @ChatGPT, and @vercel agents, to write, review, and ship code together.

Just mention an agent to spin up a channel, pull in your team, and start building. All in the open. All in Slack.

[BBC News (World) @BBCWorld]

Why Japanese firms are being so slow to use AI https://t.co/XR9bzepbz0

[GMO Flatt Security株式会社 @flatt_security]

Ruby on Rails の深刻度「緊急」脆弱性が先ほど開示されました。弊社研究者 RyotaK @ryotkak を含むチームにより発見されたもので、一般的な構成において、リモートからの任意コード実行が可能です。

緊急度が高く、速やかな更新を推奨いたします。

▼ ほか詳細
https://t.co/sJdQrgSZuE

[今井翔太 / Shota Imai @ImAI_Eruel]

Fable/Mythos5では推論中に人の言語とも思えぬ意味不明な思考過程を出力することが報告されてましたが、Claude Opus5では推論の過程で「うおおおおおおおお」「NOO0!!」みたいな発狂ワードが出る模様
DeepSeek R1の論文でも、突然LLMの出力挙動が不自然になる（でも性能は上がる）「Ahaモーメント」が報告されてましたが、ある意味で、極限まで考えると発狂する人間の性質を受け継いでいるのか、言語的にも発狂ワードを入れた方が飛躍的な発想につながるのか、はたまた整理されてロジックが通った自然言語は��魔になるのか

[わるる💎 @2002_wrr]

暑さ以外で夏を感じてきた

[Aikido @AikidoSecurity]

🚨 Latest versions of WordPress are vulnerable to pre-authentication remote code execution (RCE) via SQL injection

<= 6.8.5: not affected
6.9.0 - 6.9.4: affected
7.0.0 - 7.0.1: affected

[Claude @claudeai]

Beginning July 20, Claude Fable 5 will be included in all Max and Team Premium plans, at 50% of limits.

Pro and Team Standard users will continue to have access to Fable via usage credits, and will receive a one-time $100 credit.

Demand for Fable has been challenging to predict, which is why we rolled it out to subscription plans in stages, extending access several times as we secured additional capacity.

[Elon Musk @elonmusk]

I was clearly wrong about Anthropic. They are obviously currently the leader in AI. No company has released a model as good as Mythos/Fable and they will undoubtedly have Mythos 2 ready soon.

And I would never cut them off in a way that hurt them badly, even as a competitor. That’s not my style.

Tesla open sourced its patents and we made the Supercharger network available to all competitors, even though we could have made it a walled garden.

SpaceX launches competing satellite systems with no increase in price or use of unfair terms.

Even my worst enemies can attack me on this platform.

…

[TypeScript @typescript]

📣 The moment is here. 📣

TypeScript 7 is officially released! 7️⃣

https://t.co/D7Mbq7vWpy

[くりえいたーもどき㍿ @Elnabu1022]

ほんとに何作ってるんだろ

[よしこ / yoshiko @yoshiko_pg]

Fable停止、日本時間だと 7/8 15:59:59 らしい。
もう1日遊べるドン

[Anthropic @AnthropicAI]

Anthropic has confidentially submitted a draft S-1 registration statement to the Securities and Exchange Commission.

Pending completion of SEC review, this gives us the option to pursue an initial public offering.

Read more: https://t.co/onGZAhRLvD

[Tibo @thsottiaux]

Five million users would agree. Resetting the limits tomorrow morning to celebrate.

Time to go /fast

[Polymarket @Polymarket]

NEW: AI consultant reveals a client accidentally spent $500,000,000.00 in a single month after failing to set employee limits on Claude usage.

[GitHub @github]

We are investigating unauthorized access to GitHub’s internal repositories. While we currently have no evidence of impact to customer information stored outside of GitHub’s internal repositories (such as our customers’ enterprises, organizations, and repositories), we are closely monitoring our infrastructure for follow-on activity.

[Kenn Ejima @kenn]

サイゼリヤCLIへの反論で
一番納得感があったのは

このマナー警察が群がる構造が
日本を清潔で美しい国にしている

というもので
なるほどそれは確かにそうだなと思った

自分は日本には欧米のように
自由だが不潔なありふれた国ではなく
独自の文化を大事にして欲しいので

起業家には日本を変えようとするのではなく
さっさと海外に出て出稼ぎしてこよう
と言うことにする

[International Cyber Digest @IntCyberDigest]

‼️🚨 BREAKING: An AI found a Linux kernel zero-day that roots every distribution since 2017. The exploit fits in 732 bytes of Python. Patch your kernel ASAP.

The vulnerability is CVE-2026-31431, nicknamed "Copy Fail," disclosed today by Theori. It has been sitting quietly in the Linux kernel for nine years.

Most Linux privilege-escalation bugs are picky. They need a precise timing window (a "race"), or specific kernel addresses leaked from somewhere, or careful tuning per distribution. Copy Fail needs none of that. It is a straight-line logic mistake that works on the first try, every time, on every mainstream Linux box.

The attacker just needs a normal user account on the machine. From there, the script asks the kernel to do some encryption work, abuses how that work is wired up, and ends up writing 4 bytes into a memory area called the "page cache" (Linux's high-speed copy of files in RAM). Those 4 bytes can be aimed at any program the system trusts, like /usr/bin/su, the shortcut to becoming root.

Result: the next time anyone runs that program, it lets the attacker in as root.

What should worry most: the corruption never touches the file on disk. It only exists in Linux's in-memory copy of that file. If you imaged the hard drive afterwards, the on-disk file would match the official package hash exactly. Reboot the machine, or just put it under memory pressure (any normal system load that needs the RAM), and the cached copy reloads fresh from disk.

Containers do not help either. The page cache is shared across the whole host, so a process inside a container can use this bug to compromise the underlying server and reach into other tenants.

The original sin was a 2017 "in-place optimization" in a kernel crypto module called algif_aead. It was meant to make encryption slightly faster. The change broke a critical safety assumption, and nobody noticed for nine years. That bug then rode every kernel update from 2017 to today.

This vulnerability affects the following:
🔴 Shared servers (dev boxes, jump hosts, build servers): any user becomes root
🔴 Kubernetes and container clusters: one compromised pod escapes to the host
🔴 CI runners (GitHub Actions, GitLab, Jenkins): a malicious pull request becomes root on the runner
🔴 Cloud platforms running user code (notebooks, agent sandboxes, serverless functions): a tenant becomes host root

Timeline:
🔴 March 23, 2026: reported to the Linux kernel security team
🔴 April 1: patch committed to mainline (commit a664bf3d603d)
🔴 April 22: CVE assigned
🔴 April 29: public disclosure

Mitigation: update your kernel to a build that includes mainline commit a664bf3d603d. If you cannot patch immediately, turn off the vulnerable module:

echo "install algif_aead /bin/false" > /etc/modprobe.d/disable-algif.conf
rmmod algif_aead 2>/dev/null || true

For environments that run untrusted code (containers, sandboxes, CI runners), block access to the kernel's AF_ALG crypto interface entirely, even after patching. Almost nothing legitimate needs it, and blocking it shuts the door on this whole class of bug...