joce

Husband, father of 2, works in IT - Turns yaml into AWS bills

[joce @StackOverJoce]

@barriere_dr @ordrespontane

[Tony Fadell @tfadell]

Nobel Prize winning economist Kenneth Arrow wrote about "learning by doing" decades ago. He knew that productivity and expertise improve through experience.

The messy, repetitive works is often where you learn the patterns that eventually become judgment. Knowledge can be taught, but judgement is built through lived experience.

The first draft you rewrite. The customer call you listen to. The bug you fix and fix again. The factory floor you walk.

Small decisions you make every day teach you judgement. And, judgement is the thing everyone wants from senior people in the workplace. If we automate away every entry-level task without replacing the learning loop, we are removing a part of the process that creates experts.

The goal should be to use AI to accelerate learning, remove friction, and give people better tools to build expertise faster.

https://t.co/MpFZzCk1An

Thanks @Fortune & @tbove4 for sharing this story. Link in the comments.

[International Cyber Digest @IntCyberDigest]

❗️ Over 30 official Red Hat npm packages were compromised. How they got in:

- A Red Hat employee's GitHub account was compromised.
- Attackers pushed "orphan commits" (detached from branch history) straight in, bypassing code review with no pull request.
- Payload "Miasma" (Mini Shai-Hulud variant) steals GitHub/cloud/Vault/SSH/npm secrets. Rotate everything since June 1.
- The commits added a workflow (ci.yaml) + script (_index.js) that abused npm trusted publishing, requesting a real OIDC token to publish backdoored versions.

[Ed Zitron @edzitron]

Day one of GitHub Copilot token-based billing and the customers LOVE IT! They're all celebrating the power and value of generative AI!

[joce @StackOverJoce]

Eclaté au sous-sol on dirait une pub windev des années 2000

[Dell Technologies France @DellTechFrance]

Progresse aussi hors terrain avec Dell XPS boosté par Intel Core Ultra @Intel

[Claude @claudeai]

Introducing Claude Opus 4.8: it builds on Opus 4.7 with sharper judgment, more honesty about its own progress, and the ability to work independently for longer than its predecessors.

Available today at the same price.

[joce @StackOverJoce]

@ChacalRiven @RomainNextGen Je fait le même (non)

[joce @StackOverJoce]

@Embragone @maff54 Simple : prévenez que trainer trop = pas d’histoire et tenez vous y. Ce sera dur la première fois mais voyez ça comme un investissement. Les fois suivante : « si tu traines pas d’histoires comme la dernière fois ». Si trainer n’a aucune conséquence pourquoi s’en priverait elle ?

[Harsh Jaiswal @rootxharsh]

When Your VPN Opens Your Private Network to the Public!

An auth bypass in Palo Alto PAN-OS CAS Auth (CVE-2026-0265) that lets an attacker connect to the company's GlobalProtect VPN.

Blog - https://t.co/xMBbKC60NZ

[andrew engler @aerockrose]

Steve Ballmer reveals the interview test Microsoft used to separate problem-solvers from gamblers:

"I'm thinking of a number between 1 and 100. First guess, I give you $5. Then $4, $3, $2, $1. After that, you pay me."

"There are far more numbers on which you lose than win."

[joce @StackOverJoce]

@Boumboumfr @JulienRAVIA Le droit matériel à quand même certaines cocasseries pas piqué des hannetons

[Het Mehta @hetmehtaa]

my company got breached

the attacker had access for 11 days

on day 3 he emailed our IT helpdesk
complained that the VPN was slow

our helpdesk reset his password
upgraded his access tier to fix the "connectivity issue"

and closed the ticket as resolved

CSAT score: 5 stars

we found this in the logs during forensics

the attacker had rated our IT support
excellent

[Mom @mom_agency_]

Claude's first day at Dunder Mifflin

[Clandestine @akaclandestine]

🚨 Critical Linux Kernel Vulnerability Alert
Qualys has disclosed ssh-keysign-pwn: a 6-year race condition in __ptrace_may_access() that lets unprivileged local users read root-owned files.
A privileged process (e.g. ssh-keysign or chage) opens sensitive FDs. During do_exit(), after exit_mm() (mm=NULL) but before exit_files(), pidfd_getfd() can steal those FDs.
Impact: • Theft of host SSH private keys → real impersonation & MitM risk until keys are rotated
• Full read access to /etc/shadow → offline password cracking
Affected: All kernels before 31e62c2ebbfd (May 14, 2026) — Ubuntu, Debian, Arch, CentOS, Raspberry Pi OS and more.
Immediate action required: Apply the kernel patch NOW.
🔗 PoC: https://t.co/UZJyKb6Szj
🔗 Patch: https://t.co/rNU2YB4mVv…/31e62c2ebbfd
🔗 Full analysis: Phoronix & Qualys oss-security
#LinuxSecurity #KernelVulnerability #CyberSecurity #InfoSec #OpenSSH #PrivilegeEscalation #ThreatIntelligence #Linux #CyberThreat #PatchNow

[Unworthy Hand @kisstheblade_]

The french are a tolerant, broad-minded people, but they will not forgive a president for the crime of not fucking his mistress.

[Noah @NoahKingJr]

"We used to review every line of code before it went into production"

[Yves "Yorzian" Rougy @yrougy]

Vous avez aimé https://t.co/xI0nsJAGrq une veille de jour férié? Vous allez sans doute adorer dirtyfrag, une veille de jour férié.
Encore une Local Privilege Escalation 0Day sous Linux. Ça fonctionne sous plusieurs machines que j'ai essayées
https://t.co/sH9b1aaxeq