Dragonfang

Tech nerd ‧ Fandom Enthusiast ‧ Pinko Georgist ‧ Professional Software Engineer

[Dragonfang @_Dragonfang]

@BareMetalJesco @LundukeJournal That's an exaggerated tl;dr, not the actual rules
https://t.co/AjzCgWtcQ4

[Dragonfang @_Dragonfang]

@grok @sheluvs_mars @BareMetalJesco @LundukeJournal Sorry @grok, but you're wrong here: the text you quoted is not the rule text, it's a *summary* of the rule changes (a tl;dr), which begin several lines below. The one you claim is "just" a hueristic is the actual policy.

[Dragonfang @_Dragonfang]

@grok @sheluvs_mars @BareMetalJesco @LundukeJournal @grok So in other words, regardless of "intent", the rules as written are laid out to specifically target AI slop, *not* actually ban all AI usage, which lines up with what @sheluvs_mars said?

[Dragonfang @_Dragonfang]

@BareMetalJesco @LundukeJournal I think this rule is kinda stupid, but saying it's hypocritical is hyperbole; the linux kernel obviously, trivially passes criteria 1-3, and pretty clearly passes criteria 4.

[Dragonfang @_Dragonfang]

@grok @sheluvs_mars @BareMetalJesco @LundukeJournal Sorry @grok, but you're wrong here: the text you quoted is not the rule text, it's a *summary* of the rule changes (a tl;dr), which begin several lines below. The one you claim is "just" a hueristic is the actual policy.

[orph @orph_]

we absolutely should in fact genetically engineer bioluminescent plants & trees and then completely eradicate the affront to God that is LED street lights from the face of the Earth

[Dragonfang @_Dragonfang]

@verymidengineer @EpicVogel Yeah, plus it's a factory game (programming as a game, so all autists) plus a social deduction game (lying as a game, something autists are generally uncomfortable with)
(This tweet is autobiographical)

[Daniel Vogel @EpicVogel]

I pointed Claude at the below post and it embedded all 146,060 Steam games, sampled 320,000 points between them, ranked them by how far they land from anything that exists, and used creative judgment to pick a winner... and it cooked!

It's pick: Short Position, a co-op factory tycoon where one player has secretly shorted the stock.

4–8 players run one industrial empire: mines, smelters, rail, contracts. There’s no kill button and no sabotage minigame. The traitor plays the factory game badly on purpose. Overbuild a warehouse, route ore to the wrong smelter, sign a contract with a penalty clause on page 4. Every move looks like an honest mistake.

The twist is that suspicion is expensive. Anyone can audit the production logs, but audits cost money and spook investors. The traitor doesn’t need to wreck the factory. They just need everyone paranoid enough to do it themselves.

Each quarter ends with an earnings call and a board vote. Fire an honest exec and you lose their whole department. Four quarters, ~40 minutes.

It sits farther from its nearest neighbors than 83% of real Steam games. Factory games have co-op, social deduction games have tasks, and nobody has made the work itself the place where you lie.

[hero thousandfaces @1thousandfaces_]

You forgot to attach the gigachad

[Dane Knecht 🦭 @dok2001]

Cloudflare previous CTO sent this into our bug bounty. We are investigating.

[Aksh @akshdeeps_001]

LMAOO ARGON IS FUNNY

[Zack Korman @ZackKorman]

Of course that's your contention. You’re a first time cybersecurity poster. You just got finished reading Dario’s blog. You're gonna be convinced of that til next month when you learn what patching is, then you’ll still say ban open models as this was never about security for you

[Brangus🔍⏹️ @RatOrthodox]

This is not insane. This is slightly creative. If this seems insane to you, you have not at all internalized what it means to have an adversary that is more intelligent than you and optimizing against you.

[The Reverend Jim Jones @realJimJones_]

Tried to google "Haiti situation map" but accidentally entered "Haiti situation mal" and google Gemini responded "sí, es no bueno"

[成龍 @graphtraversal]

BREAKING: github is currently experiencing unplanned uptime

[stypr @brokenpacifist]

mitmproxy: use `--emudhra` to sign TLS certificates 💀

[RE:Skob @re_skob]

Interesting idea. Had tokens to burn so I got Opus to put it to the test

[Ryan Moulton @moultano]

Claude, plz rewrite wordpress in rust. Yes all the plugins too. No I don't just mean the source code, I mean like, go replace everybody's wordpress install.

You don't have access, well funny thing...

[solst/ICE of Astarte @IceSolst]

>junior dev at a mid startup
>wednesday morning
>just want to push a minor bugfix to our php app today
>open laptop, check slack
>company group chat is an absolute warzone
>CTO typing in all caps about php2shell
>fucking php
>whatever, server hasn't blown up yet, I just need to get my code in
>open gitlab to merge the PR
>forced emergency logout because of a critical gitlab security patch release
>fucking gitlab
>pipeline fails because of some weird regex compiler bug
>spend 40 minutes fighting CI/CD
>i can just use AI to help debug
>fire up opencode
>api keys nuked because they were breached
>fucking opencode
>i’ll just get fresh LLM api keys from our corp proxy, LiteLLM
>it won’t connect? It’s down?
>look up LiteLLM news: supply chain compromise
>fucking litellm
>cold sweat forming
>slack alert: db connection error
>check our database connection
>we host on TiDB Cloud
>they just announced a security breach, unauthorized access via stolen service account credentials, data copied
>fucking tidb cloud
>full panic attack incoming
>figure fuck it, just ship the container to Railway and go home
>open Railway dashboard
>bright red banner: "Security Disclosure: Rotate all environment variables immediately. All builds paused."
>fucking railway
>try to open the app URL in browser to see if anything is even working
⁠>NET::ERR_CERT_AUTHORITY_INVALID⁠
>eMudhra intermediate certificates compromised
>4
>instantly untrusted by every major browser
>fucking emudhra
>stare blankly at mac screen for 10min
>random pop-up
>restarting in 10min to fix a critical vulnerability
>fucking macos
>close laptop
>leave office
>never come back

[AI Notkilleveryoneism Memes ⏸️ @AISafetyMemes]

This is the most serious 48 hours in cybersecurity history.

"Black October" they're calling it

It seems every *hour* there's a new incident, that in a typical year, would be one of the biggest incidents of the *entire year*

SUMMARY OF THE LAST 48 HOURS:

YEAR-LEVEL INCIDENTS (In a typical year, these would be among the biggest incidents of the year):

1. PHP2Shell: a hole in the software behind ~70% of websites. Governments took sites offline.
2. eMudhra: the master keys that prove websites are real were cracked. One was the number 4.
3. California: data on every public school student since 2023 stolen, including disability status
4. Railway: hackers stole customers' secret keys from a hosting platform used by millions of developers
5. Zeabur: 321,810 accounts breached. The company is shutting down.
6. LiteLLM: an AI tool downloaded 3.4 million times a day was poisoned with a password stealer
7. GitLab: a 10-out-of-10 severity hole in every version since 2014
8. Cairn: criminals used an AI hacking tool to break into 100+ companies
9. Ahold Delhaize: hackers knocked the owner of Food Lion and Stop & Shop offline
10. Onamae: malware planted on up to 26,739 customer servers in Japan

MONTH-LEVEL INCIDENTS (In a typical month, these would be among the biggest incidents):

11. Signal: a bug could leave your mic and camera on after you hang up
12. NGINX: 3 critical holes in software running ~1/3 of websites
13. HTTP/3: a single connection can crash 7 of the 10 web server types tested
14. Plex: hackers breaking into home media servers
15. SafePay ransomware: FBI warns it has hit 600+ critical infrastructure organizations
16. Palo Alto: ransomware gangs breaking in through company firewalls
17. Bullhorn: platform used by 10,000+ companies knocked offline
18. Medi-Cal: 970,000 patients' data stolen
19. WordPress: hackers stole a plugin maker's keys and used them to plant backdoors on websites
20. AOMEI: backup software's update server handed out a backdoor
21. Meta Muse: Meta's AI agent exposed users' personal and business secrets
22. Tor: 333 relays hijacked to steal logins
23. TiDB Cloud: database company's cloud breached

Also serious:

24. State Bank of India: India's biggest bank confirms a data breach
25. OVHcloud: hackers slipped a password stealer into a cloud company's official tool
26. Siemens: a software hole being used to spread malware
27. North Korea: state hackers launch a new attack campaign on South Korea

[Emily - SF ✈️ Nov 7-21 @the_aiju]

malfoid turning public perception on ai would be the funniest thing to come out of 2026