reported a chrome fullchain (web -> shell) on pixel 10 to google. got a 9.6 cve (cve-2026-87464) and a fix in chrome.
now they bend the rules and refuse to pay the fullchain bonus bc one of the vulns in the chain was an unpatched nday. total payout: $2.5k. despite cve + shell :|
google is locking down public (unauthenticated) access to chromium-adjacent resources, no clue why, but this may potentially be very bad for anyone who works with chromium.
earlier today i couldn't pull chromium source via gsync from googlesource due to timeouts and rate limit errors, only managed to do it after several retries. tarball source releases have been broken for weeks, so cloning is the only way to get fresh chromium source code right now.
Ok this is getting ridiculous at this point @namecheap sorry I haven’t contacted you yet WHY THE FUCK DID YOU BILL ME AGAIN FOR ANOTHER DOMAIN I HAVE TURNED OF RENEWALs is this your fucking business model? Renewing domains THAT HAVE RENEWALs OFF?
davinci-002 is shutting down September 28th. in honor of it, i had Astra make a chatgpt Site recreating the experience that started it all
it uses my api key, just need to login w/ your openai account
what a legendary time it was. new people, this is how we had to use ai
@vercel This is so annoying I want to move off your platform.
(note this repo is from an org, which my free account CANNOT ADD)
and yes I know I can stop it by clicking on the small text below, but WHY IS THIS TURNED ON BY DEFAULT?
We will give one banked reset for every day you don't have access to Astra on your paid ChatGPT plan, starting today. Team is moving mountains to give access as fast as we can.
First one will land in ~ 3 hours. There is still time to create your account if you don't have one.
UTM v5.0.5 beta is out with support for DirectX 12! UTM is the first virtualization software for macOS that can run Windows 11 with FL 12_1. Your move @parallels@VMware
🚨BREAKING: the stealth model Ox Alpha is https://t.co/0H6NxhUIyh (Zhipu)
everyone else is guessing it from tokenizer vibes and emoji rates. i made the server say its own name out loud.
sent it one malformed request and it threw a java stack trace naming its own internal class:
https://t.co/lmGA1novUD.ChatCompletionRequest
paas/v4/chat = Zhipu's documented route /api/paas/v4/chat/completions
thats not a fingerprint guess. thats the server confessing. proven at the serving layer, confidence 0.98.