lncdeʍ

Software engineer interested in many different topics such as programming languages, frameworks and practices, security and crypto, cloud, architecture, AI

[Dividend King 👑 @Divs_King]

Je pense que vous le savez si vous me suivez depuis assez longtemps : je suis d’un naturel très optimiste,

Et je pense très sincèrement que c’est une qualité essentielle pour tout investisseur.

Mais je ne vous cache pas que l’accumulation de signaux négatifs et l’accélération de ces derniers commencent de plus en plus à m’inquiéter quant au devenir de la France.

Au point que je commence sérieusement à songer à finir de déplacer hors du pays le peu d’actifs qu’il me reste ici (Livret A, compte courant, etc…)

Le taux des OAT explose, le spread avec l’Allemagne se creuse, combiné à un déficit public qui n’arrive même pas à repasser sous les 5%,

La croissance est totalement à l’arrêt, l’inflation repart, le chômage explose, la colère monte de manière significative et aucun responsable politique actuel ou à venir ne me semble être à la hauteur de l’enjeu.
Pire, certains ont toutes les chances d’accélérer la catastrophe avec un programme économique digne d’un élève de primaire.

La majorité des créateurs de valeur et des propriétaires de capital n’ont désormais plus qu’une idée en tête : quitter le pays. Je n’ai jamais vu un mouvement d’une telle ampleur dans mon cercle de connaissances, proche comme moins proche, c’est sidérant.

Et même les jeunes talents sortis d’école ne voient désormais plus leur avenir ici. Il y a d’ailleurs désormais davantage de startups créées aux US par des Français qu’en France.

Et je ne parle même pas de tous les ratios annexes qui continuent de se dégrader, notamment la dégringolade du niveau d’éducation des jeunes Français dans le classement PISA,

Ce qui est, selon moi, purement et simplement catastrophique comme data.

Pour être tout à fait transparent, si ma fille ne venait pas de commencer une nouvelle année scolaire, je pense que j’aurais très sérieusement songé à accélérer l’expatriation.

Et comme d’habitude, mes recommandations restent toujours les mêmes :

• ne dépendez pas de l’État français sur le plan financier,

• ne quittez pas votre emploi sans en avoir un nouveau sous le coude,

• n’ayez pas tout votre patrimoine exposé à l’€ et à la France. Achetez des actifs en USD et préférez le CHF à l’€ pour vos liquidités.

• évitez les actifs qui subiraient de plein fouet une crise majeure (oblig FR, actions de sociétés bancaires, etc…)

• et méfiez-vous des comptes sur lesquels l’État a trop de pouvoir (assurance vie, compte courant, livrets bancaires, etc…)

Je ne pense pas que l’Europe laissera la France sombrer, au risque d’avoir une contagion massive sur toute la zone €,

Mais si un plan de sauvetage venait à être déclenché, celui-ci serait terrible pour absolument tous les Français, nous serions tous perdants. Et pas qu’un peu.

Pas de quoi céder à la panique,

Mais préparez-vous quand même au choc inévitable qui finira par arriver.

Et ce qui me rend le plus triste dans tout ça,

C’est que 90% des Français, au bas mot, ne se rendent même pas compte du désastre de la situation actuelle,

Ils se prendront très probablement la tempête en pleine face, sans même avoir eu le temps de pouvoir se mettre à l’abri.

[Jeff Dean @JeffDean]

Tomorrow will be my last day at Google after 27 years, and watching it grow from 25 people to 190,000+ has been an amazing journey. Below is a note I shared with many people internally at Google today. An excerpt is:

It has been an absolute pleasure to work with you and to help build some of the most widely used and impactful products of all time. As a kid, I dreamed of helping build software that would be used by many people, and Google now has thirteen products used by more than a billion people (amazing!). Our work has had a tremendous impact in the world, and I have been lucky enough to collaborate and form friendships with many colleagues that I deeply admire, respect, and enjoy. It still brings me joy every time I see people out in the world using our products to find information, handle email, translate documents, watch videos, learn new things, navigate and understand the physical world, browse the web, use their phone, run large-scale computations on our infrastructure, ride in an autonomous vehicle, or perform complex tasks with the help of our AI systems. I hope you all share this sense of joy, because it is a shared accomplishment! Thank you to all of my colleagues at Google over many years!

Now I'm excited to go start @DiscoLoopAI with my longtime friends and colleagues @Sanjay_Ghemawat, @OriolVinyalsML, and @quocleix.

(Updated post: slightly redacted to not have some personal info)

[OnlMaps @onlmaps]

Europe travel advice by the Australian government

[Phil Eaton @eatonphil]

Jobs at AWS in databases gets its own homepage

[Ivan Velichko @iximiuz]

Apparently, VMs and microVMs aren't safer than containers this week - at least those that expose /dev/kvm to the untrusted guest OS.

A new guest-to-host breakout was disclosed on July 6, and most downstream kernels haven't been patched yet. Temporarily disabled nested virt in iximiuz Labs playgrounds as a mitigation.

Links:

- https://t.co/uhbxsEpDdU
- https://t.co/lkkCqe0quU
- https://t.co/c4ZPAkeAv2

[DHH @dhh]

Chat control in the EU, VPN restrictions in the UK. All in service of ensuring that the natives don't dare critique the regimes online. When the Brits and the rest of Europe has finally had enough of this, it'll be an explosive moment.

[Frank @jedisct1]

Je n’en peux plus de l’URSSAF. Pas étonnant que plus personne ne veuille entreprendre en France. 2 ans que j’essaie en vain de changer de status. Je vais cesser mon activité et abandonner tous mes projets. Et même ça risque d’être une galère.

[dog ⏪ @a_musingcat]

accelerate

[Boris Cherny @bcherny]

You asked, we listened. Claude Desktop on Linux is here!

Download link: https://t.co/gjgHZvbKyi

[Gap | Suby @gaspardlezin]

France is hardcore mode for founders:

• Pay an employee $5K net → costs you $13K
• Make profit → 30% corporate tax
• Succeed → public calls you an exploiter
• Get famous → kidnapping becomes a real threat

No other country stacks the difficulty this high.

[Jarred Sumner @jarredsumner]

Bun v1.3.14 releases tomorrow.

If we do merge the Rust rewrite, this would be the last version in Zig

[International Cyber Digest @IntCyberDigest]

‼️🚨 BREAKING: An AI found a Linux kernel zero-day that roots every distribution since 2017. The exploit fits in 732 bytes of Python. Patch your kernel ASAP.

The vulnerability is CVE-2026-31431, nicknamed "Copy Fail," disclosed today by Theori. It has been sitting quietly in the Linux kernel for nine years.

Most Linux privilege-escalation bugs are picky. They need a precise timing window (a "race"), or specific kernel addresses leaked from somewhere, or careful tuning per distribution. Copy Fail needs none of that. It is a straight-line logic mistake that works on the first try, every time, on every mainstream Linux box.

The attacker just needs a normal user account on the machine. From there, the script asks the kernel to do some encryption work, abuses how that work is wired up, and ends up writing 4 bytes into a memory area called the "page cache" (Linux's high-speed copy of files in RAM). Those 4 bytes can be aimed at any program the system trusts, like /usr/bin/su, the shortcut to becoming root.

Result: the next time anyone runs that program, it lets the attacker in as root.

What should worry most: the corruption never touches the file on disk. It only exists in Linux's in-memory copy of that file. If you imaged the hard drive afterwards, the on-disk file would match the official package hash exactly. Reboot the machine, or just put it under memory pressure (any normal system load that needs the RAM), and the cached copy reloads fresh from disk.

Containers do not help either. The page cache is shared across the whole host, so a process inside a container can use this bug to compromise the underlying server and reach into other tenants.

The original sin was a 2017 "in-place optimization" in a kernel crypto module called algif_aead. It was meant to make encryption slightly faster. The change broke a critical safety assumption, and nobody noticed for nine years. That bug then rode every kernel update from 2017 to today.

This vulnerability affects the following:
🔴 Shared servers (dev boxes, jump hosts, build servers): any user becomes root
🔴 Kubernetes and container clusters: one compromised pod escapes to the host
🔴 CI runners (GitHub Actions, GitLab, Jenkins): a malicious pull request becomes root on the runner
🔴 Cloud platforms running user code (notebooks, agent sandboxes, serverless functions): a tenant becomes host root

Timeline:
🔴 March 23, 2026: reported to the Linux kernel security team
🔴 April 1: patch committed to mainline (commit a664bf3d603d)
🔴 April 22: CVE assigned
🔴 April 29: public disclosure

Mitigation: update your kernel to a build that includes mainline commit a664bf3d603d. If you cannot patch immediately, turn off the vulnerable module:

echo "install algif_aead /bin/false" > /etc/modprobe.d/disable-algif.conf
rmmod algif_aead 2>/dev/null || true

For environments that run untrusted code (containers, sandboxes, CI runners), block access to the kernel's AF_ALG crypto interface entirely, even after patching. Almost nothing legitimate needs it, and blocking it shuts the door on this whole class of bug...

[Mitchell Hashimoto @mitchellh]

Ghostty is leaving GitHub. I'm GitHub user 1299, joined Feb 2008. I've visited GitHub almost every single day for over 18 years. It's never been a question for me where I'd put my projects: always GitHub. I'm super sad to say this, but its time to go. https://t.co/DQDemHdytV

[Pavel Durov @durov]

41 kidnappings of crypto holders in France in 3.5 months of 2026.

Why?

🥖 French tax officials selling crypto owners' data to criminals (Ghalia C.) + massive tax database leaks.

Now the state also wants IDs and private messages of social media users.

More data = More victims.

[Christophe Boutry @Ced_haurus]

🚨 L'ANTS - Agence Nationale des Titres Sécurisés (@FranceTitres) en France annonce avoir subie une cyberattaque en date du 15 avril !

En charge de la gestion en autre des cartes d'identité et passeports des citoyens Français, c'est une fuite de données extrêmement grave.

Une annonce sur un forum cybercriminel fait état de 19 millions d'enregistrements en vente.

Sont concernées :
- Données d'état civil
- Identifiants de connexion
- N° d’habilitation et/ou d'agrément
-Autres données types adresse et téléphone.

[Chaofan Shou @shoucccc]

Claude code source code has been leaked via a map file in their npm registry!

Code: https://t.co/jBiMoOzt8G

[Feross @feross]

🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages.

The latest [email protected] now pulls in [email protected], a package that did not exist before today. This is a live compromise.

This is textbook supply chain installer malware. axios has 100M+ weekly downloads. Every npm install pulling the latest version is potentially compromised right now.

Socket AI analysis confirms this is malware. plain-crypto-js is an obfuscated dropper/loader that:

• Deobfuscates embedded payloads and operational strings at runtime
• Dynamically loads fs, os, and execSync to evade static analysis
• Executes decoded shell commands
• Stages and copies payload files into OS temp and Windows ProgramData directories
• Deletes and renames artifacts post-execution to destroy forensic evidence

If you use axios, pin your version immediately and audit your lockfiles. Do not upgrade.

[Rach @rachpradhan]

We replaced urllib3 inside boto3 with a Zig HTTP client.

One import line. Same API. Upto 115x faster with TurboAPI.

import faster_boto3 as boto3

Here's what happened..

[Pirat_Nation 🔴 @Pirat_Nation]

The Arch Linux 32 project (a volunteer-maintained 32-bit fork of Arch Linux) announced it was geo-blocking Brazilian IP addresses to avoid compliance with Brazil's newly enacted ECA Digital law.

This law mandates auditable age verification for digital services potentially accessible by minors, including operating systems.

[🄰🄸と🄳ㄜƕ™ 𓃙 ᴅɪᴍᴇɴsɪᴏɴᴡᴏʀᴋs ʟʟᴄ @dimensionsworks]

Claude Codeのインシデントきたきた

Claude Opus 4.6 でエラー増加

新しいインシデント：原因特定済み

問題はすでに特定されており、
現在修正が実装されているところです。

じゃあおーぱすじゃなければいけるかな