Jade (@JadedBlueEyes@tech.lgbt)
Cloudflare caught doing... not great things, and it seems that (surprise face!) AI was at the heart of it.
Vibe coder's gonna vibe code.
The end of the curl bug-bounty
AI has caused curl to end its bug bounty programme.
Critical Security Vulnerability in React Server Components – React
React doing React things...
Open Source Insights
Handy site, backed by Google, that lets you dive into packages from different ecosystems and see what they depend on and what depends on them, etc.
securityJustInterferesWithVibes : r/ProgrammerHumor
Poe's law kicks in around here, of course, but this feels very on-brand for what vibe-coding is all about and what it can result in.
The Open Source Foundation for Application Security
All things software security.
A Microcosm of the interactions in Open Source projects
Some background on how the xz backdoor situation arose.