Why are there so many CPU bugs nowadays(mas.to)

20 points by riffraff 9 months ago | 6 comments

10% of Firefox crashes are caused by bitflips(mas.to)

845 points by marvinborner 7 months ago | 435 comments

Mastodon thread by Mozilla engineer Gabriele Svelto describing data from Firefox crash reports showing many crashes stem from bit-flips caused by bad memory or flaky hardware.

Linux Zoom client proactively reading everything written to X11 clipboard(hachyderm.io)

341 points by encyclopedism 1 month ago | 112 comments

Mastodon post by Simon Tatham reporting that an update to the Linux Zoom client makes it proactively read everything written to the X11 clipboard.

It's Not the End of Programming(mathstodon.xyz)

31 points by boris_m 2 months ago | 36 comments

Two ARM64-specific compiler optimization bugs, in GCC 15/16 and Rust, hit curl(mastodon.social)

44 points by torutofu 20 days ago | 5 comments

Mastodon post by Daniel Stenberg noting curl hit two arm64-specific compiler optimization bugs in GCC 15/16 and Rust, linking a GitHub issue.

US national level OS-level age verification bill(social.coop)

94 points by marvinborner 6 months ago | 71 comments

Curl: We still have not seen a valid security report done with AI help(linkedin.com)

336 points by indigodaddy 1 year ago | 180 comments

LinkedIn post by curl lead Daniel Stenberg announcing that curl will ban reporters submitting AI-generated security reports, noting none so far have been valid.

Curl-Impersonate(github.com)

395 points by jakeogh 1 year ago | 101 comments

GitHub repository for an actively maintained fork of curl-impersonate, a curl build that mimics browser TLS/HTTP fingerprints, adding more browser versions and build targets.

Mythos Finds a Curl Vulnerability(daniel.haxx.se)

587 points by TangerineDream 5 months ago | 245 comments

Daniel Stenberg's blog post about the AI tool Mythos finding a security vulnerability in curl.

cURL removes bug bounties(etn.se)

373 points by jnord 9 months ago | 206 comments

Elektroniktidningen news article reporting that the cURL project is ending its bug bounty program.

GitHub is investigating unauthorized access to their internal repositories(twitter.com)

527 points by splenditer 5 months ago | 289 comments

A post on X from GitHub stating it is investigating unauthorized access to its internal repositories, with no current evidence of impact to customer data.

We used an AI agent to fix an open-source bug. Someone asked to ban us(github.com)

9 points by maxcr 1 month ago | 2 comments

A GitHub pull request to the VisiData project submitted using an AI agent to fix a bug, which drew a request to ban the contributors.