Tag: practices

  • Wired: Vibe Coding Is the New Open Source—in the Worst Way Possible

    Source URL: https://www.wired.com/story/vibe-coding-is-the-new-open-source/ Source: Wired Title: Vibe Coding Is the New Open Source—in the Worst Way Possible Feedly Summary: As developers increasingly lean on AI-generated code to build out their software—as they have with open source in the past—they risk introducing critical security failures along the way. AI Summary and Description: Yes Summary: The text…

  • Slashdot: Are Software Registries Inherently Insecure?

    Source URL: https://developers.slashdot.org/story/25/10/05/2318202/are-software-registries-inherently-insecure?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Are Software Registries Inherently Insecure? Feedly Summary: AI Summary and Description: Yes Summary: The text discusses the persistent issues related to software supply chain attacks, emphasizing weaknesses in the design of software registries like npm, PyPI, and Docker Hub. It highlights how inadequate safeguards allowed for multiple registry breaches…

  • Slashdot: Signal Braces For Quantum Age With SPQR Encryption Upgrade

    Source URL: https://it.slashdot.org/story/25/10/03/234236/signal-braces-for-quantum-age-with-spqr-encryption-upgrade?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Signal Braces For Quantum Age With SPQR Encryption Upgrade Feedly Summary: AI Summary and Description: Yes Summary: Signal’s introduction of the Sparse Post Quantum Ratchet (SPQR) marks a significant enhancement in encryption protocols, incorporating quantum-resistant cryptography into its messaging platform. This upgrade, called the Triple Ratchet, is designed to…

  • Slashdot: Google Confirms Android Dev Verification Will Have Free and Paid Tiers, No Public List of Devs

    Source URL: https://developers.slashdot.org/story/25/10/03/2027237/google-confirms-android-dev-verification-will-have-free-and-paid-tiers-no-public-list-of-devs?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: Google Confirms Android Dev Verification Will Have Free and Paid Tiers, No Public List of Devs Feedly Summary: AI Summary and Description: Yes Summary: The text discusses Google’s upcoming changes in Android 16 regarding app installation and verification, underscoring increased reliance on cloud-based processes and potential costs for developers.…

  • The Register: Red Hat fesses up to GitLab breach after attackers brag of data theft

    Source URL: https://www.theregister.com/2025/10/03/red_hat_gitlab_breach/ Source: The Register Title: Red Hat fesses up to GitLab breach after attackers brag of data theft Feedly Summary: Open source giant admits intruders broke into dedicated consulting instance, but insists core products untouched What started as cyber crew bragging has now been confirmed by Red Hat: someone gained access to its…

  • The Register: AI devs close to scraping bottom of data barrel

    Source URL: https://www.theregister.com/2025/10/03/ai_training_requires_more_data/ Source: The Register Title: AI devs close to scraping bottom of data barrel Feedly Summary: Analysts at Goldman Sachs Global Institute say training is starting to hit its limits, enterprise info troves may be last hope Those spiffy AI systems that tech companies keep promising require mountains of training data, but high-quality…

  • The Register: Oracle tells Clop-targeted EBS users to apply July patch, problem solved

    Source URL: https://www.theregister.com/2025/10/03/oracle_ebs_clop_extortion/ Source: The Register Title: Oracle tells Clop-targeted EBS users to apply July patch, problem solved Feedly Summary: Researchers suggest internet-facing portals are exposing ‘thousands’ of orgs Oracle has finally broken its silence on those Clop-linked extortion emails, but only to tell customers what they already should have known: patch your damn systems.……

  • The Register: Criminals take Renault UK customer data for a joyride

    Source URL: https://www.theregister.com/2025/10/03/renault_uk_customer_data_breach/ Source: The Register Title: Criminals take Renault UK customer data for a joyride Feedly Summary: Names, numbers, and reg plates exposed in latest auto industry cyber-shunt Renault UK customers are being warned their personal data may be in criminal hands after one of its supplier was hacked.… AI Summary and Description: Yes…

  • Simon Willison’s Weblog: Sora 2 prompt injection

    Source URL: https://simonwillison.net/2025/Oct/3/cameo-prompt-injections/ Source: Simon Willison’s Weblog Title: Sora 2 prompt injection Feedly Summary: It turns out Sora 2 is vulnerable to prompt injection! When you onboard to Sora you get the option to create your own “cameo" – a virtual video recreation of yourself. Here’s mine singing opera at the Royal Albert Hall. You…