Today in InfoSec Job Security News:
Uncategorized
144
Posts
111
Posters
11
Views
-
Today in InfoSec Job Security News:
I was looking into an obvious ../.. vulnerability introduced into a major web framework today, and it was committed by username Claude on GitHub. Vibe coded, basically.
So I started looking through Claude commits on GitHub, there’s over 2m of them and it’s about 5% of all open source code this month.
https://github.com/search?q=author%3Aclaude&type=commits&s=author-date&o=desc
As I looked through the code I saw the same class of vulns being introduced over, and over, again - several a minute.
@GossiTheDog that’s quite a bit lower than I would have expected
-
Today in InfoSec Job Security News:
I was looking into an obvious ../.. vulnerability introduced into a major web framework today, and it was committed by username Claude on GitHub. Vibe coded, basically.
So I started looking through Claude commits on GitHub, there’s over 2m of them and it’s about 5% of all open source code this month.
https://github.com/search?q=author%3Aclaude&type=commits&s=author-date&o=desc
As I looked through the code I saw the same class of vulns being introduced over, and over, again - several a minute.
@GossiTheDog So Claude is "Jia Tan as a Service"?
-
@GossiTheDog @deliberately_me oh goodie. Our global repository has been compromised by a worm.
@GossiTheDog @deliberately_me or actually a nearly infinite number of worms.
-
Today in InfoSec Job Security News:
I was looking into an obvious ../.. vulnerability introduced into a major web framework today, and it was committed by username Claude on GitHub. Vibe coded, basically.
So I started looking through Claude commits on GitHub, there’s over 2m of them and it’s about 5% of all open source code this month.
https://github.com/search?q=author%3Aclaude&type=commits&s=author-date&o=desc
As I looked through the code I saw the same class of vulns being introduced over, and over, again - several a minute.
@GossiTheDog Is Claude a real person
-
Today in InfoSec Job Security News:
I was looking into an obvious ../.. vulnerability introduced into a major web framework today, and it was committed by username Claude on GitHub. Vibe coded, basically.
So I started looking through Claude commits on GitHub, there’s over 2m of them and it’s about 5% of all open source code this month.
https://github.com/search?q=author%3Aclaude&type=commits&s=author-date&o=desc
As I looked through the code I saw the same class of vulns being introduced over, and over, again - several a minute.
@GossiTheDog Holy yikes.
-
Today in InfoSec Job Security News:
I was looking into an obvious ../.. vulnerability introduced into a major web framework today, and it was committed by username Claude on GitHub. Vibe coded, basically.
So I started looking through Claude commits on GitHub, there’s over 2m of them and it’s about 5% of all open source code this month.
https://github.com/search?q=author%3Aclaude&type=commits&s=author-date&o=desc
As I looked through the code I saw the same class of vulns being introduced over, and over, again - several a minute.
@GossiTheDog may this boost contribute to the fall of the AI bubble
-
@GossiTheDog protip, go to https://github.com/claude and click on Block User and you will see a helpful warning banner on any github repo that contains code from it.
@joeyh @GossiTheDog having checked this, i'm finding that on various repos it gets listed as having contributed, but then seemingly doesn't show up in any commits, issues or prs when you search for it. what's going on?
-
Today in InfoSec Job Security News:
I was looking into an obvious ../.. vulnerability introduced into a major web framework today, and it was committed by username Claude on GitHub. Vibe coded, basically.
So I started looking through Claude commits on GitHub, there’s over 2m of them and it’s about 5% of all open source code this month.
https://github.com/search?q=author%3Aclaude&type=commits&s=author-date&o=desc
As I looked through the code I saw the same class of vulns being introduced over, and over, again - several a minute.
@GossiTheDog it's been fun digging through this pile of shit
-
Today in InfoSec Job Security News:
I was looking into an obvious ../.. vulnerability introduced into a major web framework today, and it was committed by username Claude on GitHub. Vibe coded, basically.
So I started looking through Claude commits on GitHub, there’s over 2m of them and it’s about 5% of all open source code this month.
https://github.com/search?q=author%3Aclaude&type=commits&s=author-date&o=desc
As I looked through the code I saw the same class of vulns being introduced over, and over, again - several a minute.
@GossiTheDog I wish more of these fucking vibe coding agent bullshits used the co-authored-by tag, so that
- I can block them
- you can search for shit like this
-
@GossiTheDog
This is more and more feels like a coordinated attack on FOSS by the big software.@hittitezombie @GossiTheDog I could totally see that. Like they're trying to get this Claude to mess up the FOSS projects' code enough that it'll force some people back into the arms of Big Software.
-
@zarchasmpgmr @da_667 @GossiTheDog Or msybe introduce 20 vulnerabilities and show off by then finding 10 of them giving a false sense of competence.
@cxj @zarchasmpgmr @da_667 @GossiTheDog 2016 AI thinkers: AI cannot possibly take over the world, because there just aren't enough security holes to give you root on all nuclear submarines in 30 seconds
2026 AI thinkers: hey AI, can you add security holes to my nuclear submarines?
-
Today in InfoSec Job Security News:
I was looking into an obvious ../.. vulnerability introduced into a major web framework today, and it was committed by username Claude on GitHub. Vibe coded, basically.
So I started looking through Claude commits on GitHub, there’s over 2m of them and it’s about 5% of all open source code this month.
https://github.com/search?q=author%3Aclaude&type=commits&s=author-date&o=desc
As I looked through the code I saw the same class of vulns being introduced over, and over, again - several a minute.
Oh, man. Oh, oh, oh.
But as soon as somebody blocks every PR from AI or created with AI support the wailing starts.
-
@joeyh @GossiTheDog having checked this, i'm finding that on various repos it gets listed as having contributed, but then seemingly doesn't show up in any commits, issues or prs when you search for it. what's going on?
@0x9E01 @GossiTheDog I've seen in it a repo that had only Co-Authored-By: Claude, which a usual commit search won't find.
It may also flag repos that have a PR that got edited by the bot along the way, I'm not sure.
-
undefined swelljoe@mas.to shared this topic
Gli ultimi otto messaggi ricevuti dalla Federazione
-
Beth Humphreys 🌺 (@producrgrl.bsky.social)
https://bsky.app/profile/producrgrl.bsky.social/post/3mezlpwlqhs2s
> #handsoff #nokings #ReleaseALLthefiles #EpsteinFiles #lovemyGov #itsthefuckingguns #midterms26 #getridofElectoralCollege #TheEpsteinBallroom #blackhistorymonth Release ALL the files NOW 25th Ammendment NOW Abolish ICE NOW 👇👇👇
-
Punk Rock History (@punkrockhistory.bsky.social)
https://bsky.app/profile/punkrockhistory.bsky.social/post/3mezpkl3i5s2j
> 47 years ago today Blondie scored their first UK No.1 album when 'Parallel Lines' started a four-week run at the top of the charts, featuring the singles 'Heart Of Glass', 'Hanging On The Telephone' and 'Sunday Girl #blondie #poppunk #newwave #punkrockhistory #otd
-
L’ordine pubblico del governo a caccia di giovani | il manifesto
https://ilmanifesto.it/lordine-pubblico-del-governo-a-caccia-di-giovani
> Diritti (Commenti) Come avviene l’arresto di un manifestante indagato per scontri di piazza? Di solito gli agenti arrivano a notte fonda o alle prime luci dell'alba, entrano in casa mai in meno di quattro con passamontagna e pettorine, l’adrenalina è quella del blitz. Quando una dozzina di agenti tra Digos e Ros alle 4.30 di notte si
-
La Germania non partecipa, nel rispetto della Costituzione | il manifesto
https://ilmanifesto.it/la-germania-non-partecipa-nel-rispetto-della-costituzione
> Germania (Internazionale) Nein danke. Puntuale, secca, inequivocabile è la risposta di Berlino alla suggestione diffusa da Roma sul possibile coinvolgimento del governo tedesco nel Board of Peace su Gaza del presidente Usa. Al contrario dell'Italia, la Germania non parteciperà in alcuna veste al nuovo organismo di governance mondiale costruito da Donald Trump, «né come partecipante, né come
-
«Stupidi e ciechi reazionari». Impressioni di febbraio
@anarchia
Che lo sgombero di Askatasuna non potesse vedere che una risposta partecipata ed energica, era praticamente scontato. Non solo per il carattere “storico” del centro sociale – e la militarizzazione permanente del quartiere Vanchiglia che èhttps://www.rivoluzioneanarchica.it/stupidi-e-ciechi-reazionari-impressioni-di-febbraio/
-
60W Pocket Cloud is a microSD card reader for your smartphone with USB PD passthrough (Crowdfunding)
60W Pocket Cloud is a smartphone microSD card reader with 60W USB PD passthrough that works with Android (USB-C) and iOS (USB-C or Lightning) mobile devices, as well as other hosts with a spare USB port. Once upon a time, smartphone manufacturers would include a microSD card socket in their devices, but those have now become harder to find. If your device’s spare storag…
https://www.cnx-software.com/2026/02/17/60w-pocket-cloud-microsd-card-reader-for-your-smartphone-with-usb-pd-passthrough/
-
@InternetEh the 00s somehow were even worse for music than the 90s.
-
Inps, parlare con te è un’esperienza
Una (lenta) conversazione surreale che ho avuto:
