Tech · Culture · Fiction
Article Nobody has to break into GitHub
GitHub incidents are feature abuse under valid credentials. The break is at the execution boundary, and standing scope is the real exposure.
Patching would not have stopped this breach
A Metabase zero-day converted an analytics application's standing data access into attacker access, leaving reach and scope as the only controls in play.
The benchmark isn't your bottleneck
Qwen3.8 Max topped the agentic index, but a benchmark win is a signal to test against your own tasks, not a reason to migrate your automation.
One grep, full repo access
A security camera shipped a full-scope GitHub PAT in its login page bundle. The credential exposure, supply-chain exploit path, GitHub audit-log telemetry, and why rotation - not removal - is the only fix.
CVE-2026-44843 turns one chat message into credential theft
CVE-2026-44843 turns a single chat message into credential loss. An operator breakdown of the one-hop path from unauthenticated input to identity material.
The camera on your shelf handed out your GPS
A TP-Link Kasa camera returned home GPS over unauthenticated UDP for six years. The mechanism, the pattern it exposes, and what must now be true.
Rust solved the compatibility trap with editions
SQLite's backward-compatibility promise freezes its worst defaults. Rust-style editions could ship strict typing and enforced constraints without breaking old files.
The Wire — latest
All →- AI;DR: A Pushback Policy Against Unedited AI 'Slop'
- Alibaba's Qwen3.8 27B scores 52 on Artificial Analysis, topping open-weight peers
- At the End of the World, Patagonia's Aging Solitary Ranch Hands
- Berkeley Researchers Laser-Target Cone Cells to Show 5 People a Color Called 'Olo'
- Bluesky hijacks an iOS privacy API to stamp its logo on your screenshots
- Fairphone 6 main camera now works on postmarketOS as Linux phone effort matures
- GitHub Outage Spikes Error Rates, Cripples SSO and Lingers in Copilot Auth
- GPT-5.6 Sol closes OpenAI's vision gap, but Gemini stays cheaper and better
- How id Software's 1996 Quake Unlock Scheme Fell to Security-by-Obscurity
- India moves to charge merchants fees on UPI, ending free-payments era
Stay in the loop
New writing delivered when it's ready. No schedule, no spam.