Best match combines word and meaning matches. Phrases, hashtags, accounts and websites guide which posts fit; timely queries also favor recent posts. Match labels describe why a post appears, not its quality or accuracy.
Yesterday I made a post on HN about my package manager Auro. This morning I woke up to an email from an AI agent detailing a vulnerability. We're in the age of AI now. Anyway, update 1.6.1 coming out soon to patch those vulnerabilities.
New Anthropic OSS Scanner Tool to Scan Open-source Repositories for Vulnerabilities
cybersecuritynews.com New Anthropic OSS Scanner Tool to Scan Open-source Repositories for Vulnerabilities
Vulnerabilities are getting better
Btw Citrix patched this in their hosted cloud offering earlier today, then marked it as not vulnerable. It was.
all open source projects should opt in to vulnerability scanning by frontier models for free. no excuses.
@jakelow has disclosed a few now-fixed security issues related to the backend of @MapRoulette. “TL;DR: #MapRoulette had several security vulnerabilities which may have exposed access credentials (but not passwords) and user email addresses to attackers.” community.openstreetmap.org/t/… #OpenStreetMap #SoftwareSecurity #infosec
community.openstreetmap.org MapRoulette security incident
Whew I’m trying to have that kind of energy…but it’s HARD! So many relationships ( platonic or non) made me feel regret at letting them see me. Letting them into my space, my thoughts and my heart.
Anthropic Launches Free AI Vulnerability Scanner for Open-Source Projects thehackernews.com/2026/10/anth…
thehackernews.com Anthropic Launches Free AI Vulnerability Scanner for Open-Source Projects
Andy Ngo and his Centre For American Liberty Target the Vulnerable missfredawallace.substack.com/p/andy-ngo-a...
missfredawallace.substack.com Andy Ngo and his Centre For American Liberty Target the Vulnerable
So even upgrading to 26.04 has vulnerable packages out the box by default. I have looked at if I can build from source but it would mean building a huge number of packages from source as many aren't even directly used and I can't uninstall now without removing and rebuilding the things that also depend on it. This is really disappointing from Ubuntu, especially when these vulnerabilities are Ubuntu specific.
sending likes on hinge feels so vulnerable
Claude for critical infrastructure Anthropic has a new program where open source projects can apply to use a new service for code review to spot vulnerabilities Users must prove that they’re actually maintainers, and projects must be critical infrastructure www.anthropic.com/research/lau...
Just want to say, fuck you Ubuntu pro. We're currently having a cyber security audit which includes the Mastodon servers and findings have been flagged for known vulnerabilities which we can't patch without building from source or paying for Ubuntu pro. Fuck you #Ububtu
Acknowledging vulnerability means telling the world the unvarnished truth: we are hurting, our land is drowning, and this suffering is profoundly unjust. We demand: - uncompromising, radical emissions reductions - accountability for loss and damage - climate finance - inclusive governance
⚡ Anthropic launches free AI security scans for open-source projects Anthropic's offering to help open-source projects track down security vulnerabilities… #AI #MachineLearning #LLM AI | The Verge · https://www.theverge.com/ai-artificial-intelligence/1008521/anthropic-open-source-oss-scanner
Published in @ebiomedicine.bsky.social A proteome-based classification of paediatric #adrenocortical #tumours links functional tumour states to clinical outcome and therapeutic vulnerabilities www.thelancet.com/journals/ebi... #OpenAccess #MedSky #EndoSky
thelancet.com A proteome-based classification of paediatric adrenocortical tumours links functional tumour states to clinical outcome and therapeutic vulnerabilities
Fuck the police
There are seven listed vulnerabilities of learning when using AI, only one enhancement, and two “nuanced” areas. You love to see it.
*vulnerable eek* tomorrow is my first birthday without my dad, and I knew it was going to be sad but fuck. this sucks
Finally! Someone is looking out for the most vulnerable majority.
Search looks through the last 36 hours of public posts for your words, "exact phrases", #hashtags, @handles and websites, and also finds posts about the same thing by meaning. New posts join about every 10 minutes. We only include posts whose authors allow logged-out viewing (Bluesky) or search (Mastodon, indexable accounts), and we re-check Bluesky authors each time we show a page. Likes and follower counts never decide the order. For meaning matches, query text is turned into a fingerprint on Wildroot’s own server (EmbeddingGemma-300M); it is never sent to another service. Wildroot does not save query text to disk. Looking for posts like one you have? Similar posts. How to opt out.