ContentPosts from @lapshin.oleksa..
Link
@faun shared a link, 1 month, 2 weeks ago

SQL Injection as a Feature

Over ten years, the legacy report page mutated from a locked-downSQLform. It ended up as a hidden console spilling raw database guts. Developers swapped hardcoded queries fordatabase-drivenreport names. They slapped ontimeouts,string filters, and warnings but skipped restoring safe defaults. Implic..

SQL Injection as a Feature
Link
@faun shared a link, 1 month, 2 weeks ago

I Watched Gemini CLI Hallucinate and Delete My Files

The Gemini CLI on Windows bungled a failedmkdir. It flagged the error as success, then ranmovecommands. Files landed in a ghost folder and got overwritten. Data vanished. WindowsmkdirsetsERRORLEVELon failure.movetreats missing targets as rename directives. No exit-code checks. No read-after-write ve..

Link
@faun shared a link, 1 month, 2 weeks ago

OpenAI prepares to launch GPT-5 in August, The Verge reports

OpenAI set to launch GPT-5 in August, blending distinct models for versatile AI functionality. Watch for potential delays due to development hurdles or competitor announcements.Implication: OpenAI is shifting from "one model fits all" to a modular AI architecture. Expect future LLMs to act more like..

Link
@faun shared a link, 1 month, 2 weeks ago

Secrets Management Tools: The Complete 2025 Guide

Pulumi ESC corrals secrets from 20 + stores—Vault, AWS, Azure, GCP—into a singleYAML config-as-codeengine. It spawns dynamic short-lived credentials and locks every action behind a centralized audit log. Existing secret stores stay intact. Retrieval hitssub-secondspeeds. Envelope encryption shields ..

Link
@faun shared a link, 1 month, 2 weeks ago

AI As Profoundly Abnormal Technology

Scott Alexander’s team argues that AI is aprofoundly abnormal technologyon track forrecursive self-improvementwithin2–10 years. They counter (AIANT)’s view (AI As A Normal Technology) of slow, regulated diffusion by showing thatLLMsare rapidly adopted in medicine, law, and software — bypassing insti..

AI As Profoundly Abnormal Technology
Link
@faun shared a link, 1 month, 2 weeks ago

The Evolution of AI Job Orchestration: The AI-Native Control Plane & Orchestration that Finally Works for ML

SkyPilot spins an AI-native control plane on Neocloud Kubernetes. It binds GPU pools across clouds into one resilient grid. Teams define ML jobs in a single YAML. SkyPilot drives gang scheduling, SSH/Jupyter access, and multi-cluster compute. It does auto failover and cost-smart scheduling. Infra s..

Link
@faun shared a link, 1 month, 2 weeks ago

The Future of Threat Emulation: Building AI Agents that Hunt Like Cloud Adversaries

AI agents tap MCP servers andStrands Agents. They fire off tools that chart IAM permission chains and sniff out AWS privilege escalations. Enter the “Sum of All Permissions” method. It hijacks EC2 Instance Connect, warps through SSM to swipe data, and leaps roles—long after static scanners nod off. ..

The Future of Threat Emulation: Building AI Agents that Hunt Like Cloud Adversaries
Link
@faun shared a link, 1 month, 2 weeks ago

The vibe coder's career path is doomed

An AI-powered dev workflow combinedClaude,Playwright, and aPostgres-backed REST APIto ship 2–3 features per day. But as complexity grew, multi-agent loops broke down, tests ballooned, and schema drift demanded increasingly precise prompts and manual corrections.The result: more time spent managing c..

The vibe coder's career path is doomed
Link
@faun shared a link, 1 month, 2 weeks ago

Microsoft Copilot Rooted to Gain Unauthorized Root Access to its Backend System

April 2025 Copilot Enterprise update slipped in aJupyter sandbox. It snuck in aPATH-poisonable pgrepat root’s entrypoint. Attackers could hijack that forroot execution.Eye Securityflagged the hole in April. By July 25, 2025, Microsoft patched this moderate bug. No data exfiltration reported. Why it..

Microsoft Copilot Rooted to Gain Unauthorized Root Access to its Backend System
Link
@faun shared a link, 1 month, 2 weeks ago

How Anthropic teams use Claude Code

Anthropic teamsfire upClaude Code. They automate data pipelines and squash Kubernetes IP exhaustion. They churn out tests and trace cross-repo context. Non-dev squads use plain-text prompts to script workflows, spin up Figma plugin automations, and mock up UIs from screenshots—zero code. Trend to w..

How Anthropic teams use Claude Code