Claude Code’s ‘don’t ask again’ button has a secrets-spilling problem https://www.csoonline.com/article/4247336/claude-codes-dont-ask-again-button-has-a-secrets-spilling-problem.html

Sous les Grands Moulins

Fortunately I am better at mastodon server administration than I am at telling what day of the week it is. The infosec.exchange server move is complete.

Toujours des brumes du Vercors, fin octobre

One reason AI companies are so eager to report FOSS vulnerabilities is that doing so creates the perception of need. Doesn't matter if they're mostly low-risk or low-priority. Doesn't matter that they were mostly discovered by actual cybersecurity researchers. The perception of need is the point. Volume serves that aim. Dropping 50 reports on a project makes people to think, "Wow, we're cooked without AI." That many reports at once overwhelms the maintainers? Guess they need AI to keep up.

A CEO dipshit named Huang
Caused the market to crash with his wang.
With stock prices tanking,
He should have tried wanking —
It's rather less buck for your bang