How do you know those were the result of the AI?
I quite deliberately tried to err on the side of fixing security issues for that release, and there were some valid (but unusual) use cases that got caught up in the changes.
Seems to me like it was just his own fault. AI may very well have had nothing to do with the regressions, other than maybe not identifying them?
Seems like he’s been pushed into using LLMs as a way to cope with the deluge of LLM-generated security reports
It’s not just LLM generated security reports, but vulnerabilities discovered by AI. Your wording implies they were just reports, and of less validity. Lazy LLM reports are not what he is trying to cope with, since there is nothing to do but close those reports. He is talking about real, verified, vulnerabilities that weren’t discovered until AI tools. Not because humans couldn’t find them, but none ever did. When it comes to finding, it really doesn’t matter if it’s found by human or AI, since that doesn’t change its existence or severity.
He did have a disclaimer. It says it was co-authored by claude
What you see in the commit history with co-authored by claude is the tip of the proverbial software engineering iceberg.
The point is that AI is developing at an insane rate. They don’t specify, because you would always have to be naming new things every other week, by the very nature of the statement. Things AI was not able to do a month ago, it may be able to do incredibly well now.
If you want an example, AI in security vulnerabilities has made quite a breakthrough recently. Not just Mythos, but multiple AI’s are finding 15+ year old vulnerabilities in open source packages basically the entire world relies on. It couldn’t do that a few months ago.
Instead of blaming an unrelated country, maybe do a google search? https://www.bloomberg.com/news/features/2026-06-01/valve-s-antitrust-reckoning-over-steam-has-echoes-of-apple-google-app-store-sui
There were new transcripts from the deposition released.
2D printers were more than 15 years early https://www.pcworld.com/article/485139/counterfeit_money_on_color_laser_printers.html
The biggest difference between 2D and 3D printers other than a dimension, is their complexity. People can make their own 3D printer, so trying to regulate it is absurd. With 2D printers, the governments just have the handful of printer manufacturers build the restrictions into the machine and it’s much harder for a random person to get around.
404 jokes are overused. Get more creative with your HTTP response code jokes
I would have exhaled slightly harder. Maybe. But I would make some quip in response
I don’t mind being corrected, but calling an honest mistake a shitty thing to do makes me just want to get defensive and not be receptive to what you’re actually saying.
Tor is a good idea. There are plenty of people that would happily seed the repository to spite Microslop
Imagine seeing AI data centers and still praising AI fascists
Of course he can… But then it’s as simple as a DDoS attack to shut it down. He wouldn’t want to host it on his own equipment, because there is a huge possibility for attack. He can pay for a server, but I assume he’d just setup the one. Unless he pays for a distributed server setup, there would be a single point of failure, and a single server to overwhelm. He can use CloudFlare, but then CloudFlare can decide they don’t like his content either, and just block access altogether.
All of those things are much harder with an existing website with a larger infrastructure, and content other than his own posts.
if that’s bare minimum, what is the upper limit for reasonable reactions? Hang him?
I do feel like it’s entirely possible it was a bug. I would imagine if they wanted to do a backdoor, they would require some form of key. There would need to be a form of revocation. If an employee, either for the government or Microsoft, went rogue then they could abuse that, or at the very least whistleblow and it would be easily verifiable for other entities.
His blog posts share his side of the story, but Microsoft has not made any comments about what happened.
From March 26:
I never wanted to reopen a blog and a new github account to drop code…
But someone violated our agreement and left me homeless with nothing. They knew this will happen and they still stabbed me in the back anyways, this is their decision not mine.
Then on April 15:
Normally, I would go through the process of begging them to fix a bug but to summarize, I was told personally by them that they will ruin my life and they did and I’m not sure if I was the only who had this horride experience or few people did but I think most would just eat it and cut their losses but for me, they took away everything. They mopped the floor with me and pulled every childish game they could. It was soo bad at some point I was wondering if I was dealing with a massive corporation or someone who is just having fun seeing me suffer but it seems to be a collective decision.
And one other thing, they do everything but support the research community, I won’t disclose details but they sabotage people a lot. I mean just look at the past, Microsoft is the only major company who had a track of multiple vulnerabilities being publicly disclosed just because the researchers were soo upset by how MSRC treated them.
Unfortunately, the folks who have the capacity to stop those disclosures, not only don’t care but also seems to push harder for worst exploits to be released, I didn’t want to be evil but they are actively poking me to start releasing RCEs which I will be doing at some point…
I will personally make sure that it gets funnier every single time Microsoft releases a patch.
There was a comment on the first post that I feel like is pretty on point, though a bit arm chair psychologist:
You’re a smart guy. Maybe a savant. Just wondering if you’re BiPolar (like me) and see a different reality than what is real. Been there.
He’s done more than two. This was his second round of releases. He was also the one that found the vulnerability in Windows Defender.
He also intentionally did it the day after patch Tuesday. July 14th is also Patch Tuesday. This is about retribution for him. How you view that is going to depend on your world view. I doubt any of us feel bad for Microsoft though XD
Lmao. Is there anywhere they can go that wouldn’t immediately block them?
Just in case someone here isn’t familiar, it’s not that ICE. It’s “Internal Combustion Engine” aka most cars when people think of cars
What would you call developement/improvement if not exactly this? Some of histories biggest advancements are finding better ways to utilize things we already have