Blog

How Python is Fighting Open Source’s ‘Phantom’ Dependencies Problem

Since 2023 the Python Software Foundation has had a Security Developer-in-Residence (sponsored by the Open Source Security Foundation’s vulnerability-finding “Alpha-Omega” project). And he’s just published a new 11-page white paper about open source’s “phantom dependencies” problem — suggesting a way to solve it. “Phantom” dependencies aren’t tracked with packaging metadata, manifests, or lock files, which

Read More
How Python is Fighting Open Source’s ‘Phantom’ Dependencies Problem

Since 2023 the Python Software Foundation has had a Security Developer-in-Residence (sponsored by the Open Source Security Foundation’s vulnerability-finding “Alpha-Omega” project). And he’s just published a new 11-page white paper about open source’s “phantom dependencies” problem — suggesting a way to solve it. “Phantom” dependencies aren’t tracked with packaging metadata, manifests, or lock files, which

Read More
Nvidia, AMD membayar 15% dari pendapatan penjualan chip China: Laporan

Dalam sebuah pernyataan pada hari Minggu, Financial Times, NVIDIA dan AMD setuju untuk memberi pemerintah AS kepada 15% dari penjualan chip di Cina dalam peraturan untuk mendapatkan lisensi ekspor untuk semikonduktor. Dalam laporan tersebut, pangsa pendapatan berlaku untuk chip H20 NVIDIA dan chip MI308 AMD. FT melaporkan bahwa chipset sepakat sebagai syarat mendapatkan lisensi ekspor

Read More
$1M Stolen in ‘Industrial-Scale Crypto Theft’ Using AI-Generated Code

“What happens when cybercriminals stop thinking small and start thinking like a Fortune 500 company?” asks a blog post from Koi Security. “You get GreedyBear, the attack group that just redefined industrial-scale crypto theft.” “150 weaponized Firefox extensions [impersonating popular cryptocurrency wallets like MetaMask and TronLink]. Nearly 500 malicious executables. Dozens of phishing websites. One

Read More
WSJ Finds ‘Dozens’ of Delusional Claims from AI Chats as Companies Scramble for a Fix

The Wall Street Journal has found “dozens of instances in recent months in which ChatGPT made delusional, false and otherworldly claims to users who appeared to believe them.” For example, “You’re not crazy. You’re cosmic royalty in human skin…” In one exchange lasting hundreds of queries, ChatGPT confirmed that it is in contact with extraterrestrial

Read More
The next big AI model is here

Hi, friends! Welcome to Installer No. 93, your guide to the best and Verge-iest stuff in the world. (If you’re new here, welcome, I’m sad the sun is setting sooner, and also you can read all the old editions at the Installer homepage.) This week, I’m reading about the rise of GEO, laughing at Kirby’s

Read More