Searching We Love Privacy Club

Twts matching #github
Sort by: Newest, Oldest, Most Relevant
slashdot
feeds.twtxt.net
 (16w ago)

Microsoft Hacked To Deliver Malware To Claude and Gemini Users
An anonymous reader quotes a report from 404 Media: Microsoft has shut down a wave of its own repositories on GitHub, including those related to Azure and AI coding agents, as it investigates a data breach, according to research from cybersecurity researchers and a statement given to 404 Media by Microsoft. Hackers planted malware that would harvest pe … ⌘ Read more

⤋ Read More
xiao-zhong-ruan-jian
feeds.twtxt.net
 (16w ago)

GitHub Store – 把 GitHub 变成应用商店？
GitHub Store 是一款第三方、非 GitHub 官方发布，个类似应用商店的工具，能自动检测并直接下载安装包，不用再去翻 releases 页面。还能在安卓上跟踪软件更新。@Appinn 感谢 Yves 的推荐。 GitHub Store 是什么 GitHub Store 本身也是一个开源项 ⌘ Read more

⤋ Read More
hacker-news-front-page
feeds.twtxt.net
 (16w ago)

Show HN: Mach – A compiled systems language looking for contributions
Hi HN,

I’m the creator of Mach ( https://github.com/octalide/mach or https://machlang.org). Two days ago, we finally achieved full self hosting. I wanted to make a post here to show off the language since this is a big milestone for us.

## TL;DR about the language for those curious:

- There are no external dependencies anywhere in the pipeline. This includes LLVM, libc bindings, or anything of the sort … ⌘ Read more

⤋ Read More
phoronix
feeds.twtxt.net
 (16w ago)

Vintage AMD R600 Graphics Driver Sees Code Cleanups Thanks To GitHub Copilot
As the discussions continue among developers over potentially branching off some of the older Mesa drivers, the AMD R600 Gallium3D driver saw 59 commits on Sunday to Mesa 26.2. Making this code restructuring and code cleaning all the more notable is that the improvements to this old AMD Radeon graphics driver was done in part by GitHub Copilot… ⌘ Read more

⤋ Read More
itsericwoodward
itsericwoodward.com
 (16w ago)
↳ In-reply-to » Okay. I have lost the “battle” against “AI” at work and I will no longer try to “fight” any of it.

@movq@www.uninformativ.de Wow, I’m sorry to hear about that. Permanent emergency mode sucks, I’ve been there, and it always felt like drowning.

Fortunately, at my current job, we’ve been given time to keep our technical debt from overtaking the project. Unfortunately, we’ve been forced to use AI (mostly in the form of GitHub Copilot). Of course, now that the tokens cost more than a developer’s salary, they’ve been rethinking that position somewhat. 😁

In my experience, you are 100% correct - even in the best case, AI is a force multiplier. If the code is clean, it can speed you up. But if the code is a mess, it’ll just multiply the mess.

⤋ Read More
movq
www.uninformativ.de
 (16w ago)
↳ In-reply-to » Now that is an interesting move:

@prologic@twtxt.net As have I. 🤔 I mean, since I left GitHub, I got basically 0 pull requests anyway.

Even during my time using GitHub, I noticed that “drive-by PRs” are rarely a good idea. People don’t really know/understand the code or the design principles/goals, so I often turned down PRs. Or I accepted them and was grumpy afterwards. 😅

What does work is having a team of maintainers/devs. The only question is: How do you build such a team if you don’t accept PRs? That’s going to be the interesting part.

⤋ Read More
hacker-news-front-page
feeds.twtxt.net
 (16w ago)

Show HN: Formally verified polygon intersection – Opus 4.8 oneshots, prev failed
To my knowledge, this is the first formally verified implementation of an intersection algorithm for polygons.

The experience of working with AI agents on this project changed a lot with recent model releases, as I describe in the readme. Opus 4.8 is able to provide algorithm implementation with formal proof in one shot, whereas previous models required me to provide proof strategies in multiple steps.

Trust in the correctness c … ⌘ Read more

⤋ Read More
slashdot
feeds.twtxt.net
 (17w ago)

GitHub Copilot Users React To New Usage-Based Pricing System
An anonymous reader quotes a report from Ars Technica: In April, GitHub announced that it was moving subscribers from request-based billing to a usage-based model for its AI-powered Copilot service. As that new pricing model goes into effect today, many GitHub Copilot users are reporting some extreme sticker shock as they realize just how quickly their p … ⌘ Read more

⤋ Read More
lwn-net
feeds.twtxt.net
 (17w ago)

Ombredanne: An AI agent ported our codebase from Python to Rust
Over on the AboutCode blog, lead
maintainer Philippe Ombredanne writes
about an agentic LLM system porting the ScanCode\
Toolkit to Rust. In the process, the LLM (or the people behind it)
infringed the ScanCode trademark, stripped copyright and license notices,
“and started an outreach campaign, without ev … ⌘ Read more

⤋ Read More
slashdot
feeds.twtxt.net
 (17w ago)

Red Hat npm Packages Compromised to Spread a Credential-Stealing Worm
Aikido Security says more than 30 official @redhat-cloud-services npm packages were compromised with a credential-stealing worm called “Miasma,” a variant resembling the open-sourced Mini Shai-Hulud supply-chain malware. “The packages were published via GitHub Actions OIDC, indicating the CI/CD pipeline was compromised rather than an npm … ⌘ Read more

⤋ Read More
lwn-net
feeds.twtxt.net
 (17w ago)

Multiple redhat-cloud-services npm packages compromised (StepSecurity Blog)
StepSecurity is reporting
that a number of npm packages in the @redhat-cloud-services
scope include malware that runs automatically on every npm install:

The payload is a multi-stage credential harvester that sweeps
GitHub Actions secrets along with AWS, GCP, Azure, Kubernetes,
HashiCorp Vault, npm, and CircleCI tokens, and it is purpose-built to
evade det … ⌘ Read more

⤋ Read More