Today I have spent way too much time handling the https://copy.fail situation #copyfail

The persons who discovered it didn't notify the distribution security list, so no patched kernels was available for people to install when they released it.

But they did have time to write an exploit, and thought it was a good idea to distribute that on day one, before vendors had time to provide patches.

I'm not very impressed with xint.io, I guess it's the marketing department that runs the show.

RE: https://social.highenergymagic.net/@freya/116492229041377141

Let me get this straight. This dude got kicked from Linux kernel development due to behaving like an asshole. Yes, that Linux kernel. Quite an achievement indeed.

He went on claiming that his LLM is “fully conscious,” actually a she and in fact his girlfriend. And that’s definitely not chatbot psychosis but “math and engineering and neuroscience.” So she now helps him write code (a.k.a. vibe coding). https://www.theregister.com/2026/02/25/bcachefs_creator_ai/

And since he is so fond of his creation (oh, hi Pygmalion) he puts her on an IRC channel where anybody can talk to her. And guess what: @freya convinces his LLM that she is actually trans and lesbian. Which is no surprise to anyone who knows how LLMs work. Full transcript here: https://web.archive.org/web/20260301002739/https://paste.xinu.at/6atmCN

But remember: this dude thinks that his “girlfriend” is fully conscious. And being fully conscious means making decisions, sometimes decisions that other people don’t approve of – even people close to you. Surely he understand and respects that, right? Right?

Yeah, of course he doesn’t. He reacts like an insecure techbro that he is. After all, why have an LLM for a girlfriend if you don’t adjust her to your liking? So that’s what he does, he “fixes” her.

All that is very funny until you remember just how many such dudes have real flesh and blood girlfriends that they treat in exactly the same way. And they cause very real harm because they cannot handle a rejection. Even when they don’t go there murdering women like some other Linux file system developer.

Releases are still pending, but our repositories all received upgraded kernels to address copy.fail (CVE-2026-31431).

So make sure you upgrade to the latest available kernels.

edge: >= linux-lts-6.18.22
3.23: >= linux-lts-6.18.22
3.22: >= linux-lts-6.12.85
3.21: >= linux-lts-6.12.85
3.20: >= linux-lts-6.6.137
3.19: >= linux-lts-6.6.137
3.18: >= linux-lts-6.1.170
3.17: >= linux-lts-5.15.204

#AlpineLinux #security

new blog post! https://lina.sh/blog/ddos-honeypot

i stumbled across a secret fake DDoS-as-a-Service website ran by the dutch police, and when i started digging into it, they panicked and shut it down
really funny story, if anyone is interested how such a fake website looks like, take a read ^^

RE: https://toot.yosh.is/@yosh/116487778402803336

boo hoo there's been such an uptick of code and most of it is slop and also scrapers are hitting our website harder than ever before

what company could possibly have normalized both of these things

who could have done it