• Maybe we should just not install software for a bit.  (Xe Iaso)
  
  There's another new - or newish - Linux privilege escalation bug.  It's literally called Copy Fail 2: Electric Boogaloo.
  
  But under the hood it's abusing the same module as yesterday's Dirty Frag, so if you already applied the mitigation for that, you're protected from CF2EB.
  
  
  
• Also, my recommendation is don't install Ubuntu 26.04 just yet.  Unlike 24.04 which worked smoothly from release day, Ubuntu 26.04 still has some odd quirks.  Particularly if you want to use it under WSL and integrate with JetBrains IDEs (CLion in this case, but they'll all be the same here) where it just doesn't work.
  
  I went back to 24.04 and had no more issues.
  
  
  

Tech News

• Thousands of vibe-coded apps expose personal and corporate data to everyone on the internet.  (Wired)  (archive site)
  
  AI coding tools are like hiring an autistic teenager to program for you.  Great if your requirements are clearly defined and you check their work carefully.
  
  But if you just blindly deploy whatever they produce, that's on you.
  
  
  
• AI slop is killing online communities.  (rmoff)
  
  It's not that AI is intrinsically bad, anymore than email is bad.
  
  It's just that it makes being annoying far too easy:

  Material created with the assistance of AI is not bad in itself. It’s the purpose to which it's put.

  A good use of AI is when it enables people to do something they couldn't do before, to contribute to a community when they couldn’t before.  Done with the care and good intent of a human behind it, this is a nett positive.

  Bad AI slop, on the other hand, is monkeys throwing crap over the fence for a purpose other than furthering the community.  This includes spam, engagement farming, and simply thoughtless noise in a space which is not for that purpose.

  We need more spam filters.
  
  
  
• Mojo has gone beta.  (Mojolang)
  
  Mojo is a Python-like language (more so than, for example, Nim) that compiles directly to binary and has similar safety features to Rust.  It's designed to work with Python in both directions: Importing Mojo modules into Python code, and importing Python code into Mojo programs, though apparently the latter is more robust than the former.
  
  Not sure how well it works otherwise; the first release some years ago actually had a waiting list.  At least now you can just click a link and download it.  Well, you can't, but apparently you can install it with uv or pixi.