Article doesn't link to any specific details but I went looking at some of the named repos and found one with the malicious issue still up. Someone (pretty sure it's someone's LLM, actually) wrote an explanation in a comment, too. It claims to have found 144 instances of this attack in total, more than this article states.

TL;DR it's a bit of script that'll post the executing shell's env output to a remote IP. I guess the idea is a custom CI pipeline that runs on issue creation mightn't properly sanitise its inputs.

Also yes.

My thinking was that a huge proportion of the material out there for learning audio dev is C++ (and a lot is JUCE), so I can see an argument for wanting to use it. But that motivation isn't really there if your plan is just to yell at an agent until it spits out something that compiles.

Nah it's just Microsoft Copilot for Moon ✨.

As long as you're vibecoding, why on earth would you choose to use C++ and/or JUCE?

Unless AI fully breaks cryptography, in that scenario we'd surely converge quickly to actually having mathematically infallible security on the blue team side? Software is finite, thus, software flaws are finite.

Breeched banks. The water is rising. EVACUATE NOW. McGee Park open for people and pets, RV.

This is such an abysmal emergency warning it's hardly surprising an LLM could do a better job.

Like, ok, your meteorologists are hired exclusively from the pool of 90s nerd stereotypes with no communication skills, fine, but also hire someone who can actually write a sentence for exactly this reason?

I'm like 95% sure this is a bot like all the other bots inexplicably trolling the "cute indie website" communities lately, but even if you're not I'm sorry but any three hour old account like this (from what is IMO a rather sus Lemmy instance containing seemingly more marketing copy about being community-driven than actual community) can go fuck itself:

I'm not arguing against your username, but this article is about an Israeli malware campaign using ad bids to specifically target itself towards Starlink users. There's nothing about Starlink itself being complicit.

I'd think if Starlink wanted to surveil their users (they probably do) they could find a more direct route than this (they probably have).

I've always just used a hyphen for ranges, without having any idea whether that makes me a philistine. A quick search says that, like most of this, it varies depending on who you ask.

Good luck in your rabbit hole!

Degenerative Pixels is a channel for music videos made with AI. The songs are generated in Suno, and the animation is written as code by Claude, so every scene is built by a program instead of coming out of a video generator.

It sounds like it's explicitly not AI-generated video in the sense I think most people would mean?

Also, the irony of being told to "sign in to confirm you're not a bot" to access a video generated by a bot.

This is either slop, marketing, or both.

For pedantry's sake:

Two dashes -- -- -- in Markdown is usually rendered as an en-dash -- more common in British-adjacent styles and usually surrounded by spaces.

Three dashes---------in Markdown is rendered as an em-dash---more commonly associated with American styles and usually (though not always) without spaces.