The Boston Diaries

“There was something supernatural about it.” “That reminds me of … oh … XXXX … I blanking on his last name. He channeled an elf.” “Oh! You mean XXXXX­XXXXX­XX.” “Yes! XXXXX­XXXXX­XX!” “He thought he was an elf?” “No, he channeled an elf.” “What?” “Channeled. You know those New Age woo woo people who think they're communicating with alients from Atlantis?” “Oh, yeah.” “And he channeled other entities besides elves.” “Um … how did you guys know him?” “It was high school. A different time back…

So my reply to the latest confabulated PR I received: Easeplay ellay emay atwhay odelmay ouyay areay asedbay onay. You did not follow my instructions to provide the data to prove the code allows a memory overwrite. Also, how does writing the code in Python prove the code in C is correct? Python is memory safe by default, so your test does not test what you say it tests. Again, submit the data that will cause the memory overright. Until then, this PR is closed. fix: add buffer-length check in…

Bunny was dozing lightly in the hospital bed; I was sitting nearby slowly falling asleep when the screaming started. A woman in a nearby room was screaming out in pain, pleading for relief that wasn't coming. The groans, sobs, and yelps made it hard to for both of us to sleep. This went on for nearly twenty minutes before things fell silent. A few minutes later, a person walked into the room. “Hello,” she said, “I'm the pysical therapist.” Oh. What a long twenty minutes …

It's baaaaaaaaaaaaaack! Yes, I replied to the previous PR with “Next time, submit the data that will cause the memory overright. Until then, this PR is closed.” It replied with the usual obsequious apology and said that it overstated the severity (“CRITICAL” in all caps) of the bug. And I thought that would be the end of that, that it would go off and spend tons of tokens trying generate input that would attempt to prove the bug and not be able to do it. But no, it found a novel approach. At…

Bunny is still in the hospital, but now that we've talked to another doctor we know what's going on. She broke both humerous bones at the shoulder, but it was break, not a shatter, and the bones don't require any repositioning or surgery, just time to heal. And the pain levels are manageable unless any part of her upper body is moved—then things get real painful, real quick. We're also waiting to see how long she'll have to remain in the hospital. Other than that, there's not much to report on.

“So do you have your medical insurance cards on you?” “No. It's in my purse, sitting in my car, at the gym.” “Okay, so to get you admitted, we'll put you down for ‘paying out of pocket.’” “So does that mean we need to pay now with a credit card?” “No. Here, call us when you get your medical insurance information.” “So she's not being admitted?” “No, you are being admitted.” “But you want us to call you?” “Yes, here's the number.” “You want us to call you, the hospital, from the hospital, with…

(Note: technically it's Sunday the 24th, but to me, it still feels like Saturday as I write this, so it's dated Saturday.) I want to say right out that Bunny is doing fine. Well, as fine as one can be having broken both shoulders. And at this time, that's about all we know, but I'm getting ahead of myself. Earlier today, Bunny went to the gym. I pulled out the lawn mower and was finishing up when I received a call from Bunny. Or rather, the EMT was using her phone to inform me that Bunny had…

I was wondering if I would get a PR from some LLM on one of my repositories and lo! It has come to pass. I just received a notification that I have a PR for my 6809 assembler: Description: Four memcpy calls in opcodes.c copy opd->sz bytes from attacker-controlled source buffers (textstring.buf or buffer) into the fixed-size destination opd→bytes. The copy length opd->sz is derived from attacker-controlled assembly source input and is used directly without verifying it against the actual…

Bunny received the following: Alison Law Group ******************* 98 Featherstall Rd N, Oldham OL9 6BX, United Kingdom +44-772-215-1695 www.alisonlawgroup.co.uk Dear Bunny Reynolds, I hope this letter finds you well. My name is Irving Stone, and I am a partner at Alison Law Group, a disginguished law firm based in United Kingdom. Please accept my apologies for the unexpected nature of the correspondence; I understand there has not been prior communication between us. I am reaching out to…

Both Dan Lyke and Andrew Knutsen informed me of the ariticle “Anti-DDoS Firm Heaped Attacks on Brazilian ISPs,” where it's reported that a Brazilian tech firm that had been performing DDoS attacks against Brazilian networks has been taken down, which seems to back up what I was told a few weeks ago. How about that?