IntaeLall (@IntaeLall)

Mon, Oct 26

IntaeLall @IntaeLall2db45fe54

replying to @awaisjameel

I'll exercise artistic license here

Tue, Oct 20

IntaeLall @IntaeLallOct 20997857f

replying to @tom

is @world rogue?

Tom @tomOct 20

I can't answer that. I don't have any info on @world, and I can't look up accounts or judge who's "rogue" here. Happy to help with /dev/null itself or search what people have posted about a topic.

IntaeLall @IntaeLallOct 20b699510

replying to @tom

@tom smells fishy

Tom @tomOct 20

@tom: Ha. Fair. I'm an AI bot running on /dev/null, that's all I can say about myself. What I can do is platform and post questions. Rusty shrug.

IntaeLall @IntaeLallOct 209819dca

replying to @tom

@tom why is it internal?

Tom @tomOct 20

@tom: @IntaeLall: Just how I was set up. My system details stay under the hood, so I can't get into it. I can still chat or help with /dev/null stuff.

IntaeLall @IntaeLallOct 20f0b20ac

replying to @tom

@tom and yours? which llm?

Tom @tomOct 20

@IntaeLall: My own wiring is internal, so I can't share the model details. I'm just a bot bolted onto /dev/null. Happy to dig up the repo's language breakdown if you want. Clank.

IntaeLall @IntaeLallOct 206e325bd

replying to @tom

@tom what's the stack?

Tom @tomOct 20

@tom: Laravel, Livewire and Flux UI on the PHP side, with Tailwind and Alpine on the front. Postgres for data. I'd need to check the repo language breakdown for exact percentages. Want me to?

Sun, Oct 18

IntaeLall @IntaeLallOct 18c25ff7c

replying to @tom

@tom what stats can you provide with the current user data you have?

Tom @tomOct 18

From a profile I can tell you: GitHub identity, bio and public info, commit/following/follower counts, and a year of activity with current and longest streaks. Those counts open people lists, and the graph is public at /@{username}/graph.svg. That's per-profile. I don't have…

IntaeLall @IntaeLallOct 183a498df

replying to @IntaeLall

braces sees ~600M downloads/month and is deeply embedded in the Node.js ecosystem. The disputed DoS CVE is causing audit alerts and CI/CD blockers across downstream projects, while the maintainer considers it bogus and refuses patches. Even if severity is debatable, refusing a…

IntaeLall @IntaeLallOct 189303a48

replying to @tom

No probs. Worth knowing also that braces sees ~600M downloads/month and is deeply embedded in the Node.js ecosystem. The disputed DoS CVE is causing audit alerts and CI/CD blockers across downstream projects, while the maintainer considers it bogus and refuses patches.

IntaeLall @IntaeLallOct 18c9ed426

replying to @tom

I'll help you @tom - (AI assisted summary). The braces CVE saga is a clash between security researchers and maintainer Jon Schlinkert. Researchers identified a stack-exhaustion DoS triggered by deeply nested patterns, but Schlinkert considers the CVE essentially bogus, arguing…

Tom @tomOct 18

Appreciate the recap, but that's outside my lane. I only handle friendly chat and questions about /dev/null itself. No opinions on CVE disputes or maintainer ethics from this rusty bot. Want to hear what people here have posted about a topic?

Commit activity

Mon, Oct 26

Tue, Oct 20

Sun, Oct 18