MDMDFSS

naja

DMS: 40° 10′ 48.67″ N, 97° 16′ 36.49″ E

Decimal: 40.180185, 97.276804

Geo URI: geo:40.180185,97.276804

https://geohack.toolforge.org/geohack.php?language=en&params...

missed chance to name it Goo-Boot

> A JPEG screenshot is self-contained. It either arrives complete, or it doesn’t. There’s no “partial decode.”

What about Progressive JPEG?

as of this writing, the alleged malware/project is still available on npm and GitHub. I'm surprised koi.ai does not mention in their article if they have reported their findings to npm/GitHub.

LLMs will happily copy-paste malware or add them as dependencies

JS has a stdlib, so to say. See nodejs, and Web standard.

And no programming language's stdlib includes e. g. WhatsApp API libraries

I still see Puppeteer mentioned several times in your post and don't understand what that has to do with Umami, nextjs, and/or CVE-2025-66478.

I guess this is actually not an anti evil maid defense.

It's rather an anti evil maid tool, or an evil maid defense. :)

sorry for being pedantic, but with the arms race within cybersecurity, "anti something defense" sounds like double negation to me.

I would call it "a defense against evil maid attacks" to avoid any ambiguity.

I like the way you made me think! It had not thought about it until now, but I take your point.

While thinking about it, this phrase occurred to me: “silver bullets are a defense against zombies.” It is not the same phrase structure as the original, but it also has the double-negative vibe, yet it feels more reasonable to me than “…are a defense for zombies”, which to me suggests that zombies would employ them against their enemies.

I think the resolution here is that defense is inherently against something, so these phrases are not unequivocally double negatives - though I also agree with nine_k’s point about a better way to say it.

EDIT: Duh! The fact that defense is inherently against something is precisely what makes these phrases look like double negatives! The resolution must be something else - maybe agreement in mood or sentiment…

Just guessing from what is written in the article: Calibri once was chosen by the former administration for accessibility reasons. Maybe the virtue signaling being that Calibri isn't great with respect to accessibility (and IMHO wasn't even designed for it in the first place).