Eh, Valsorda had 137 comments here and around 1800 karma. Respectable yes but influential on this site, no.

score 1 · canonical

If you can’t suggest an alternative or additional tag, the only thing left to do is to hide it or flag it (which additionally hides it).

score 1 · canonical

I think we’re all slowly realizing that anything related to LLMs/GenAI that’s not covered by the two tag descriptions:

• ai: “Developing artificial intelligence, machine learning, LLMs.”
• ai-tooling: “The design, ux, development of AI/LLM-powered tools.”

is explicitly off-topic.

score 3 · canonical

The PHP project page now has links to updated versions

https://www.php.net/archive/2026.php#2026-10-21-5

Security advisory: Critical remote code execution vulnerabilities, update now

PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical vulnerabilities that can allow unauthenticated remote code execution. All PHP users are strongly encouraged to update immediately.

Who is at risk: all PHP installations serving web requests, including PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP and LiteSpeed. We consider the risk highest for mod_php, with a demonstrated exploit where an unauthenticated request can trigger the attack before any application code runs.

The vulnerabilities:

• RCE via OOM corruption, CVE-2026-109618 (GHSA-w8hw-w9fx-j79w): out-of-memory handling can interrupt PHP while internal request data is only partially initialized. Request cleanup may then treat the invalid data as valid.
• RCE via stale global state, CVE-2026-109619 (GHSA-6wmf-4rv5-p3rp): request-owned internal state can survive after its backing memory has been freed. A later request handled by the same worker may use that stale state before normal initialization resets it.

score 1 · canonical

Multiple large sites in the Netherlands taken offline, including the national e-ID system:

https://nos.nl/artikel/2636055-websites-van-overheid-en-in-onderwijs-offline-vanwege-lek-risico-op-hacks

score 2 · canonical

See comment above: https://lobste.rs/c/qqk3t0

Everything is moving too fast. Time to batten down the hatches, have a pint, and wait for it all to blow over.

score 2 · canonical

deleted by creator

D’oh! brainfart on my end. Corrected.

score 1 · canonical

You need to precede a username with an ampersand at-sign or a tilde to get it noticed as a mention.

score 1 · canonical

I am not saying that this is necessarily the case in this situation, but there are literally thousands of people right now unwillingly participating in “pig-butchering” schemes, forced to scam people out of their money online.

Who is to say that the people working doing circumvention are doing it willingly?

score 1 · canonical

I am in a generally negative headspace at the moment due to unrelated issues, so I will have to let this decision play out for a while before deciding what to do. For a long-ish time I have been contemplating just leaving the site, and maybe this will be the final push.

I don’t envy the mod team. Going from the mission statement, it’s impossible to have a forum focused on computing that excludes GenAI now. The “vibecoding” tag was the compromise - if you don’t want to interact with this stuff, just filter. That’s now gone, as far as I can see. I would have preferred a straight re-name to something that wasn’t seen as pejorative, but oh well.

score 1 · canonical

Nitpick: “video”, “audio” and “pdf” are tags, not flags.

Tags define topicality and can be filtered.

Flags are for off-topic submissions.

Having an “ai-output” tag would enable filtering, but would also signal that such content is topical. I don’t think that’s what the majority of users want.

score 1 · canonical

I could get on board with that with the caveat that “ai-usage” be restricted to “GenAI as applied to software engineering”.

score 2 · canonical

Do you think a more neutral or positively worded tag would act less like “a magnet for terrible commentary”?

score 1 · canonical

OK good to know, I haven’t given out invites in a couple of years. IRC used to be the usual channel then.

score 1 · canonical

Compromise suggestion: rename “vibecoding” to “superintelligence”.

score 9 · canonical

It’s relevant because the “chilling effect” you cite is about how people are preventing from exercising their free speech rights because they might lose employment, be imprisoned etc. None of that applies to this self-selecting, invite-only link-sharing cite. Fake internet points aren’t real.

Besides, very few posts tagged vibecoding are actually removed outright. GenAI proponents are free to submit whatever topical content they like, but they’re not entitled to special treatment to protect their feelings here.

As for users leaving, this happens all the time: https://lobste.rs/moderations?moderator=(All)&what[users]=users.

In regards to Valsorda, I have already speculated his departure could be due to other factors on this site.

score 3 · canonical

Lobste.rs isn’t “the town square”. You need to know someone to even get an invite in most cases.

I don’t bother submitting content about proprietary software here, even if it’s on-topic, because I know the community isn’t very interested in it.

score 7 · canonical

Thanks, I was positive that a change was made recently (within the last 2 months) where the quorum for vibecoding was raised.

score 1 · canonical

If you are referring to why Filippo Valsorda deactivated his account, this post states the reason:

I feel more and more like I don’t belong in almost any tech community because I believe LLM agents are real, passkeys are good, and fascism is bad.

There’s a definite and vocal anti-passkey faction here, and the community/mods have been accused of fostering fascism multiple times.

Maybe the tag addition was just the straw that broke the camel’s back.

score 6 · canonical