"Security researcher Sean Heelan recently tested two sophisticated systems built on GPT-5.2 and Opus 4.5, challenging them to develop exploits for a #zeroday flaw in the #QuickJS Javascript interpreter.
The results point to a significant shift in offensive cybersecurity capabilities, where automated systems can generate functional attack code without human intervention."
https://cybersecuritynews.com/new-study-shows-gpt-5-2-can-reliably
Browsing around the collapse-nerd projects this morning on Mastodon reinforces the idea that a web browser and JavaScript is a PC, with a PNG as a floppy. It is a pragmatic choice. Like #CollapseOS vs. #DuskOS , though, I should probably start converting to #LadyBird and #quickjs for longer term.
CVE Alert: CVE-2026-0821 - quickjs-ng - quickjs - https://www.redpacketsecurity.com/cve-alert-cve-2026-0821-quickjs-ng-quickjs/
#OSINT #ThreatIntel #CyberSecurity #cve-2026-0821 #quickjs-ng #quickjs
A post for the geek in your life, which might be you anyway. Ludvig Liljenberg has written a post about creating a C-based function "micro-VM guest" for #hyperlight: with #QuickJS!! https://opensource.microsoft.com/blog/2025/03/10/build-a-hyperlight-c-guest-to-securely-execute-javascript/
Understand how -- and how fast -- you can protect an arbitrary .js file. Then run a bunch of things to test how it works!
🐛 We began writing about our @sovtechfund bug resilience partnership, starting with our Sept 2023 contributions to #Sequoia-PGP and later #OpenPGP.js
🆕 @couchdb 3.4.2 came out! We held a Meetup to introduce #Nouveau and #QuickJS: https://vi.to/hubs/couchdb-berlin
#CouchDB 3.4.2 is out! 🎉
We held a Meetup recently to take a look at the big 3.4.0 feature release that includes #QuickJS and #Nouveau (full recordings: https://vi.to/hubs/couchdb-berlin).
While the Neighbourhoodies worked with Nouveau to prepare presentations, we came across 6 bugs that get fixes in this release — shoutout to Alex Feyerke for finding them! Haven’t upgraded? You’re running out of reasons not to 😉 As always, if your team need help, reach out.
Full release notes: https://docs.couchdb.org/en/stable/whatsnew/3.4.html
@mre Another project that embeds JS inside #WebAssembly through #QuickJS is https://github.com/justjake/quickjs-emscripten by @jitl. I find Jake's solution particulary interesting for its "asyncify" feature, allowing you to expose asynchronous functions into QuickJS that the embedded JS code can access as if they were synchronous. The feature is based on Emscripten's ASYNCIFY and suspends the WASM execution while awaiting a promise.
🎥 We’re going live shortly ⭐
Our online #CouchDB Meetup starts at 17:00 CET, so if you’re not getting up to much tonight, why not join us? Four-legged friends are welcome too!
We’ll be covering what’s new in 3.4.0 + 3.4.1, trying out the new #QuickJS beta, and introducing #Nouveau for fulltext search with @janl, @ninette and Alex Feyerke.
Sign up and discover all the talks: https://vi.to/hubs/couchdb-berlin
🛎️ It’s tomorrow! Are you joining our Online #CouchDB Meetup from 17:00 - 18:30 CET, on Oct 9?
3.4.0 + 3.4.1 have been out for a couple weeks now, and they brought #QuickJS with them. It’s the new #JavaScript engine for CouchDB that speeds up queries and server-side processing.
Get a detailed introduction from @ninette in Talk #2 and learn why others are delighted about how it enhances custom functions.
Sign up and check out the others talks: https://vi.to/hubs/couchdb-berlin
#QuickJS and #Nouveau are a couple #CouchDB 3.4.0 + 3.4.1 updates you can see at our Oct 9 Meetup.
@janl will shed light on 3.4.1 + where 3.4.0 went. Alex Feyerke and @ninette will detail new features:
Talk #1: CouchDB 3.4.0 / 3.4.1 Release Retrospective (Jan Lehnardt)
Talk #2: Introducing QuickJS: CouchDB’s New JavaScript Engine (Ninette Adhikari)
Talk #3: First Steps With Nouveau, CouchDB’s New Fulltext Search (Alex Feyerke)
We’re excited to host you!
Sign up: https://vi.to/hubs/couchdb-berlin
We have updated and switched to use quickjs-ng in radare2, which is a fork of quickjs, but quite more updated and active. The main reason is for maintainance and portability reasons, so we can just upstream our patches 🔥 Kudos to @satk0 for the integration work! #quickjs #javascript #radare2
