I hear you. This pretty daunting: https://cve.0xosprey.com/

It's ok, the more companies have airgap systems the better.

Valid, but...

1. I would like this better if it were not in LLM-speak.

2. You do not owe your employer more than your 40 hours per week (average). If you're overworked, that's a decision on your employer's part. Do what you can, advocate for appropriate investment in compensating controls, burn-down of tech debt, prioritize the issues... but don't hurt yourself.

I feel that LLM-assisted writing really undercuts the point of what is ostensibly a cri du coeur...

> This page ships no JavaScript

Would be more convincing if the page didn't have JavaScript.

The CVE will continue until the morale improves

I believe at the current rate, it should be considered to look to different ways to audit your software instead of CVEs. It was already unmanageable before AI, now it is impossible to triage.

> I patched on Monday. Tuesday was Patch Tuesday. Wednesday was Exploit Wednesday, because somebody read Tuesday’s diff.

Claude wrote this. And you can tell nobody actually read carefully, because it couldn't even get three items into a list without saying something incongruous (if somebody "read Tuesday's diff", that's Tuesday's CVE, not a new one on Wednesday, the thing being complained about).

https://www.pangram.com/history/3b7a78c1-a76e-4a93-8eef-7aee...

There's some irony in releasing a wholly AI-generated page with a lack of attention to detail to complain about the AI-induced security catastrophe stemming from a lack of attention to detail.