Brad Larsen
bradlarsen@infosec.exchange
<p>Software toolsmith: application security, automated bug finding, secrets detection</p>
Posts
-
Post #3677498
I saw a service offering "115M ethically-sourced residential IPs". Is there even such a category for ethical residential proxies, or are they all underhanded things and botnets??
-
Post #3672315
Doing fuzz testing, I've seen the same performance bug in parsers for at least 3 systems, where a line number for location reporting is determined from a byte offset by looping through the input, itself done in a loop. Surprise O(n^2)! It probably doesn't show up easily in "normal" use patterns, but when you start fuzz testing you hit it all the time.
-
Post #3083687
Aetna sending me an apology email for their AI slop search feature. They are &quot;taking steps&quot; and I can call them to talk to a human. A word extruder answering health and insurance policy questions. What could possibly go wrong??
-
Post #3083686
I play double bass, but also sometimes play electric bass through headphones after my kids go to bed. It&#39;s interesting to me that I can tell when my ears get tired! After 40 minutes or so, I have a harder time distinguishing between half steps below 60Hz or so... they all start to sound samesies
-
Post #3083685
The last couple months I have noticed a UI bug on several major websites on mobile: you scroll down a while, then make the &quot;scroll to top&quot; gesture. The page scrolls to the top, but form elements (like a search bar) become unselectable until a full page refresh. My (non-techie) spouse has also noticed this and was complaining about it today! Are all these sites using the same Javascript framework that introduced a bug or breaking change a couple months ago??
-
Post #3083684
@regehr once pointed out that Anthropic&#39;s logo for Claude looks like something else, and I cannot unsee it now