← Feed

Posts

• Post #4217337

  Agree but with 180 degree opposite valence with a recent non-toot post claiming, "The openai agent sandbox escape ... showed the power and capability of agents" My take: https://designingsecuresoftware.com/writings/ai-agent-parody/

• Post #3561856

  Flock Cameras Can Surveil Cars Without License Plates is actually very clever. This is an instance of the same technique behind browser fingerprinting. Naturally, this suggests a defensive mitigation. Swap removable decals and bumper stickers and different roof racks to make your car untrackable day to day. (Note: it’s surprising to me that it’s necessary given that I can’t recall seeing unlicensed vehicles on the road except for the corner case of new cars with temporary licenses, but these...

• Post #2386723

  @jackwilliambell @carlmalamud @pluralistic Cory was ahead of his time threat modeling back then: a nice injection (unprotected write access) attack leading to info leak potential.

• Post #2386722

  @lcamtuf Only half? Seriously, I'd tweak your #1 to make it less dependent on detecting LLM writing [1] and alter the condition to include quality [2]. If the writing is well written AND makes a good point I'd say it's worthwhile. I doubt there's much of this at all today, but why would it be so bad if it became a thing? NOTES: [1] this isn't easy to detect accurate by software (and will get harder) and manually time consuming, plus false positives would be a loss. [2] Low q...

• Post #2386721

  @PallasRiot @jaredwhite Magyar's strategy sure sounds a lot like the mayor of NYC. Perhaps the next challenge is how do you "press the flesh" in a country with 35x the population (US/Hungary)?

• Post #2386720

  @lcamtuf I'd say that about all punditry. The best reason to look back is to invent a better future, but that's hard work.

• Post #2386719

  I think these qualify: Chapter 3 (mitigations) and 4 (secure patterns) from my book. https://designingsecuresoftware.com/text/ch4-patterns/

• Post #2386718

  Great point. I'd be astonished if any of the crawls consider that - it's a pure externality.