Marsh Ray
marshray@infosec.exchange
<p>Mostly computer and technical stuff. Radical listener. Tries to be a good person.<br /><a href="https://infosec.exchange/tags/Rust" class="mention hashtag" rel="tag">#<span>Rust</span></a> <a href="https://infosec.exchange/tags/UA" class="mention hashtag" rel="tag">#<span>UA</span></a></p>
Posts
-
View post
A friend pleaded with me to try some vibe coding tool. Said I would fall behind, etc. “It’s sandboxed,” they said. “It can’t access any files except those you approve on a case-by-case basis.” Against my better judgement, I installed it. It required (lol) node and npm. Sigh. In for a penny and all that. I start the tool and get a nice prompt. I ask it where it’s running. It tells me it’s running locally. I ask it to run a basic check of my nvidia drivers and toolchain. Does a respectable job....
-
View post
Impressive iOS exploit chain (patched in current update) pois0nSword: From Renderer R/W to Native Calls on iOS 26.1 https://varik.dev/blog/jsc/pois0nsword-native-calls
-
View post
A friend is imploring me to vibe code but I can't stop asking it to escape its sandbox.
-
View post
Keep posting those simplistic, cynical hot takes! It’s working. The world will return to the way it was any time now
-
View post
Watching *The Social Network* for the first time. It’s as if the creators were trying to make MZ look like an unlikable sociopathic loser with no friends and instead made him out to be a computer science genius for making a PHP MySQL website.
-
View post
@CyberneticForests@assemblag.es To me a simpler framing is: * An optimization goal function created a perverse incentive. * The model under test exhibited unexpected (but not unprecedented) behavior by escaping the test sandbox * Hugging Face was a bystander, were harmed, and filed a police report. * These events may support some of OpenAI’s preferred narratives, but seem to go against others. On the whole OpenAI suffered mild reputational damage. * This was not a conspiracy, a marketing stunt,...
-
View post
I don’t know how Anthropic is messaging about this, but I’m hearing from users that they are switching to Chinese models for data security tasks out of concern they will be flagged or even banned for asking.
-
View post
Clearly I picked a good week to read *Fall of Hyperion* by Dan Simmons.
-
View post
The “So you hate waffles!” index set a record high today. Be careful out there.
-
View post
If you repeatedly post pictures of rxpists or have an animated icon, I’m probably muting you. Nothing personal. It’s just this app doesn’t allow me to manage these things. The platform doesn’t allow posting a link without the server automatically grabbing some photo (eg promotional photos of the rxpists in question) from the linked website and displaying it full sized on the user’s device. The developers have long known about this and said that they would do something about it, but things see...
-
View post
Project Excalibur: Nuclear Bomb Pumped X-Ray Laser @ Alexander-the-ok https://youtube.com/watch?v=sM0vMP5zoUw
-
View post
Things those who build consumer-facing products and services rarely talk about: https://www.uncommonapps.nyc/p/castro-podcasts-things-i-got-wrong-support
-
View post
After reading Scifi for a few years, I have concluded that there is no space battle like that in *The Dark Forest* Cixin Liu
-
View post
@davidcelis@xoxo.zone “May no grass grow on your pastures until the day MechaHitler has met the fate of its idol.” - Akiraveliara, 2025
-
View post
We’re 4 months into 2026 and a friend used the helpful chatbot that comes built into a web browser to reverse a patch and generate exploit code.
-
View post
@JessTheUnstill This is just a magnificent formulation of such a fundamental issue. Now weeks later, I find myself thinking about it.
-
View post
STEM Youtube Goat: Asianometry 3Blue1Brown Great: AlphaPhoenix Styropyro Profesor Dave Explains Lost: Minimuteman Angela Collier Missing: Applied Science Breaking Taps Photonicinduction
-
View post
@soatok nice post, reading it now… My understanding is that the identity element for addition is zero the identity element for multiplication is one edit: also, the *absorbing* element for multiplication is zero …?
-
View post
37 days after the vulnerability was reported to the #linux kernel security team ... 34 days after kernel patch Reported-by: &quot;0wn @ [vulnerability research org]&quot; ... 7 days after a conspicuously-vague CVE announcement... No patches from #Ubuntu #debian #redhat #fedora
-
View post
RE: https://mastodon.social/@pid_eins/116459585811044061 Now I’ve seen everything 😂