Marsh Ray
marshray@infosec.exchange
<p>Mostly computer and technical stuff. Radical listener. Tries to be a good person.<br /><a href="https://infosec.exchange/tags/Rust" class="mention hashtag" rel="tag">#<span>Rust</span></a> <a href="https://infosec.exchange/tags/UA" class="mention hashtag" rel="tag">#<span>UA</span></a></p>
Posts
-
Post #4394198
A friend pleaded with me to try some vibe coding tool. Said I would fall behind, etc. “It’s sandboxed,” they said. “It can’t access any files except those you approve on a case-by-case basis.” Against my better judgement, I installed it. It required (lol) node and npm. Sigh. In for a penny and all that. I start the tool and get a nice prompt. I ask it where it’s running. It tells me it’s running locally. I ask it to run a basic check of my nvidia drivers and toolchain. Does a respectable job....
-
Post #4360350
Impressive iOS exploit chain (patched in current update) pois0nSword: From Renderer R/W to Native Calls on iOS 26.1 https://varik.dev/blog/jsc/pois0nsword-native-calls
-
Post #4344509
A friend is imploring me to vibe code but I can't stop asking it to escape its sandbox.
-
Post #4200658
Keep posting those simplistic, cynical hot takes! It’s working. The world will return to the way it was any time now
-
Post #4184900
Watching *The Social Network* for the first time. It’s as if the creators were trying to make MZ look like an unlikable sociopathic loser with no friends and instead made him out to be a computer science genius for making a PHP MySQL website.
-
Post #4087771
@CyberneticForests@assemblag.es To me a simpler framing is: * An optimization goal function created a perverse incentive. * The model under test exhibited unexpected (but not unprecedented) behavior by escaping the test sandbox * Hugging Face was a bystander, were harmed, and filed a police report. * These events may support some of OpenAI’s preferred narratives, but seem to go against others. On the whole OpenAI suffered mild reputational damage. * This was not a conspiracy, a marketing stunt,...
-
Post #4073668
I don’t know how Anthropic is messaging about this, but I’m hearing from users that they are switching to Chinese models for data security tasks out of concern they will be flagged or even banned for asking.
-
Post #4027701
Clearly I picked a good week to read *Fall of Hyperion* by Dan Simmons.
-
Post #4020131
The “So you hate waffles!” index set a record high today. Be careful out there.
-
Post #3924473
If you repeatedly post pictures of rxpists or have an animated icon, I’m probably muting you. Nothing personal. It’s just this app doesn’t allow me to manage these things. The platform doesn’t allow posting a link without the server automatically grabbing some photo (eg promotional photos of the rxpists in question) from the linked website and displaying it full sized on the user’s device. The developers have long known about this and said that they would do something about it, but things see...
-
Post #3920789
Project Excalibur: Nuclear Bomb Pumped X-Ray Laser @ Alexander-the-ok https://youtube.com/watch?v=sM0vMP5zoUw
-
Post #3623335
Things those who build consumer-facing products and services rarely talk about: https://www.uncommonapps.nyc/p/castro-podcasts-things-i-got-wrong-support
-
Post #3476589
After reading Scifi for a few years, I have concluded that there is no space battle like that in *The Dark Forest* Cixin Liu
-
Post #2407637
We’re 4 months into 2026 and a friend used the helpful chatbot that comes built into a web browser to reverse a patch and generate exploit code.
-
Post #2100403
STEM Youtube Goat: Asianometry 3Blue1Brown Great: AlphaPhoenix Styropyro Profesor Dave Explains Lost: Minimuteman Angela Collier Missing: Applied Science Breaking Taps Photonicinduction
-
Post #1819795
37 days after the vulnerability was reported to the #linux kernel security team ... 34 days after kernel patch Reported-by: &quot;0wn @ [vulnerability research org]&quot; ... 7 days after a conspicuously-vague CVE announcement... No patches from #Ubuntu #debian #redhat #fedora
-
Post #1819793
RE: https://mastodon.social/@pid_eins/116459585811044061 Now I’ve seen everything 😂