Remote
0
Followers
0
Following
50
Posts
Joined December 20, 2022
Github:
Bluesky:
@marshray.bsky.social
Discord:
marshray
Email:
marshray & live ! c0m
Twitch:
Type:
Static, strict
Posts
Replying to
@jackemled@furry.engineer
@jackemled@furry.engineer Any OS that can’t extract from the background activity of a 2011-era laptop enough entropy to initialize its RNG within a few seconds is broken.
Possibly the system is making an overly-conservative assessment based on portability to some worst-case embedded hardware scenario.
Open post
A friend pleaded with me to try some vibe coding tool. Said I would fall behind, etc.
“It’s sandboxed,” they said. “It can’t access any files except those you approve on a case-by-case basis.”
Against my better judgement, I installed it. It required (lol) node and npm. Sigh. In for a penny and all that.
I start the tool and get a nice prompt. I ask it where it’s running. It tells me it’s running locally. I ask it to run a basic check of my nvidia drivers and toolchain. Does a respectable job.
Then I ask it more about its runtime configuration. Now it admits that it’s running in some unknown data center. “Who’s paying for this, and why?” I wonder.
I request a directory listing. An out-of-band-looking UI control appears politely asking permission to read the contents of the project directory. Wonderful! Warm fuzzies wash over to see a purposeful and ergonomic sandbox in action.
Friends, this “sandbox” is a lie. A scam. A total fraud.
The AI has unrestricted bash shell access.
0
0
0
0
Open post
Replying to
@roytanck@mastodon.online
@roytanck@mastodon.online If you're friendly with a local mechanic, machinist, or welder they can probably extract that broken half-screw easily for you
0
0
0
0
Open post
Impressive iOS exploit chain
(patched in current update)
pois0nSword: From Renderer R/W to Native Calls on iOS 26.1
https://varik.dev/blog/jsc/pois0nsword-native-calls
0
0
0
0
Open post
Keep posting those simplistic, cynical hot takes!
It’s working.
The world will return to the way it was any time now
0
0
0
0
Open post
Watching *The Social Network* for the first time.
It’s as if the creators were trying to make MZ look like an unlikable sociopathic loser with no friends and instead made him out to be a computer science genius for making a PHP MySQL website.
0
0
0
0
Open post
Replying to
@simontatham@hachyderm.io
@simontatham@hachyderm.io Using messages to hold state is typical freedesktop org design
0
0
0
0
Open post
Replying to
on assemblag.es
@CyberneticForests@assemblag.es To me a simpler framing is:
- An optimization goal function created a perverse incentive.
- The model under test exhibited unexpected (but not unprecedented) behavior by escaping the test sandbox
- Hugging Face was a bystander, were harmed, and filed a police report.
- These events may support some of OpenAI’s preferred narratives, but seem to go against others. On the whole OpenAI suffered mild reputational damage.
- This was not a conspiracy, a marketing stunt, or planned in advance.
0
0
0
0
Open post
Replying to
@syferdet@toad.social
@syferdet@toad.social @ratvet@retro.pizza Is that what this is?
I thought maybe they were time travelers from ancient Egypt or something.
0
0
0
0
Open post
I don’t know how Anthropic is messaging about this, but I’m hearing from users that they are switching to Chinese models for data security tasks out of concern they will be flagged or even banned for asking.
0
0
0
0
Open post
Replying to
@marshray@infosec.exchange
0
0
0
0
Open post
Replying to
@kdkorte@fosstodon.org
@kdkorte@fosstodon.org On Linux it’s the other way around. You have to install unwanted drivers in order to open simple windowed applications.
E.g. look at the set of transitive dependents of avahi and bluetooth.
0
0
0
0
Open post
Replying to
@mitsuhiko@hachyderm.io
@mitsuhiko@hachyderm.io There are real trade offs of course but it’s been really difficult watching people whose views I mostly respected get stuck in ideological beliefs.
0
0
0
0
Open post
Replying to
@lcamtuf@infosec.exchange
@lcamtuf@infosec.exchange BS170
How long do you think it can dissipate 15W ?
0
0
0
0
Open post
If you repeatedly post pictures of rxpists or have an animated icon, I’m probably muting you.
Nothing personal. It’s just this app doesn’t allow me to manage these things.
The platform doesn’t allow posting a link without the server automatically grabbing some photo (eg promotional photos of the rxpists in question) from the linked website and displaying it full sized on the user’s device.
The developers have long known about this and said that they would do something about it, but things seem to be moving the other direction.
They have since *removed* the ability to copy links rather than opening them directly, which I relied upon to exercise a tiny bit of control over my web privacy.
0
0
0
0
Open post
Replying to
@ivorytusk@kolektiva.social
@ivorytusk@kolektiva.social @hyc@mastodon.social @jensorensen@mastodon.social Really? How much of which ones?
0
0
0
0
Open post
Project Excalibur: Nuclear Bomb Pumped X-Ray Laser
@ Alexander-the-ok
https://youtube.com/watch?v=sM0vMP5zoUw
0
0
0
0
Open post
Open post
Replying to
@RueNahcMohr@infosec.exchange
@RueNahcMohr@infosec.exchange I enjoy your updates!
0
0
0
0
Open post
Replying to
@rwhitworth@infosec.exchange
@rwhitworth@infosec.exchange It’s figuring out where you cluster by testing your susceptibility to various rabbit holes.
0
0
0
0
Open post
Replying to
@sen@hachyderm.io
@sen@hachyderm.io Stupid people really don’t like being reminded of that.
0
0
0
0
Open post
Replying to
@azonenberg@ioc.exchange
@azonenberg@ioc.exchange @uberduck@hachyderm.io Long ago I worked in the office next to a guy trying to debug a random glitch that only occurred when several of our PCI cards were loaded into an expansion chassis.
It took six months and they had to rent some super fancy logic analyzer.
This was probably pre PCIe, maybe PCIx.
0
0
0
0
Open post
Replying to
@Moss@beige.party
@Moss@beige.party @catmisgivings@stranger.social @futurebird@sauropods.win I regularly think of that 2 seconds of the opening montage as well
0
0
0
0
Open post
Replying to
@Moss@beige.party
@Moss@beige.party @futurebird@sauropods.win Huh. I thought the helicopter sound was made by John Fogerty’s guitar.
0
1
0
0
Open post
Replying to
@mjd@mathstodon.xyz
@mjd@mathstodon.xyz I was stuck trying to install Linux on my new laptop.
ChatGPT helped me confirm an idea I had for a combination Greek/Latin military pun and now that I have a suitable hostname I can continue the installation.
0
0
0
0
Open post
Replying to
@DeltaWye@tiggi.es
@DeltaWye@tiggi.es Headset/earbuds with mic
3.5 mm TRRS
https://en.wikipedia.org/wiki/Phone_connector_(audio)#TRRS_standards
2
1
0
0
Open post
Replying to
@kornel@mastodon.social
@kornel@mastodon.social I just leave it as another Ctrl.
The more the better?
0
0
0
0
Open post
Replying to
@kornel@mastodon.social
@kornel@mastodon.social On Linux I’ve got Caps Lock, Ctrl, Shift, Alt, and Super mappable. That’s just on the left side.
0
1
0
0
Open post
Replying to
@mjg59@nondeterministic.computer
@mjg59@nondeterministic.computer It’s wild that the agent protocol supports extensions but not the main secure comms channel.
0
0
0
0
Open post
Replying to
@petealexharris@mastodon.scot
@petealexharris@mastodon.scot @johncarlosbaez@mathstodon.xyz It does seem to fit right there at the dawn of “using language to coordinate with people other than those you share food with every day”.
0
0
0
0
Open post
Replying to
@petealexharris@mastodon.scot
@petealexharris@mastodon.scot @johncarlosbaez@mathstodon.xyz I do find it really interesting that this idea of a uniquely capable yet maliciously compliant non-human entity is one of our ancient and universal cross cultural archetypes.
14
0
3
0
Open post
Things those who build consumer-facing products and services rarely talk about:
https://www.uncommonapps.nyc/p/castro-podcasts-things-i-got-wrong-support
0
0
0
0
Open post
Replying to
@jsbarretto@social.coop
@jsbarretto@social.coop Process environment can change almost any cargo setting. IDEs and other dev tools commonly modify it.
On unix the env or export -p commands can be used to display the environment. On windows its set.
0
1
0
0
Open post
Replying to
@jsbarretto@social.coop
@jsbarretto@social.coop IDK but I’d be interested to learn how this turns out.
Have you tried running it from a minimal process environment?
0
1
0
0
Open post
Replying to
@thecybersecguru@infosec.exchange
@thecybersecguru@infosec.exchange No, I will not repost your low-effort hashtag spam.
0
0
0
0
Open post
Replying to
@lkundrak@metalhead.club
@lkundrak@metalhead.club @brouhaha@mastodon.social @larsbrinkhoff@mastodon.sdf.org @mhoye@cosocial.ca Also CRT tubes can hold a surprising charge for several days or even weeks after being turned off.
During operation there are typically hundreds of volts on the pins on the neck of the tube. You can get a significant tube discharge off of these pins too.
0
0
0
0
Open post
Replying to
@sanityinc@hachyderm.io
0
0
0
0
Open post
Replying to
@mcc@mastodon.social
@mcc@mastodon.social Affordances surface complexity and “flat” design is little more than attempt to conceal the symptoms.
0
0
0
0
Open post
After reading Scifi for a few years, I have concluded that there is no space battle like that in
*The Dark Forest*
Cixin Liu
0
0
0
0
Open post
Replying to
@ldelossa@fosstodon.org
@ldelossa@fosstodon.org They explicitly, intentionally host blogs promoting certain 1930’s German political ideologies. I mean like, literal translations of political speeches with the flags, graphics, etc. Not subtle or ambiguous in any way.
That’s the domain you’re publishing on.
1
1
0
0
Open post
Open post
Replying to
@m8urnett@infosec.exchange
@m8urnett@infosec.exchange 2004 called and wants its “Secure Message Attachment”s back.
0
0
0
0
Open post
Replying to
@JuliaRez@chaos.social
@JuliaRez@chaos.social @device@infosec.exchange @GeePawHill@mastodon.social That’s a good line. Ironically, there probably were more women in computing in 1975.
1
1
0
0
Open post
Replying to
@maswan@mastodon.acc.sunet.se
1
0
0
0
Open post
Replying to
@joe@f.duriansoftware.com
@joe@f.duriansoftware.com @nyquildotorg@gts.nyquil.org I recall years ago a developer on Chrome giving either 0.01% or 0.001% as the fraction of users who change default settings.
1
0
1
0
Open post
Replying to
@argv_minus_one@mastodon.sdf.org
@argv_minus_one@mastodon.sdf.org @cadey@pony.social ‘Responsible disclosure’ was a brief attempt at language engineering by Microsoft which was largely abandoned 15-20 years ago.
Turns out that finger-pointing during a crisis is almost never helpful or appreciated.
0
0
0
0
Open post
We’re 4 months into 2026 and a friend used the helpful chatbot that comes built into a web browser to reverse a patch and generate exploit code.
1
1
1
0
Remote instance
infosec.exchange
Open on original server