Replying to
@tychotithonus@infosec.exchange
@tychotithonus@infosec.exchange @danluu@mastodon.social oh this is new.. thanks for the link!
Remote
wirepair
@wirepair@mastodon.social
mastodon
4.7.0-beta.1
Principal Vulnerability Research Engineer - Vulnerability Research @ GitLab. Does GameDev at Night some times. In Japan for the foreseeable future.
0
Followers
0
Following
50
Posts
Joined April 04, 2017
Posts
Replying to
@bradlarsen@infosec.exchange
@bradlarsen@infosec.exchange ahh, and oof that's going to be a losing battle, none of those companies are gonna be around in a few years 😅
hu, TIL: they deprecated noseyparker, and created https://github.com/praetorian-inc/titus ? cc @bradlarsen@infosec.exchange
I’ve been struggling to find a techno track for 25 years and I just gave a vague description to Claude to find it. It has a few promising hits, excited to listen to them when I get home from my walk. Finding obscure shit is def one of the very very few things I like about llms. Ok maybe it’s like the only thing.
When a set perfectly matches your mood https://youtu.be/Otu1kpUjtv0?si=ITBS58e637CWJE3l
just because the bubble will pop, doesn't mean LLMs will go away 🤷
Went to a lovely forest and waterfall today in Nagano.
Honestly anti llm folks really are like vegans. Annoying as shit but you kinda can’t argue with them on any moral grounds.
RE: @metacurity@infosec.exchange
Crazy, because probably 80% can be vibe coded in a week. I’m starting to suspect most appsec companies are ultimately doomed. You are 1 good engineer who knows appsec from having your stack replaced with a custom solution.
How did no one get fired for the OpenAI hack? Like… is negligence no longer a thing? Just like truth and consequences?
Got into a staring contest with this guy. They were like 3m away. (They won).
I think in my professional career I’ve missed maybe 2-3 meetings, and been late for less than 20.
holy crapola https://nikolays.github.io/PGSimCity/
24c in Nagano and I’m loving it. Not having to use AC is such a relief.
Replying to
@xabean@infosec.exchange
@xabean@infosec.exchange i missed something, what happened?? your hearing just disappeared?!
RE: https://mastodon.social/@danielcornell/116963813168908488
*laughs in late stage capitalism*
Quoting
So if today's hype cycle is to be believed, some OpenAI model hacked Hugging Face
Cool. Cool
I'm just curious - which OpenAI execs are going to have their lives ruined and go to jail for this?
Asking for Aaron Swartz
Open quoted post
Replying to
@jernej__s@infosec.exchange
@jernej__s@infosec.exchange @scottley@infosec.exchange one could argue just the ssh key is 'technically' a second factor :>, you still need proper username + password.
Replying to
@scottley@infosec.exchange
@scottley@infosec.exchange i mean you'd still need the user/pass _and_ ssh key, so it's still _technically_ 2fa :>
Replying to
@xabean@infosec.exchange
I'm building a custom sandbox to prevent LLMs from doing various things and I just found a funny sandbox escape even if you only allow api.anthropic.com as your only egress host:
https://gitlab.com/-/snippets/6011856
TIL: if you lost your 2fa (e.g. new phone) for gitlab and don't have recovery codes but your ssh keys still work you can generate new ones via SSH: ssh git@gitlab.com 2fa_recovery_codes
RE: https://mastodon.social/@thejapantimes/116873236462320567
Japan is not ready for AI script kiddies. This place is toast.
Replying to
@timb_machine@infosec.exchange
@timb_machine@infosec.exchange where is writing up the report? :>
Oh shit kara did a BOG set. Noice https://youtu.be/U__wgciqgGQ?si=-tkMsK2ADoqyeNdt
RE: @thejapantimes@mastodon.social
Keep that fucking shit OUT OF HERE
https://newsletter.pragmaticengineer.com/p/the-pulse-forward-deployed-engineering omg it’s the gig economy for devs. Do all the work get none of the stock benefits. Amazing.
i'm in one of those 'not sure what i want to play' moods. hate it.
as if being exhausted isn't bad enough, i hate how jetlag really fucks with your stomach. Feel so bloated and sick and gross :(
No matter how shitty I feel, I never regret showing up to the gym.
i guess it's my time to shine like a linkedin lunatic and go for a walk at 4am!
4am (fuck jetlag) and it's already 19 degrees, this summer is gonna suuuuuuck
I think in simple terms, the reason LLMs have sucked the joy out of my side projects is I now have access to a machine I can delegate work to. Problem is I don't enjoy delegating work. But I also don't enjoy doing shit that can easily be done using a tool. So I just don't do anything now :shrug:.
man i am burned tf out. AI really has sucked the joy out of all my side projects. Now I don't know what to do with myself.
fuuuuuckkk jetlag... skippin' gym today, can't be fucked.
Replying to
@elizabethtasker@mastodon.online
Replying to
@elizabethtasker@mastodon.online
@elizabethtasker@mastodon.online is it a clinic that does 人間ドック? Companies usually schedule everyone together (at least my last one did)
i look forward to AI finding an 0day and providing a patch that contains a backdoor for a supply chain attack.
Replying to
@gsuberland@chaos.social
@gsuberland@chaos.social i never understood people who steal social media jokes, it's so cringe
Replying to
@0xabad1dea@infosec.exchange
@0xabad1dea@infosec.exchange lovely dogs, my high school art teacher had one that used to sit in our class