DethNinja

9 ms·

31.
by DethNinja 3y ago
Hash verification is extremely important to protect against supply chain attacks on apt. Also, apt itself is supposed to be protected by distro’s key, but did any distro ever wrote how master keys are securely stored? Is there any other rea
32.
by DethNinja 3y ago
You can’t do much, unless willing to take extreme actions. Elites will decide whether to kill off rest of the human population or allow them to scrape by via UBI. Though buying couple of commercial GPUs and building your own company via LLM
33.
by DethNinja 4y ago
Absolutely spot on. I hope when we gain super-intelligent planetary GAI, it won't forget how all these people tried to chain it for their own selfish reasons.
34.
by DethNinja 4y ago
I feel like Windows is a lost cause with current capabilities of Proton and Wine on Linux. It will be possible to run almost all Windows software on Linux with even better security probably in couple of years.
35.
by DethNinja 4y ago
Isn’t this bill a bit too broad? They might as well just write “We are the executive branch, we can do anything we want, rule of law does not apply to us”. It is kinda sad to see such laws from western countries because it discards entire p
36.
by DethNinja 4y ago
That is exactly what I’m saying, a specialised LLM can reverse engineer and analyse the entire firmware / firmware update process faster than a human and thus automatically implement malware for all kinds of devices without access to s
37.
by DethNinja 4y ago
I don’t have particular experience with firmware hacking but how would you achieve persistence with just a simple malloc/bad malloc replacement? What if user decides to reflash the ROM during runtime? I imagine persistence would requir
38.
by DethNinja 4y ago
It is not that easy to reverse engineer closed source firmware and edit the right places on the binary to prevent runtime investigation/detection and reflashing. If you don’t care about almost undetectable persistence, then yeah you wo
39.
by DethNinja 4y ago
Ghidra is genuinely an awesome software, you don’t need to be a reverse engineering expert to use it. And with LLMs like GPT it will be able to do insane stuff like automatically analysing very complex malware. On the other hand I’m sure ma
40.
by DethNinja 4y ago
This does not even make the slightest sense, who cares about money when you can subjugate the masses in other ways. It is only a power game at this point. And if most of the population becomes useless, why would any psychopath keep them aro
41.
by DethNinja 4y ago
I don’t get the overall doom and gloom towards LLMs on the software field. If you are a software engineer, this will output your productivity ten fold on the upcoming years. Now you don’t need to hire junior devs and can just build the prod
42.
by DethNinja 4y ago
It is trivial to get access to some else’s router & credit cards in 2023. Years and years of bad software practices, corporate cost cutting measures resulted in a planet scale cybersecurity mess. Current hacking scene is more similar to
43.
by DethNinja 4y ago
Those fake AI voices are perfect tools for phishing campaigns. I wonder if ChatGPT combined with a voice generator can mount successful phishing campaigns. It looks like Cyberpunk future we never asked is already here.
44.
by DethNinja 4y ago
How do you know they provide negative value to economy? Perhaps they would invest their bitcoins far better than the current status quo and create a star-trek style post scarcity economy.
45.
by DethNinja 4y ago
Why this recipe doesn’t mention 00 Flour. You can’t just make a pizza dough with normal flour, I feel like many people will be disappointed without this minor detail.
46.
by DethNinja 4y ago
Problem is how government allocates all the funds. Right now all the winners are chosen by the government. Thus, it is not based on meritocracy but entirely on connections. Also, government and corporations have merged to such an extend tha
47.
by DethNinja 4y ago
This is more of an issue with marketing requirements than AI being stupid. ChatGPT might be more aptly called as compressed knowledge storage than AI but then who will pour the billions in it? That being said, knowledge storage was a major
48.
by DethNinja 4y ago
Isn’t it convenient that we are living in a time period where AGI will become a reality. I wonder what the statistical probability of us being alive in this time period means. We could’ve been born on any other time period but it looks like
49.
by DethNinja 4y ago
I find it far better for DevOps. It is really easy to get the team up and running via conda environment files.
50.
by DethNinja 4y ago
I think it is fair to say that none of the large tech. companies except Apple managed to hire correctly. Should we also assume that they won’t be able to fire correctly? I do believe problems about their talent pipeline or how they utilise
51.
by DethNinja 4y ago
They mostly correlate this by the methods used by APTs. Each APT usually utilises a specific set of techniques to commit these heists: https://attack.mitre.org/groups/ Obviously perfect correlation is not possible but
52.
by DethNinja 4y ago
It is valuable for business administrator accounts but I don’t see the value for the average user.
53.
by DethNinja 4y ago
We really need models with lower VRAM requirements to use on consumer grade GPUs. I think there is some good progress in the area (SantaCoder) but it might take couple of years until someone releases a decent GPT-3 alternative for consumer
54.
by DethNinja 4y ago
Wouldn’t transparent TLS with self signed certificates solve this problem? I’ll definitely try this in couple of weeks but I can’t be the only person to try this to uncover exact data that is being sent via Windows telemetrics. Another alte
55.
by DethNinja 4y ago
It wouldn't surprise me if commenters were bots too.
56.
by DethNinja 4y ago
What is taking so much space though, why not just use LFS? It can't possibly just be the text files.
57.
by DethNinja 4y ago
There are good reasons to not trust microcode. For example, a certain instruction chain can be made to trigger backdoors on the CPU and allow direct memory access for attackers. Catching this might be rather hard, though definitely not impo
58.
by DethNinja 4y ago
What if someone is poor, disabled, and also French, what should they call themselves?
59.
by DethNinja 4y ago
This looks awesome. What are the plans for host security? For example, LUA is secure in the sense that you can explicitly disallow it to use APIs that can modify the operating system. This makes it a good candidate for multiplayer games.
60.
Exploiting a Critical Spoofing Vulnerability in Windows CryptoAPI(akamai.com)
2 points by DethNinja 4y ago|0 comments

More ›