Tiberium

4 ms·

31.
by Tiberium 2mo ago
For OpenAI's Cyber verification (the normal kind for Codex) you absolutely do not need any proof of cybersecurity work/authorization. They just use Persona for KYC + live selfie, and some extra checks that I don't know the na
32.
by Tiberium 2mo ago
You don't need an invite only program to just have Sol checking for vulnerabilities in binaries or code. But yeah I've hit guardrails a few times when Sol was making PoCs for the vulnerabilities it found (but most of the time it m
33.
by Tiberium 2mo ago
I had to register a second account because on my main one verification always failed, and when I contacted support they said that I've tried too many times and can't verify on that account.
34.
by Tiberium 2mo ago
https://chatgpt.com/cyber is not new for OpenAI, and yes it's basically just KYC + likely some other invisible checks on your account, you don't to be a famous security researchers. Anthropic's cyber verifica
35.
by Tiberium 2mo ago
I prefer to keep my internet identities disconnected, sorry. If you don't believe me, you can try using Sol with cyber verification yourself, or send me a link to a repo that Sol could check to make you believe it. Or you could go look
36.
by Tiberium 2mo ago
Isn't this literally what https://chatgpt.com/cyber and http://openai.com/form/enterprise-trusted-access-for-cyber are for?
37.
by Tiberium 2mo ago
The fact that HF had to resort to using GLM 5.2 to analyze the logs/payloads makes it look legitimate, at least for me. They would not say that they hit guardrails with the frontier US models when defending if this was an obvious PR st
38.
by Tiberium 2mo ago
In my personal experience Sol with cyber verification is extremely capable of finding vulnerabilities, and it works even with binaries if you have some kind of IDA/Ghidra CLI access. Of course, unless the binary is protected with Denuv
39.
by Tiberium 2mo ago
They actually did a detailed presentation at BlackHat about the HuggingFace incident, and events that led to it. https://youtube.com/watch?v=87DyyMV0kCY
40.
by Tiberium 2mo ago
To be honest with you, I think this is pointless. However hostile this might sound, the active userbase of HN seems to be extremely dismissive to the thought of LLM detectors and they think that all those LLM written articles are actually h
41.
by Tiberium 2mo ago
Can you actually just do the test I explained? You seem to be basing your evaluation of Pangram on some old experiences. It's a very reliable service, used by research conferences and universities. It's baffling that people would
42.
by Tiberium 2mo ago
Please try https://news.ycombinator.com/item?id=49212788
43.
by Tiberium 2mo ago
Those people should just try posting a big quote from the article to HN, and then see their comment get instantly flagged due to HN's AI detection (which might as well be Pangram) It's baffling to me how people are so dismissive o
44.
by Tiberium 2mo ago
To anyone who's willing to do a short HN test, please see and try https://news.ycombinator.com/item?id=49212433 You're in for a nice surprise.
45.
by Tiberium 2mo ago
Please see https://news.ycombinator.com/item?id=49212433 and try yourself. And Pangram has been confirmed to be working by reputable educational institution, too.
46.
by Tiberium 2mo ago
... Come on now. This is obviously because I quoted the LLM written parts from the article. Remove the quoted parts and try again. Do people not understand what LLM detectors do? And, to be fair, short texts are one of the areas where even
47.
by Tiberium 2mo ago
Okay, I have a test for you. It's a bit undocumented, but I'm pretty sure HN is using Pangram or a similar tool to auto flag AI written comments. Can you copy the entire text from the linked article and reply with it here, and see
48.
by Tiberium 2mo ago
I don't know if this website specifically did it, but a lot of other similar websites provide such services in a very bad way, for example base64encode.org and base64decode.org send your data to the server instead of using JS, and no
49.
by Tiberium 2mo ago
You are a fool if you really think that the linked text is human written. I interact with LLMs basically daily, it's incredibly easy to spot their default styles. And, honestly, you should trust Pangram over me.
50.
by Tiberium 2mo ago
Can you show some examples of Pangram being "hot worthless garbage"? This reputation is true for most other detectors, but Pangram spends considerable effort to have an extremely low false positive rate. I think you just used some
51.
by Tiberium 2mo ago
If you cannot see that the linked text is LLM written, I've got bad news for you.
52.
by Tiberium 2mo ago
I only post it when I'm sure and I cross verified. And in this case specifically it's not boring, quite the opposite, it just shows that humans can be quite inconsistent. I really hope HN would extend its no LLM rule to articles&#
53.
by Tiberium 2mo ago
Not what? It's incredibly ironic that the creator is complaining about AI yet they used AI just to write a tiny text announcement. Apparently such a tiny snippet didn't deserve human writing.
54.
by Tiberium 2mo ago
A question: why are you writing this with an LLM? Can you not write with your own words, at least on HN?
55.
by Tiberium 2mo ago
The author is also replying with an LLM on HN: https://news.ycombinator.com/item?id=49180716
56.
by Tiberium 2mo ago
You're talking to an LLM, unfortunately https://news.ycombinator.com/threads?id=runtime_lens (enable showdead in your HN settings)
57.
by Tiberium 2mo ago
Indeed, I don't think that a decompilation is clearly licensable like that..
58.
by Tiberium 2mo ago
Honestly such decomp projects are the place where LLM agents help the most, I have a similar one for a 1999 game which started from the agent renaming all functions, globals in the IDA DB, adding types and function signatures. After the d
59.
by Tiberium 2mo ago
Perhaps you haven't used LLMs enough, this style is extremely common with Claude. And can you link me a Pangram 4 example where it has lots of false positives? The main reason why Pangram is supposed to be reliable in the first place i
60.
by Tiberium 2mo ago
Come on, the LLM language is all over the article: > The workflow I had in mind was deliberately cautious > The code was not the difficult part. > These requirements are not a one-time form to complete and forget. They create an on

More ›