bandrami

25 ms·

841.
by bandrami 9mo ago
I prefer my C compiler to write my asm for me from my C code but I can still (and sometimes have to!) read the asm it creates.
842.
by bandrami 9mo ago
> there’s not an easy 3rd economy There isn't right now but India very much wants to be that in about a decade
843.
by bandrami 9mo ago
OTOH if you have apt, you have arbitrary shell commands (hooray dpkg-hooks!) Golden years for cybersecurity people
844.
by bandrami 9mo ago
Because the injected malicious prompt told them to
845.
by bandrami 9mo ago
As an infosec guy I'm going to go ahead and buy a bigger house
846.
by bandrami 9mo ago
And that tells me you're on the dev end of the devops spectrum while I'm fully on the ops side. I write very small pieces of software (the time it takes to type them is never the bottleneck) that integrates in-house software with
847.
by bandrami 9mo ago
I'd like it to take less time to correct than it takes me to type out the code I want and as of yet I haven't had that experience. Now, I don't do Python or JS, which I understand the LLMs are better at, but there's a wh
848.
by bandrami 9mo ago
They would pay to see whatever local files your settings and skills allow the agent to see (plus whatever skills they infiltrated, something you'll have zero visibility about)
849.
by bandrami 9mo ago
I work in a DFARS-compliant office and I keep forgetting the world isn't like that
850.
by bandrami 9mo ago
Wait of course I was assuming a local model. People aren't using hosted AI on machines holding data that they care about being exfiltrated, right?
851.
by bandrami 9mo ago
True, the frame is addressed to the router's hw interface but I'm talking to people who think NAT drops traffic so I figured keep it simple But, yes, the ISP (or whoever has compromised/suborned/social engineered the ISP
852.
by bandrami 9mo ago
Same year, I tried this cool new "Mosaic" software and thought it was a cool proof of concept, but there was no way this web thing could ever displace gopher
853.
by bandrami 9mo ago
An exfiltrator would have a blind upload box sitting somewhere the poisoned prompt knows about
854.
by bandrami 9mo ago
nvi hasn't meaningfully changed in almost 20 years. It's OK for software to be finished.
855.
by bandrami 9mo ago
> That means my data never leaves my device I mean, if you vibecoded it you don't actually know that, do you?
856.
by bandrami 9mo ago
ob https://xkcd.com/1172/
857.
by bandrami 9mo ago
> If you build off someone else's work (as is the norm) you need to reproduce first. Not if the result you're building off of is a model, you can just assume it
858.
by bandrami 9mo ago
Grad students have this weird habit of eating food and renting places to live, though, so that's also money
859.
by bandrami 9mo ago
Sure, about 3/4 of the time the answer is on the first page of results
860.
by bandrami 9mo ago
ISPs were the vector for Eagerbee. Don't trust your next-hop router.
861.
by bandrami 9mo ago
I didn't say they would have the same capabilities, I said they would have the same security
862.
by bandrami 9mo ago
Do you trust the state actors who have compromised it?
863.
by bandrami 9mo ago
Google "Eagerbee"
864.
by bandrami 9mo ago
You're missing the part where the ISP is the one doing it
865.
by bandrami 9mo ago
Four different drones, or one drone with four tool attachments. The robot shouldn't need to "use a trowel"; it should be a trowel.
866.
by bandrami 9mo ago
There's an implicit trust of ISPs in the comments that I find concerning
867.
by bandrami 9mo ago
The ISP is the primary threat vector here (do you trust yours? Along with their contractors and anyone who might have compromised them?). But like I said route-poisoning attacks do exist.
868.
by bandrami 9mo ago
But it really doesn't. If you turned off NAT your computers would have the exact same security as they do with NAT.
869.
by bandrami 9mo ago
> there is no meaningful practical way to allow inbound connections without the client explicitly defining them This... just isn't true though. Your router knows it has one network on one interface and one network on another interf
870.
by bandrami 9mo ago
Which, again, only helps you against attackers who are on the other side of a router you trust. Do you trust your ISP?

More ›