cookiengineer

7 ms·

61.
by cookiengineer 3mo ago
Not trying to derail the discussion, but the reason for me to leave the Rust ecosystem in favor of Go was also the implied culture. Experienced Go devs that stay inside the ecosystem try to write their libraries as "pure go" libra
62.
by cookiengineer 3mo ago
Apple made me realize that I should choose AGPL as a license for my own projects, because I don't agree with the implied contract values of X11/MIT or BSD licenses anymore. The latter licenses I choose now only for things I absolu
63.
by cookiengineer 3mo ago
Not sure why Dolosse are so special? There's lots of different forms and shapes of wave breakers, like the Tetrapods [1] that you can find over here across pretty much every coast in Europe. Maybe I'm just not getting it why the D
64.
by cookiengineer 3mo ago
...but most of all, Samy is my hero!
65.
by cookiengineer 3mo ago
The real question is: why do you follow 800 people that post content like this? In the crypto bubble I used the opportunity to remove all that noise from my stream. Unsubbed from everyone with Crypto in their job title with no regrets. Doin
66.
by cookiengineer 3mo ago
> Michelangelo Did you know that Michelangelo was the first "label" for inventions and art? He sourced his material from other people and published it for them. So it's kinda ironic (maybe on purpose?) that you mentioned h
67.
by cookiengineer 3mo ago
As a counter argument to your marketing fluff comment: Name a single instance of right wing parties that did not violate all human rights the second they got in power. Name one, I dare you. And no, historically such a fairytale world does n
68.
by cookiengineer 3mo ago
For people that love OpenRA: some friends and me started to play the Continue Mod a lot more recently. It's tons of fun, the mod author basically rebuilt zero hour with actual real weapon stats, vehicles, ships, infantry etc. It's
69.
by cookiengineer 3mo ago
Maybe Volvo has some Swedish brand advertising running on Fox news?
70.
by cookiengineer 3mo ago
> They got a democratic mandate. Fun fact that is missing in US history education: Hitler was a legally elected chancellor. Don't skip history class, kids.
71.
by cookiengineer 3mo ago
Kind of funny that you're assuming that you are not paying with your data in both cases. Do I need to remind you how LLMs are being trained? ...or that Anthropic claimed their codebase is 100% vibecoded, making it uncopyrightable by th
72.
by cookiengineer 4mo ago
> yes the ps3 is now considered a retro console. kids these days... stares at the C64 in the corner
73.
by cookiengineer 4mo ago
I'm the guy that built the antimiasma discovery and mitigation tool [1] and has seen a lot of the evolved and ever-changing malware samples (17 unique deobfuscated samples with different code branches and adapters/functions/f
74.
by cookiengineer 4mo ago
My opinion is somewhat that the last "real" cyberdeck was the Hackberry Pi, which is essentially the Blackberry I always wanted and that they never produced. Due to it being fully open, there's an insane amount of 3d printing
75.
by cookiengineer 4mo ago
On top of that, it's a threat model that doesn't make really sense from an attacker vs defender perspective. Because it's optional, and all kinds of other libraries and tools can just blatantly ignore it anyways. CORS literal
76.
by cookiengineer 4mo ago
Note that the AUR attacks were part of the larger miasma worm campaign, gradually trying to gain more control through various package ecosystems since the RedHat prototype campaign. Mitigation Tool: https://github.com/cookie
77.
by cookiengineer 4mo ago
Working on exocomp [1] and gooey [2]. The former being an agentic environment for pentesting and reverse engineering and the latter being a UI framework in Go. Currently working on some networking parts, because I want multiple exocomp inst
78.
by cookiengineer 4mo ago
> Someone or something should vuln-scan these packages as they're published, as a number of companies do for NPM now. That would likely have found these pretty quickly. No. It wouldn't have. That's the whole point of the m
79.
by cookiengineer 4mo ago
I kinda like where you are going with this. But I think the only way to establish these laws would be an IT competent judicative branch of the government... which, as we all know, is pretty incompetent in these manners.
80.
by cookiengineer 4mo ago
I would disagree here. Building a good and working coding harness with smaller models is really hard. Everything evolves around the limited context size. Tools must be specification driven to reduce noise and high temp hallucinations, tool
81.
by cookiengineer 4mo ago
Yes, the miasma worm does this since the new Hades campaign. Note that the 3rd wave now also uses a pth file in pypi packages that _search system wide_ for any index.js or .github/setup.js to find its own payload. It literally splits u
82.
by cookiengineer 4mo ago
> "cd folder" does nothing. That's like recommending to use the xterm on Windows. Statistically, nobody uses their computer that way anymore. The world has moved on since the 1990s. I was only not affected because I use a
83.
by cookiengineer 4mo ago
> If you force every user to just write "mut", guess what will happen? This is the wrong analogy. The equivalent analogy would be using a compiler flag that is triggered for all dependencies and all included libraries without a
84.
by cookiengineer 4mo ago
Microsoft's introduction of 2 hour latencies for vscode extension installations to mitigate the ongoing worm spread is absolutely bonkers. They did not read the source code of the worm implant and have absolutely no clue how the worm w
85.
by cookiengineer 4mo ago
What a pointless change. If you force every user to just use "--enable-unsecure-feature", guess what will happen? This is not about improving security. This is about shifting blame. A much better alternative would've been the
86.
by cookiengineer 4mo ago
No, it spreads if you open a folder. That's the point why developers all underestimate the worm's capabilities.
87.
by cookiengineer 4mo ago
I created a mitigation tool that can be used to fix/remove the worm from all infected repositories, and did a writeup about this. On Monday, the Hades campaign introduced Composer, Go and Pip support. Before that it had only support fo
88.
Malware Insights – Miasma Campaign(cookie.engineer)
3 points by cookiengineer 4mo ago|0 comments
89.
by cookiengineer 4mo ago
An LLM agent will only be as good as the environment it operates in. If you build your environment to be specification based, you have to make sure you have good specifications. If your "memory solution" uses freeform markdown not
90.
by cookiengineer 4mo ago
You forgot the *allegedly in there.

More ›