david_shaw

8 ms·

61.
by david_shaw 1y ago
I love playing with advancing technologies, and although I don't think LLM/Agentic AI is quite ready to change the world, one day soon it might be -- but the volume of individuals falling into AI-induced psychosis is astounding
62.
by david_shaw 2y ago
This is interesting, and not the first time I've seen this sentiment. I don't take immediate issue with the points made here, but I think the conclusion is not entirely correct. Security isn't full, it's just harder an
63.
by david_shaw 2y ago
This is great. I've always been on the application security side of things, but I'm increasingly interested in hardware hacking. Through some cursory research, I learned that there are a few scattered resources, but the best way t
64.
by david_shaw 2y ago
I missed this discussion; thanks for linking it!
65.
FCC proposes cybersecurity labeling program for smart devices(fcc.gov)
35 points by david_shaw 2y ago|4 comments
66.
by david_shaw 2y ago
This is one of my favorite poems -- perhaps because it was my first in-depth exposure to poetry. In high school, I was assigned a poetry explication: it was a combination of poetic analysis and public speaking (I had to deliver my work to t
67.
NSA, FBI, CISA, and Allies Issue Advisory about Russian Military Cyber Actors(nsa.gov)
3 points by david_shaw 2y ago|0 comments
68.
OpenAI Security Slack Bots(github.com)
1 points by david_shaw 2y ago|0 comments
69.
by david_shaw 3y ago
> An entry-level admin is now unemployed, just before the holidays. I highly doubt that entry-level admins at Microsoft have access to DNS for their primary domain. My guess is that this incident is a lot more interesting than that.
70.
by david_shaw 3y ago
For what it's worth, 0bin is an excellent service. I hope you figure things out in a way that causes less of a headache for you.
71.
by david_shaw 3y ago
> The robot doesn't care if you have liaisons over webcam with your lover, or whatever else. The concern isn't judgement from the AI, but that products from the model trained on your data could expose sensitive information. S
72.
by david_shaw 3y ago
There are lots of regional conferences that are really great: NolaCon in New Orleans, THOTCON in Chicago, ShmooCon in D.C., just to name a few :) The hacker community is alive and well (even at DEF CON), but in my experience you have to loo
73.
by david_shaw 3y ago
> Curious what country you live in that Sept 2020 was "pre-pandemic" for you? It was already hitting hard in many countries by then. They almost certainly meant September 2019.
74.
by david_shaw 3y ago
For those looking for an official source outside of the obituary: Dave Kennedy (a longtime infosec pro and, in my opinion, a trusted source) confirmed in a tweet: https://nitter.net/HackingDave/status/1681838080355
75.
by david_shaw 3y ago
I posted a few months ago[1] about Suttree, and was surprised at how many people connected with the book (which I agree is great). I haven't read The Road or Blood Meridian, but when you consider the different styles and structur
76.
by david_shaw 3y ago
Thanks for making and sharing this - although I'm surprised it's not a "Show HN" itself! I was curious about the top post that didn't survive - an HTML5 game called "airma.sh" - and I wanted to check it ou
77.
by david_shaw 3y ago
Is this a fork of (open source but paid-value-add) Standard Notes?
78.
by david_shaw 4y ago
Unrelated to his typewriter, I'm currently reading Cormac McCarthy's Suttree , and I'm really enjoying it. I had previously only associated McCarthy with The Road and Blood Meridian , but I'm glad I gave some of his
79.
by david_shaw 4y ago
> Yes, but we are 4 orders of magnitude away from them. Adding the potential for space industry, this grows to 13 orders of magnitude Would you mind providing a reference for this? I don't doubt your statements, but it would be gr
80.
by david_shaw 5y ago
> My worry would be that as the signal becomes well known abusers will learn it I'm so glad that the signal worked in this case, but you're absolutely correct: the problem with clandestine signals like this is that they need
81.
by david_shaw 5y ago
If the threat you're seeking to mitigate is malicious ads ("malvertisements,") then you could easily pass that burden to the ad networks themselves. I think it's extraordinarily rare for a website to sell "banner sp
82.
Terrorist watchlist exposed via misconfigured Elasticsearch cluster(bleepingcomputer.com)
439 points by david_shaw 5y ago|252 comments
83.
by david_shaw 5y ago
> They aren’t scanning users devices. They are scanning images on iPhones and iPads prior to uploading those images to iCloud. If you're not uploading images to iCloud, your photos won't be scanned -- but if you are using iCl
84.
by david_shaw 5y ago
Thank you for your contributions to WarVOX, and to so many other projects that advanced the security community. I never would have guessed that in 2021 we'd have headlines about IRC drama and wardialing! Maybe history does repeat its
85.
by david_shaw 5y ago
As someone not familiar with "Seasteading," this was a very confusing site visit. I couldn't understand if the "game" took place on a cruise ship, or what the objective of the game was. At first, I thought this mi
86.
by david_shaw 5y ago
> I feel like there isn't really anything similar in the US. I'm not super familiar with the space, but I think this is what WattPad seeks to achieve. I know there have been at least a few stories on there that struck it big
87.
by david_shaw 6y ago
> Would never spend $2+ for a drink that costs about $0.09 to manufacture. Sadly, adhering to this rule would prevent buying coffee and beer -- two things I'm looking forward to as the world re-opens :)
88.
by david_shaw 6y ago
> Does anyone know why services like Google Authenticator were ditched industry wide in favor of SMS codes? It has never made any sense to me. This is not the case in my experience. Many apps that once used Authenticator-based TOTP now
89.
Multiple Security Updates Affecting TCP/IP(msrc-blog.microsoft.com)
9 points by david_shaw 6y ago|3 comments
90.
by david_shaw 6y ago
> Epik. It looks like Parler transferred their domain name to Epik (as a registrar), but are not currently using them for hosting. As recently as a few days ago, Epik explicitly stated that they have no plans to host Parler ( https:&#x

More ›