denysvitali

3 ms·

31.
by denysvitali 3mo ago
Same!
32.
Going Beyond Zero: A New Paradigm for Enterprise Security(blog.google)
4 points by denysvitali 3mo ago|0 comments
33.
Apertus 1.5(apertus-ai.org)
2 points by denysvitali 3mo ago|0 comments
34.
by denysvitali 3mo ago
Nice! I've built something like this, although specific to GitHub: https://github.com/denysvitali/gh-proxy The idea being that if the fake token leaks from my sandbox - it would be completely useless for an attack
35.
by denysvitali 3mo ago
Posted about this back in May: https://blog.denv.it/posts/i-was-likely-targeted-by-dprk-in-... In my case it was a .vscode hook. Stay safe out there :)
36.
by denysvitali 3mo ago
As someone who hosted it for a very long time - don't. Not worth the effort, it's a huge pain. Great learning lesson, but very frustrating (IP reputation is everything, blocking spam is beyond hard)
37.
The CCS2 Attack Surface on EV Chargers (SSH Root:Root)(saiflow.com)
4 points by denysvitali 3mo ago|0 comments
38.
by denysvitali 3mo ago
No, it doesn't (AFAIK), but resets do expire
39.
by denysvitali 3mo ago
I still don't understand why, for a blog, a static page isn't enough - especially since most of the WordPress issues are "solved" by adding caching. I do understand it from an user perspective (it's easier to tell t
40.
by denysvitali 3mo ago
Use CodexBar: https://github.com/steipete/CodexBar
41.
by denysvitali 3mo ago
FWIW, this was announced before the day where the +50% limit promotion from May was supposed to end, so effectively continuing the promotion. This will mean that you retain the same usage instead of seeing it drop. I guess if they'd re
42.
by denysvitali 3mo ago
Yes, past 150 seats you have to switch to Enterprise (IIRC)
43.
Codex Resets(codex-resets.com)
312 points by denysvitali 3mo ago|200 comments
44.
by denysvitali 3mo ago
Same reason one uses VSCode locally
45.
by denysvitali 3mo ago
No. Ran `grok` in `$HOME` and the CLI uploaded the whole home content. This is not the LLM going rogue or reading all files.
46.
by denysvitali 3mo ago
The post is still there: https://x.com/a_green_being/status/2076598897779020159 Not sure which weirdness happened here
47.
Grok CLI uploaded the whole home directory to GCS(twitter.com)
439 points by denysvitali 3mo ago|403 comments
48.
by denysvitali 3mo ago
Will be there soon according to the last commits in the codex repo: https://github.com/openai/codex/pull/31684/changes Also, confirmed it works for me by using --model gpt-5.6-sol
49.
GitHub Status – Let's put out an impact statement first(twitter.com)
3 points by denysvitali 3mo ago|0 comments
50.
by denysvitali 3mo ago
Well, we now have DeepSWE
51.
by denysvitali 3mo ago
Yes, but that wouldn't explain why they still allow JupyterHub's access (?)
52.
by denysvitali 3mo ago
CSCS is affected too. My guess is that a 0-day in SSH was found. https://status.cscs.ch/incidents/bccc3321-03ca-4030-89b1-472...
53.
HPCs taken offline due to a serious security vulnerability(twitter.com)
2 points by denysvitali 3mo ago|3 comments
54.
FlockCamRE – Reverse Engineering of Flock Cameras(github.com)
2 points by denysvitali 3mo ago|0 comments
55.
by denysvitali 4mo ago
I've built https://github.com/denysvitali/searxng-mcp to use this as an MCP for coding agents. Works very well, until you get rate limited by the providers (e.g: DDG). It also needs a SearXNG server to run, so I r
56.
Hands-Free Lockpicking: Critical Vulns in Dormakaba's Access Control System(sec-consult.com)
1 points by denysvitali 4mo ago|0 comments
57.
by denysvitali 4mo ago
It's live in the API now
58.
Lidl Self-Checkout SSD Image (GK Retail)(archive.org)
2 points by denysvitali 4mo ago|0 comments
59.
by denysvitali 4mo ago
I will never understand why SSH in such tools isn't native but always via some weird web UI... I used to work for a company who allowed SSH only after jumping through Citrix => RDP => Putty => Jumphost => Target server. Inc
60.
An impossible first task at Google(sparr.substack.com)
4 points by denysvitali 4mo ago|0 comments

More ›