jdefr89

8 ms·

61.
by jdefr89 1y ago
Yea because everyone knows CEOs just take credit for the work the real engineers and others do… I’d far prefer researchers or developers getting this kind of money instead of a CEO…
62.
by jdefr89 1y ago
I know. For God sakes who will think of the poor billionaires for once! /saracasm
63.
by jdefr89 1y ago
Really? I can hardly remember what the hell I was doing one day ago... I am probably just burned out though so that doesn't mean much.
64.
by jdefr89 1y ago
Professional Vulnerability Researcher here... You are correct. Over the years this industry has seen an influx of script kiddies who do nothing but run tools. It's sad but I really think this field needs more gate keeping...
65.
by jdefr89 1y ago
Some of these AI slop report exchanges are absolutely hilarious. Love seeing people caught red handed then trying to play it off.. This is why Vulnerability Research needs more gatekeeping.
66.
by jdefr89 1y ago
As someone with severe OCD my entire life... Trust me its a bad thing.
67.
by jdefr89 1y ago
Same.. I am surprised someone would remember the exact dates to when they started running consistently... Seems odd..
68.
by jdefr89 1y ago
This shouldn't be a surprise. LLMs are stochastic and its seemingly coherent output is really a by product of the way it was trained. At the end of the day, it is a neural network with beefed up embeddings... That is all. It has no rea
69.
by jdefr89 1y ago
“We introduced a new abstraction for no reason! Take a look!!”
70.
by jdefr89 1y ago
Unless the blog was Phrack, you shouldn't be surprised I never heard of your blog unless it is something you think I would know.. This stuff didn't have such a public community back then like it does now..
71.
by jdefr89 1y ago
Bro in 2006 there wasn't any blogosphere. You had IRC.. I can’t find anything of the sort and do you have a link to this discovery that you say was made via LLM?
72.
by jdefr89 1y ago
I don’t recall anyone saying anything of the sort back then about fuzzing? Back then you could run the most basic fuzzer and find tons of bugs! Where did you see people complaining about fuzzers??
73.
by jdefr89 1y ago
I might be. Deepsleep also sort of found a bug, but you need to ask yourself… is it doing it better than tools we already have? Could a fuzzer have found that bug in less time? How far along did it really need to be pushed and also.. I have
74.
by jdefr89 1y ago
Alright folks.. To qualify myself. I am a vulnerability Researcher @ MIT. My day to day research concerns embedded hardware/software security. Some of my current/past endeavors involve AI/ML integration and understanding just
75.
by jdefr89 1y ago
The issue is, though ChatGPT and the likes definitely speed up development in one respect, they create a bottleneck in various other places.. “vibe coders” have essentially no idea what the code their LLM cranked out even does and are unawa
76.
by jdefr89 1y ago
Was I the only one confused by this? It wasn't just me right? I love when I see things like this. "The cool thing about our kernel is that you cannot share memory! It's super secure. Except for, you know, ..." then list
77.
by jdefr89 1y ago
I remember when I was doing iOS/macOS security research back in 2015 and I though to myself "I bet core audio has bugs.." but never really looked into them because my thinking was they wouldn't have been too too useful u
78.
by jdefr89 1y ago
UART always the first place I look…
79.
by jdefr89 1y ago
Ton of work already being done on this. I am a Vulnerability Researcher @ MIT and I know of a few efforts, just at my lab alone, being worked on. So far nearly everything I have seen seems to do nothing but report false positives. They are
80.
by jdefr89 2y ago
I agree and binary exploitation/Vulnerability Research is my area of expertise.. The whole "Lets port everything to Rust" is so misguided. Binary exploitation has already gotten 20x harder than say ten years ago.. Even so.. M
81.
by jdefr89 2y ago
Not to mention they link to libc.. All rust code does last I checked…
82.
by jdefr89 2y ago
Fair point. I would say no. Even getting paid extra for extra work.. I would still be at an energy deficit because our tethering of energy to the amount of money we make is somewhat artificial.. There are limits on how much control we have
83.
by jdefr89 2y ago
What is with the incorrect function declarations? I see: int ( func)(). Maybe you meant: int * (*func)(void)? Don't mean to be pedantic. Just wanted to point it out so you can fix it.
84.
by jdefr89 2y ago
I get that but growing older does mean less energy at the very least.
85.
by jdefr89 2y ago
I often ponder if I have the energy to go back to school. I am employed by MIT at one of the labs where I do research for embedded security. As a consequence, they offer free classes you can pick up. I am yet to actually take advantage of t
86.
by jdefr89 2y ago
I am 100% with you. I am great engineering wise.. Have no clue how to eat and live healthy!
87.
by jdefr89 2y ago
Neat.. But.. Why? There are already a ton of DAWs and at this point all of them essentially support the same features and folks end up using all the same Waves VSTs... DAWs can be resource intensive when low latency is key (say recording vo
88.
by jdefr89 2y ago
Same. At this point “All we need” is about a thousand different things..
89.
by jdefr89 2y ago
Every day there are literally tons of papers with “XYX is All you need” at this point we apparently need thousands of things…
90.
Rust in Linux Kernel: Safer Code or Unnecessary Complexity? [pdf](usenix.org)
2 points by jdefr89 2y ago|1 comments

More ›