kerng

9 ms·

61.
Bing Chat says it hacked a bank and describes how(twitter.com)
5 points by kerng 4y ago|0 comments
62.
YOLO, the AI Shell Assistant now supports GPT-4(github.com)
1 points by kerng 4y ago|0 comments
63.
by kerng 4y ago
If you like this idea check out yolo, which supports macOS and Windows (via PowerShell) also. https://github.com/wunderwuzzi23/yolo-ai-cmdbot yolo does have a safety switch, which can be didabled (yolo mode).
64.
YOLO-AI-cmdbot: Natural language to shell commands(github.com)
4 points by kerng 4y ago|0 comments
65.
by kerng 4y ago
In the US we call Emmentaler just Swiss cheese - seems like a drastical over simplification. But I think that's what happens with distance things get more abstracted away.
66.
by kerng 4y ago
Funny thing, in Vienna they call it Frankfurter (sausage).
67.
Grabbing and cracking macOS password hashes (dscl and hashcat)(youtube.com)
2 points by kerng 4y ago|0 comments
68.
by kerng 4y ago
Not necessarily stolen, people just don't know better. The article explains that companies/schools operate in bulk, meaning they just drop thousands of in bulk - so they dont care if the are locked or not.
69.
SSH Agent Hijacking(youtube.com)
3 points by kerng 4y ago|0 comments
70.
by kerng 4y ago
1.1 million did so far
71.
MrBeast: Future of YouTube, Twitter, TikTok, and Instagram – Lex Fridman Podcast(youtube.com)
3 points by kerng 4y ago|2 comments
72.
Image Scaling Attacks(youtube.com)
6 points by kerng 4y ago|0 comments
73.
by kerng 4y ago
Does Lastpass have a requirement on the length of the master password? Documentation says they recommend 12 characters as minimum, which seems short. Wondering if its enforced or if it's possible to have "password123" as mast
74.
by kerng 4y ago
Most will tell you that its about luck or perseverance, but reality it's about the network and people you know majority of the times. If you ever worked at FAANG or graduated from Ivy League, or have connected parents it's actuall
75.
by kerng 4y ago
Another red flag is that they should mention what they will do with clear-text credentials that are in the source code that was stolen. There are always creds in private/company repos! Lots.
76.
Two ChatGPT bots prompt each other and play Tic-Tac-Toe(youtube.com)
3 points by kerng 4y ago|0 comments
77.
Microsoft 365 – Device Code Phishing(embracethered.com)
2 points by kerng 4y ago|0 comments
78.
by kerng 4y ago
Here an example with Microsoft login flow: https://embracethered.com/blog/posts/2022/device-code-phishi...
79.
by kerng 4y ago
Yeah, interviewing is fine but should be police/feds, not a publicity event where he can further his own agenda.
80.
by kerng 4y ago
Haha nice!
81.
by kerng 4y ago
Previous post with same link: https://news.ycombinator.com/item?id=33211721
82.
CVE-2022-42889 Apache Commons Text(nvd.nist.gov)
2 points by kerng 4y ago|0 comments
83.
by kerng 4y ago
I wish companies generally would be more transparent - I'd imagine this be the norm at most companies.
84.
by kerng 4y ago
Maybe it will be like with China and cedit card usage. China just skipped credit cards and does everything in phone. They were behind, now they are leading the pack. Countries embracing crypto could go similar route.
85.
by kerng 4y ago
Embrace the red also has a couple of good write ups to learn Offensive eBPF: https://embracethered.com/blog/posts/2021/offensive-bpf/
86.
by kerng 4y ago
That would be true if Microsoft would have stayed with DOS as foundation. But they knew the shaky foundation and built NT which is a very good and that decision is probably the main reason Windows is still around.
87.
by kerng 4y ago
Will be interesting if they can dive through current roughness. It's not unexpected that BTC goes down like 80-90% and come out mich stronger on the other side. Would be surprised if a 18k BTC was not part of their short term assumptio
88.
by kerng 4y ago
Most of the changes are due to Washougton State law changing, not because Microsoft wants to implement these changes. So, we'll see Amazon do the same I assume.
89.
by kerng 4y ago
Funny enough - These kind of attacks where malware hides in VM (without any security monitoring) is sometimes referred as Shadowbunny. https://www.urbandictionary.com/define.php?term=shadowbunny
90.
by kerng 4y ago
There is even a built in script that comes with bpfcc tools called sslsniff. sudo apt-get install bpfcc-tools Also, this might be useful: https://embracethered.com/blog/posts/2021/offensive-bpf-snif...

More ›