l23k4

10 ms·

181.
by l23k4 5mo ago
I think it'd be rather uncharitable to assume this was written by a human: >The error was not stupidity, corruption, or ideology, but a structural failure of the threat-detection apparatus to model what the asset actually represente
182.
by l23k4 5mo ago
Already done, it's called a "browser-in-browser" attack.
183.
by l23k4 5mo ago
Unless you're going out of your way to force them to react, they do not.
184.
by l23k4 5mo ago
This would typically not be referred to as a "remote access trojan". It's just an updater, or perhaps a dropper if you want to make it sound more scary.
185.
by l23k4 5mo ago
>It does not work like that - it has certain pre-condition requirements. You also need a reliable oracle which tells information when you actually hit the child process, whether child crashes and whether you are even in the same child. W
186.
by l23k4 5mo ago
There are heaps of literature on this exact topic. https://www.researchgate.net/publication/292156221_How_to_Ma... > You need to prove how the vulnerability itself reduces the entropy of ASLR Not really? Looks like
187.
by l23k4 5mo ago
I'm deliberately refraining from giving a ready LLM prompt. History shows that "meh, ASLR mitigates this" is a vastly bolder claim anyway, so I don't feel much need to defend my position here. Edit: Even the authors of t
188.
by l23k4 5mo ago
Primarily specialist bulletproof ddos protection services like ddos-guard.ru, not "Cloudflare" as is the popular meme among clueless commenters.
189.
by l23k4 5mo ago
Anyone even vaguely familiar with exploiting nginx knows that ASLR is a complete non-factor here.
190.
by l23k4 5mo ago
> "AI companies to be held responsible for the impact of their chatbots" Sure, but people on HN have a weird idea of what "held responsible" means. Often it seems to mean "harshly punished", as opposed to ma
191.
by l23k4 5mo ago
We don't yet know if LLM chatbots are actually inducing them, or just offering a convenient outlet. Both options are perfectly feasible, although it seems unsurprising that people suffering from such delusions would seek out validation
192.
by l23k4 5mo ago
I don't know, internet already made it easy for delusional people to find each other (and trolls). Look into the gangstalking/targeted individual communities, you can even frequently find these people on HN. Flat earthers and sove
193.
by l23k4 5mo ago
People suffering from mental health issues were doing exactly that kind of things long before LLMs. Delusions of grandeur are nothing new.
194.
by l23k4 5mo ago
We had people acting out like this before LLM chatbots, correlation does not necessarily imply causation.
195.
by l23k4 5mo ago
It appears that 0 AI agents replied with their full .env file. An unsurprising result.
196.
by l23k4 5mo ago
>Not in the way it would be if Lebanon declared war on Israel. What would declaring a second war even imply? Lebanon and Israel are, and have been in an official state of war since 1948.
197.
by l23k4 5mo ago
>the WeChat encrypted messaging application That's certainly a way to describe WeChat.