netsec_burn

9 ms·

1. 61.▲
   by netsec_burn 4y ago

   The crime was inciting an insurrection. The president was not charged due to partisan politics, no president has ever actually been voted out by the Senate of their own party (correct me if I'm wrong), but historically this has been th
2. 62.▲
   by netsec_burn 5y ago

   We've already detected all asteroids with that mass in our solar system [1]. There are smaller ones that won't end life on Earth that are still concerning, but the quandary is we have almost nothing to do even if we detected a thr
3. 63.▲
   by netsec_burn 5y ago

   I can attest to universities not being useful for helping you get in to a career, besides resume writing. I attended one career fair sponsored by a university I attended. There were about 60 different booths, and two of them were tech compa
4. 64.▲
   by netsec_burn 5y ago

   I see! Sorry about the confusion, I misunderstood the context.
5. 65.▲
   by netsec_burn 5y ago

   This exact prediction was made in the 1922 article.
6. 66.▲
   by netsec_burn 5y ago

   What OS did you install? It could be related to their choice to install a cutting edge version of Ubuntu versus Ubuntu LTS (for patches that may resolve some of what you're experiencing).
7. 67.▲
   by netsec_burn 5y ago

   Many of the links under "things you can attach eBPF programs to" are broken, unfortunately.
8. 68.▲
   by netsec_burn 5y ago

   If I remember correctly, HN automatically converts Reddit links to old.reddit.com (less user hostile).
9. 69.▲
   by netsec_burn 5y ago

   Happy New Year!
10. 70.▲
    by netsec_burn 5y ago

    I agree that regardless of how it is created, it is unlikely to obey or be enslaved. I also agree that the same selective pressures that caused altruism/symbiotic relationships to be an emergent property in animals wouldn't exist
11. 71.▲
    by netsec_burn 5y ago

    Nice spreadsheet documenting unintended behavior of modern AI systems. The difference is, an AGI would be able to understand the intent beyond requested directives. What we "want" is not so subtle and nuanced that it is beyond the
12. 72.▲
    by netsec_burn 5y ago

    What aspect of an AGI would make it malevolent by default? I lean towards benevolence by default, but I can't think of any pressures either way. The paperclip analogy I read about often seems misguided, why would we assume that a self-
13. 73.▲
    by netsec_burn 5y ago

    I'm intrigued. What problem would you say is out of reach of an AGI (beyond what is understood to be physically impossible)?
14. 74.▲
    by netsec_burn 5y ago

    I'm surprised to see no mentions of AGI here. Imagine automatic, AI directed scientific research and study. The combined written intelligence of all of us on every project. It could solve every problem that we face today, and that&#x27
15. 75.▲
    by netsec_burn 5y ago

    https://archive.md/7r31r
16. 76.▲
    by netsec_burn 5y ago

    Spoiler: They are. AWS and Amazon both used Log4j exploitable from the homepage (/) of both sites through headers. Source: me
17. 77.▲
    by netsec_burn 5y ago

    The guards are most of the concern here.
18. 78.▲
    by netsec_burn 5y ago

    Red Star 4.0 (2017). Good luck finding it, I haven't.
19. 79.▲
    by netsec_burn 5y ago

    See my comment history for a firsthand account of Zerodium.
20. 80.▲
    by netsec_burn 5y ago

    Do you know of anyone personally who was paid?
21. 81.▲
    by netsec_burn 5y ago

    I believe the reason is that there are incentives internally to create new products rather than maintaining existing ones.
22. 82.▲
    by netsec_burn 5y ago

    This company reached out to me a few years ago. They promised mid-range 6 figures and said a few people who worked in the intelligence community already worked there. I reached out to a few friends and they told me not to take the job. I&#x
23. 83.▲
    by netsec_burn 5y ago

    Yes, this is wrong, both in your timeline and description of the events. I said in my previous comments that the Apple bounty program didn't exist when I began ( https://news.ycombinator.com/item?id=28471263 ) so I was f
24. 84.▲
    by netsec_burn 5y ago

    Already done, with as much relevant information as I could compile. I hope they find who is attacking security researchers. If I had to guess, the motivation may be for the zerodays I have.
25. 85.▲
    by netsec_burn 5y ago

    Answered here: https://news.ycombinator.com/item?id=27875883
26. 86.▲
    by netsec_burn 5y ago

    I looked for other buyers before Apple had a bug bounty program, not while talking with Apple. When I found an official way of submitting the vulnerability I cancelled my other negotiations (Apple is the correct channel and I wanted to see
27. 87.▲
    by netsec_burn 5y ago

    TOTP two factor authentication protected me. They attacked my recovery email to go for my primary, at the time my recovery provider didn't offer 2FA. I think they may have social engineered the recovery with my SSN (it was a randomly g
28. 88.▲
    by netsec_burn 5y ago

    ZDI, like Apple, doesn't tell you the average price of the vulnerabilities you can sell to them when you email them (yes, Apple has example payout ranges, but they aren't clear on classification). At Pwn2Own, ZDI paid roughly half
29. 89.▲
    by netsec_burn 5y ago

    Yep, this lines up with my experience. I've been trying to work with Apple on a critical security vulnerability for over a year now that affects over 100 million systems. When I'd ask the payout ranges at the beginning, I've
30. 90.▲
    by netsec_burn 5y ago

    Except they don't accept donations: https://github.com/gorhill/uBlock/wiki/Why-don't-you-accept-...