ofjcihen

21 ms·

541.
by ofjcihen 1y ago
I’m uninterested in giving you content. In particular because of your past behavior. Thanks for the offer though.
542.
by ofjcihen 1y ago
And to make sure that agent doesn’t make mistakes I have a different agent review that agents work!
543.
by ofjcihen 1y ago
I feel like we get one of these articles that addresses valid AI criticisms with poor arguments every week and at this point I’m ready to write a boilerplate response because I already know what they’re going to say. Interns don’t cost 20 b
544.
by ofjcihen 1y ago
It’s interesting that your point about wasting time makes a second point in your favor as well. If you don’t have the knowledge that begets the skills to do this work then you would never have known you were wasting your time or at least ho
545.
by ofjcihen 1y ago
The look into these is neat but…why immediately open it up and trigger the tamper state? Did they not know most readers would have one? Any real testing happening in the tamper state might be meaningless. Perhaps the shell is available afte
546.
by ofjcihen 1y ago
I think in your rush to respond you may have accidentally made a solid point against your argument.
547.
by ofjcihen 1y ago
It would have taken you a month and you would have been able to understand it 100x more. LLMs are great but what they really excel at is raising the rates of Dunning-Kruger in every industry they touch.
548.
by ofjcihen 1y ago
To your second point we’re seeing a huge comeback of vulnerabilities that we’re “mostly gone”. Things like very basic RCEs and SQLi. This is a great thing for security workers as well.
549.
by ofjcihen 1y ago
This is always the indicator I look for whether or not someone actually knows what they’re talking about. If you can’t extrapolate on your own thesis you can’t be knowledgeable in the field. Good example was a guy on here who was convinced
550.
by ofjcihen 1y ago
I wonder how common this kind of swapping is. Its an interesting financial vehicle when a valid and legal investment strategy is to try to time the laundering of different assets.
551.
by ofjcihen 1y ago
This is what I’ve been telling people when they hand wave away concerns about LLM generated code security. The majority of what they were trained on was bare minimum security if anything. You also can’t just fix it by saying “make it secure
552.
by ofjcihen 1y ago
…Are we doing a “persecuted crypto-holders” thing now? In all seriousness I think most people relate to kidnapping and mutilation and not wanting it to happen to them. I mean it’s not like the traditionally rich receive much love.
553.
by ofjcihen 1y ago
You can also do non physical attacks to steal crypto. Sim-swapping being one.
554.
by ofjcihen 1y ago
I mean kidnapping is still illegal. What’s a crypto based legal system look like? I’m thinking maybe your sentence fluctuates depending on how many people have been released recently. Maybe clever kids can fork their own legal systems?
555.
by ofjcihen 1y ago
Agree it will only get worse especially with the recent breaches of crypto wallets and PII associated with holders. If even some of these attempts to extort are successful we might see the breach-to-physical-attack pipeline become common.
556.
by ofjcihen 1y ago
Also a security professional, pentester, bug bounty hunter, multitude of other irrelevant self-imposed titles owner here. You’ve demonstrated impact by small amounts of enumeration. If you had any real experience in bug bounty contracts you
557.
by ofjcihen 1y ago
That’s not how web app vulnerabilities work and it would be easy to counter that handwaving with “hackers know what FireProx is”.
558.
by ofjcihen 1y ago
This is the standard and obvious way to go about things that most security researchers ignore. While you can definitely want PII protected and scrape data to prove a point it’s unnecessary and hypocritical.
559.
by ofjcihen 1y ago
There’s a lot of (misconceptions/blatant falsehoods(?)) in this article but one I want to focus on is in this statement: "Often, the high-tech services that the cyber security sector sells protect the front door, while offenders c
560.
by ofjcihen 3y ago
Infosec is already a discipline plagued with tools that are useless at best and harmful at most when users don’t have background knowledge into what they’re securing. Hopefully there will still be enough people who do know what they’re doin
561.
by ofjcihen 3y ago
While I can’t say my factory workers were keen on opening them up and poking around they did have a habit of hitting them with forklifts.
562.
by ofjcihen 3y ago
I’m surprised to hear that. We had an entire job tracking system in a large factory running off of them and they lasted years. This was with daily handling by factory workers.
563.
by ofjcihen 3y ago
Was going to say this. My one gripe with HN is that people say incorrect things with complete confidence pretty regularly and you can only Detect it if you know the subject matter.
564.
by ofjcihen 3y ago
“6% of what” is where the answer lies.
565.
by ofjcihen 3y ago
It’s internet points. Is it truly worth moderating the entire thread?
566.
by ofjcihen 3y ago
Ugh, I hope that’s not a symptom of the future we’re looking at. Sites that run users comments through LLMs with strict rules to make them more “amenable”.
567.
by ofjcihen 3y ago
Part of communication is knowing your audience. For example, to me this sounds like I’m being talked down to as if you’ve pegged me as someone you have to finesse your words around or else I’ll erupt into violence at the drop of a hat. I ge
568.
by ofjcihen 3y ago
While we’re on the subject of social media I feel the need to point out that you don’t need to keep saying this and it also doesn’t make much sense to bother. This isn’t a debate club meetup. People can latch on to parts of the conversation
569.
by ofjcihen 3y ago
But are you writing to write or are you writing to convey a thought?
570.
by ofjcihen 3y ago
As someone who grew up in a poor family as an unplanned child I have to agree.

More ›