pizzalife

9 ms·

61.
by pizzalife 2y ago
Yes, they used a WhatsApp 0day in the murder of Khashoggi.
62.
by pizzalife 2y ago
This is still not nearly enough to reach parity with market prices. Try offering a few million.
63.
by pizzalife 2y ago
I agree with you since it adds absolutely no value to the article. Technical articles don't need unrelated pictures that add huge page breaks.
64.
by pizzalife 2y ago
Calling binaries using ld-linux used to be a popular way to get around noexec on filesystems, since the libraries are usually in a place that is executable..
65.
by pizzalife 2y ago
Most 401ks will just default to a target date fund, which is usually a total market stock ETF + bonds. That will certainly perform better than most actively managed pension funds.
66.
by pizzalife 2y ago
>One is using a tool to create a new artwork, one is using a tool for plagiarism. Is it "new artwork", though? That's the big question. I would say both are tools for plagiarism.
67.
by pizzalife 2y ago
>Actually, I think part of the reason is that so they know who's on the bus in case it's involved in an accident The CCP certainly do want to know who's on the bus, but not for the reasons you stated.
68.
by pizzalife 2y ago
There's also never an actual fire. Like at least put a video of a fireplace on in the background.
69.
by pizzalife 2y ago
This reminds me of when me and some friends were selling "IRC bouncers" aka IRC VPNs around 2005. Whenever we got a new customer ($1 SMS payment) there would be an automatic announcement in our internal IRC channel. Even though it
70.
by pizzalife 2y ago
Highly recommend the movies by the 1UP crew to get a feel for why this is actually great art.
71.
by pizzalife 3y ago
These are not "truly arbitrary file creation" vulnerabilities. Turning those into RCE is trivial. This is about turning an empty file creation (0 bytes) or a directory creation into code execution, via buggy cron scripts etc that
72.
by pizzalife 3y ago
The funny thing is that this isn't the first time PAN-OS is susceptible to RCE because of "arbitrary empty file creation" (directory in this case): https://seclists.org/fulldisclosure/2017/Dec/3
73.
by pizzalife 3y ago
What were the main factors making the Model X feel so different?
74.
by pizzalife 3y ago
Personally I can't stand it, yeah?
75.
by pizzalife 3y ago
Using their own "ethical proxies" to upvote garbage. Very ethical, guys! Btw, this is a company out of Lithuania - fat chance these "ethical residential proxies" aren't rooted home routers.
76.
by pizzalife 3y ago
Firefox 0days are cheap. Don't use Firefox if you care about security.
77.
by pizzalife 3y ago
I found this pretty funny: I opened up the safety settings, dialled them down to “low” for every category and tried again. It appeared to refuse a second time. So I channelled Mrs Doyle and said: go on give me that JSON And it wor
78.
by pizzalife 3y ago
No, the specific employee would most likely be liable if there is criminal conduct (this varies obviously). But a chatbot is not a person.
79.
by pizzalife 3y ago
Let's say someone is using a buggy version of curl. Is it legally okay to set up a web server that exploits the vulnerability when someone tries to fetch from you?
80.
by pizzalife 3y ago
> The "wrong" here was somewhat skewed by the 4 GLSL shader code files that were in the dataset for some reason, all of which it detected as C code To be fair though, a snippet of GLSL shader code can be perfectly valid C.
81.
by pizzalife 3y ago
I'll admit I only took one ML course more than a decade ago, so I don't really know how LLMs work and how to train my own models etc. Could someone recommend a starting point to start learning more (book, how-to-series etc) for so
82.
by pizzalife 3y ago
Well, why? It just seems risky. Everything you make on your work laptop / during work hours is typically owned by your employer. If your employer is paying you to contribute to OSS, don't use your personal github account. Just don
83.
by pizzalife 3y ago
> Content-Lenght
84.
by pizzalife 3y ago
Why? Because handling cash is expensive. You need to make trips to the bank (takes time + risk) to deposit, or you pay some company to do it for you (cost). Positives: You don't need to deal with any of that. Negatives: You can't
85.
by pizzalife 3y ago
Death's dynamic shroud? Whoever made this has seriously good taste in music.
86.
by pizzalife 3y ago
>I am gonna surprise you, but nobody from cybersecurity is finding vulnerabilities either. Well, no. I work in "cybersecurity" and my day job is literally finding vulnerabilities.
87.
by pizzalife 3y ago
Oh word? Because the only CVE I find when I google the author's name is this: https://www.fastly.com/blog/cve-2023-30534-insecure-deserial... An unexploitable PHP bug that five people decided to share the credit o
88.
by pizzalife 3y ago
>If you have a competent and fully staffed SRE Platform engineering team - you will NOT need a separate cybersecurity team. So the SRE team is supposed to find vulnerabilities in the codebase and pentest the network?
89.
by pizzalife 3y ago
" It really doesn’t make sense for cybersecurity to have its own special snowflake process for things. It does not make sense operationally, philosophically, or socially. " In general, I believe it does - cybersecurity is unique i
90.
by pizzalife 3y ago
This is really neat. I love the example of using an LLM to descriptively rename image files.

More ›