spydum

3 ms·

1.
by spydum 7d ago
I think you could actually look at this via the OPPOSITE lense: OpenSource was good for companies before, because they got free code/bugfix/labor, which would have been expensive to produce themselves. Now with LLM and agentic fac
2.
by spydum 7d ago
BitchX from a shell with a vanity hostname was a hard flex for sure
3.
by spydum 7d ago
Don't worry, we will fork and just repeat the pattern with new names! See you next time!
4.
by spydum 9d ago
I know people seem to think nsa and other gov threat actors live in a land of zero days and advanced techniques... And to some degree, they sure do develop those and are able to leverage them. However, from my point of view most targets are
5.
by spydum 14d ago
nielsen's ACR method is embedded into millions of devices and vendors. No need for a microphone, it's processing the audio signal being sent out. A microphone would be a wasted conversion.. (your car infotainment also likely has n
6.
by spydum 14d ago
For some reason makes me think about replicators, and I found this article: https://columbusunderground.com/next-abundance-ds1/ There is plenty of others, but the idea of being post-scarcity of information creation&#x2
7.
by spydum 14d ago
Exactly, go look at Lucid/Tesla and a few others for examples of how the car is a brick without the manufacturers sekret unlock codes and calibration software. If they decide not to help, you are out of luck.
8.
by spydum 1mo ago
isn't this just malicious compliance? not clear how this would violate GPLv2?
9.
by spydum 2mo ago
That was mostly Bayesian probability filters, followed by SPF and more recently DKIM.. Maybe you could consider the Bayesian filter databases being trained as ML, but I feel it's a far way from our typical AI/LLM surge
10.
by spydum 2mo ago
I have bad news if you think banks are the pinnacle of cyber security practices... Maybe some rare few are, but by and large they generally stink. They tend to give that impression because they hire tons of auditors and panjandrum, to hassl
11.
by spydum 3mo ago
this is all fine and good, if you are okay broadcasting your internal hostnames. I suppose it's a trade off some might make.
12.
by spydum 3mo ago
Kind of reminds me of https://lists.debian.org/debian-security-announce/2008/msg00... Interesting they could not figure out pattern 1? Wonder if there is any additional metadata to point at a vendor or provider..
13.
by spydum 4mo ago
Fully agree, the only downside is without a SOC2 you will be asked to fill out an insane 200+ questionnaire. Good news is you have all these great LLM tools you can do this work for you, and just check it over.
14.
by spydum 5mo ago
We are replacing those with AI agents anyways. It'll be AI agents all the way down!
15.
by spydum 5mo ago
You could place a prediction bet probably.
16.
by spydum 7mo ago
really? I feel absolutely assured that every ugly temporary code fix I put in place, will persist for eternity..
17.
by spydum 8mo ago
Believe it or not, straight to jail! Just kidding, great writeup. I know it's not groundbreaking, but does surprise me how many products don't bother with rate limiting controls.
18.
by spydum 9mo ago
Fascinating to see an outsized increase in "game" development compare to a year ago: https://news.ycombinator.com/item?id=43154065 (I'm sure someone could throw this into some llm analysis and prove it out, b
19.
by spydum 9mo ago
In fact: https://wilgibbs.com/blog/defcon-finals-mcp/ Which makes me think: yes, llms can solve some of this, but still only some. It's more than a research tool, when you combine tools and agentic workflows.
20.
by spydum 11mo ago
Ah ha! But now the complete lack of emdash and bullet pointed lists from antislop will be the tell! Riposte!
21.
by spydum 11mo ago
seconding this. I bought a SteamDeck OLED -- and it blows my mind more people havent heard about these. it's essentially a bad ass handheld laptop. yes it plays games great, but the OS side when you boot into desktop mode is quite capa
22.
by spydum 11mo ago
specific clarification: That was only Cursor's AWS bill. If they are using other providers, wasn't clear.
23.
by spydum 11mo ago
2038 will be more significant
24.
by spydum 1y ago
I've never heard that, I think you may be thinking of Netflix and their edge storage appliances.
25.
by spydum 1y ago
https://www.sensitiveresearch.com/Archive/CharCodeHist/X3.4-... Looks to me like serendipity - they thought 8 bits would be wasteful, they didnt have a need for that many characters.
26.
by spydum 1y ago
Yes you can enable specific encryption types for users. It's not super common, but it can be done.
27.
by spydum 1y ago
My pet theory is the war on ad blocking aka manifestv2 deprecation: https://developer.chrome.com/docs/extensions/develop/migrate...
28.
by spydum 1y ago
that is wild! I could certainly see this as an attempt to eliminate hiring bias maybe? that was super popular in that time frame, but never heard anybody taking it that far.
29.
by spydum 1y ago
I have never heard of IQ tests for hiring, is this for real? I've seen Myers-Briggs and similar personality sorting hats, but never IQ.
30.
by spydum 1y ago
Fully agree with this point we all know as engineers this shit is nails on the chalkboard.

More ›