tonymet

16 ms·

391.
by tonymet 7mo ago
thanks for highlighting that i will take a look and see if there's similar archive for the other vulnerabilities as well . If i can make it work with clamscan & MS Defender i'll run a scan and try to report back
392.
by tonymet 7mo ago
true colors.
393.
by tonymet 7mo ago
How can your model be correct when it doesn’t explain the world ?
394.
by tonymet 7mo ago
The smothering would happen with or without Copilot. This just sounds like an excuse to be ungrateful . I hope GitHub shuts down free tier , maybe developers will finally be grateful .
395.
by tonymet 7mo ago
Nearly all the variance is from Actions, a product that didn’t exist beforehand. It’s despicable to see everyone punching down on GitHub. Even under Microsoft they’ve continued to provide an invaluable and free service to open source develo
396.
by tonymet 7mo ago
You still haven't explained how so many died and why the program ended.
397.
by tonymet 7mo ago
1/5 of your CLI and 1/3 of your gui apps are npm based. Each one has 400+ dependencies , none notable enough to go viral when they are breached. And who knows what other packages are currently compromised. We all have 30+ node_m
398.
by tonymet 7mo ago
slowly walking through a minefield isn’t any safer than running. So unless you’re saying the extra time will be spent inspecting every package, whenever you do update, you will be getting an insecure package. You’re not safe by dodging axio
399.
by tonymet 7mo ago
If the odds were only 1% , how did 14 people die ? You’re not including the lives in your risk assessment . There were 135 events and 14 people died . If you were asked to join mission 136 would you say yes or no? Which risk profile fits: 1
400.
by tonymet 7mo ago
The 2 were early, and fewer lives were lost. The shuttle was unnecessarily risky , and NASA was aware from its inception
401.
by tonymet 7mo ago
Oh 14 totally acceptable
402.
by tonymet 7mo ago
Never risk free , but Soyuz hardly lost any crew over its 50+ years
403.
by tonymet 7mo ago
They’ve killed dozens during the shuttle program , or did you forget ? Also a number during Gemini, Mercury and Appollo. Terrible safety record , and 5x worse than Soyuz . Shuttle fatality rate was 1/10. Approaching Russian roulette od
404.
by tonymet 7mo ago
Has anyone tested general purpose malware detection on supply chains ? Like clamscan . I tried to test the LiteLLM hack but the affected packages had been pulled. Windows Defender AV has an inference based detector that may work when signat
405.
by tonymet 7mo ago
Slow Russian roulette is still a losing strategy
406.
by tonymet 7mo ago
I agree AI makes exploits more accessible, it also makes pen-testing and finding vulns more accessible, in both early and late stages of product development. AI has saved me a ton of money and time auditing. Mostly because I'm tired &
407.
by tonymet 7mo ago
Great writeup. One advantage true routers have e.g. Edgerouter or Mikrotik are dedicated hardware for IP & TCP header processing. Some can offload AES for VPN encryption. This leads to cooler temps, lower power utilization & longer
408.
by tonymet 7mo ago
do tell. why not just revibe based on the newly revealed requirements?
409.
by tonymet 7mo ago
I imagine we agree on a number of aspects .
410.
by tonymet 7mo ago
I don’t disagree. But what is the detractors’ goal? What will the shaming accomplish? The tools are here and can be used for good or ill. Think about the 90s PC revolution, opening up developer opportunities. There were commercial devs and
411.
by tonymet 7mo ago
AI might have been an opportunity to take engineer hubris down a knotch. Perhaps to reassess the excesses (bad performance, bad UX, poor reliability, costly development & operations, etc) . Instead of reflection, we decided to shame A
412.
by tonymet 7mo ago
I attempted a similar effort, and found my router had critical ipv6 vulnerabilities including binding the admin and SSH to the WAN on ipv6 (not on ipv4) , and disabling IPv6 firewall altogether so the LAN services were exposed to the intern
413.
by tonymet 7mo ago
yes it would wait for the next online check. But what are offline computers doing these days?
414.
by tonymet 7mo ago
It's a fair concern. And I believe you can add local accounts once you init windows with your Microsoft account. Try to think about it from a vendor perspective. How much more difficult it is to maintain support for local accounts, no
415.
by tonymet 7mo ago
password changes or deleting the account will lock out the local credential .
416.
by tonymet 7mo ago
I’m a Windows fan, and I could see this being a pain for OEMs and installers / IT guys – but I don’t see why people are making a huge deal . Windows quality is a much bigger issue: latency, reliability issues, inconsistencies in the UI
417.
by tonymet 7mo ago
the real lesson is that Jsonata should have been written in C so anyone could link to it and keep the parser resident in memory, to avoid $300k vCPU costs spent on marshalling & RPC Think of the gigawatts wasted on this nonsense.
418.
by tonymet 7mo ago
You’re right this is the proper way to use git. And I encourage developers to use their own cloud storage (or remote volume) for their primary remote. Even with the best habits, there will be the few times a month where you forgot to push
419.
by tonymet 7mo ago
I'm sure a lot of parents would support you on that. A lot of PTAs have been struggling with curriculum mandates passed down from the state. there's little control over the content in schools at the School Board / School Dis
420.
by tonymet 7mo ago
Like many endeavors, the most vocal in favor or against aren't really doing much. The people actually succeeding with AI probably aren't interested in giving away their secrets. AI is especially sensitive to this. Unlike coding,

More ›