cookiengineer

6 ms·

1.
by cookiengineer 3d ago
I think the only possibility that comes to mind is creating an ebpf module that sandboxes all filesystem calls and trampolines all ld_open calls. But then you would have to provide massive amounts of patched/"safe" variants o
2.
by cookiengineer 5d ago
Do you have that bot ASN list somewhere? I am asking because I maintain botnet ASNs that are spamming/phishing/scamming our customers, and this would be a nice complementary category for it. Most often I realized that a lot of tho
3.
by cookiengineer 7d ago
Came here to write this. Built my own harness with much better sandboxing, because I am using abliterated models for the implementations and they sure try to escape out of their sandboxes. A lot. The sandbox from other harnesses like e.g. O
4.
by cookiengineer 12d ago
you are talking about the effect, not the cause. Sites are slow because with all that excess performance they do more tracking, instead of keeping the website as-is. Because that's the only thing business managers can come up with in t
5.
by cookiengineer 13d ago
> period of great homogenization It's called alignment. And that's the correct word for it in my opinion. The most important part is that we have to find a way to tackle the knowledge enshittification problem. Because now that
6.
by cookiengineer 16d ago
For Work they actively deactivate Linux users for "security reasons", or Microsoft makes their web apps intentionally hostile like disabling copy/paste or disabling photo/picture or file uploads for Linux users when you&
7.
by cookiengineer 19d ago
This was a pretty awesome read, I liked it a lot! What I found out during malware analysis is that LLM agents have a couple of quirks that you can solve by: - optimize for short lived agent workflows - use symbols as function contracts - ma
8.
by cookiengineer 20d ago
What is the difference of MHS to MCP when it comes to features? The whole text reads like everything is just a gRPC call that could've also been implemented with an MCP based wrapper.
9.
by cookiengineer 24d ago
Maybe read grandparent's comment again? They were talking about using DECT as an alternative and about string encoded EAN codes, not about watching YouTube in 4k.
10.
by cookiengineer 24d ago
LoRa is quite nice for this in the lower frequency bands, and the bandwidth should suffice for this sorta thing. And the tech is super cheap to build and maintain, both hardware and software is open source.
11.
by cookiengineer 25d ago
You're not the only one. I thought so too. I just ran it the last couple days extensively to verify my data training pipeline I'm building for my gonano SIMD port. Given that the speed records and the runs are sponsored by the sam
12.
by cookiengineer 1mo ago
> You are one person. The corporation is not. Scale matters Correct, if you violate it too often to count, you have to pay around less than ~2.5ct per violation. So the lesson here is: Create a company to do torrenting professionally, an
13.
by cookiengineer 1mo ago
With a normal Firefox on desktop on Linux, I get unsolvable recaptchas all the time, especially on cloudflare pages. Ironically, if I fake instead a chromium to be on Windows (UA and Sec-CH headers), I am allowed most of the time even thoug
14.
by cookiengineer 1mo ago
Your misjudgement comes from not seeing the economic incentive here. The web as a surveillance mechanism is just way too juicy to let go. As of now, pretty much all economies depend on it, just from an economic numbers calculation. Mind you
15.
by cookiengineer 1mo ago
I actually had to use a similar hack there due to the limitation that go test compilates cannot spawn themselves where I needed to have an environment variable with the actual binary prebuilt before the tests run. Took me a while to underst
16.
by cookiengineer 1mo ago
> Most sites are not in business of running ad marketplace. You don't have to run a marketplace. Back then, people were calling via phone to put an ad into the newspaper. The same concept can still apply today. You can just place an
17.
by cookiengineer 1mo ago
With unit tests you gotta be careful though, oftentimes LLMs skip implementations with mockups that just say "not implemented yet" or similar and then the unit tests become pointless because they start to only test internal struct
18.
by cookiengineer 1mo ago
So your problem is the default/zero values of properties? In Go the convention is kind of to have a constructor pattern with a NewStruct(...) *Struct method that initializes all properties. Also can't you build your own validator
19.
by cookiengineer 1mo ago
I'm working on using the OpenZIM format to archive the web and to make the wikis seedable (and locally hostable for LLMs) so that the ongoing cat and mouse game anubis defense can stop. My hope is that with the torrent protocol we can
20.
by cookiengineer 1mo ago
You should make a pokedex out of this! Imagine scanning the temple with your smartphone (taking a picture with gps data) to see details about the temples. Would be so cool. Then make them into categories like Water Temple, and like a stat q
21.
by cookiengineer 1mo ago
While I agree with the premise of your argument, I don't think this is the correct platform to do so. And I also have to state a fun fact: I'm not a journalist. If you expect more founded research put together into an investigativ
22.
by cookiengineer 1mo ago
Imagine doing this article as a thorough writeup to provide feedback, rewriting this for like an hour before you post it. And then you get an AI slop response like that in return where you can't even tell whether it was just a CEO not
23.
by cookiengineer 1mo ago
> It's just that there's really not a lot of evidence that this is rampant Not sure what is "rampant" in your view, and what is not. There's been multiple attempts of murder, multiple linked assassinations, acros
24.
by cookiengineer 1mo ago
> This is essentially one article about criminals recruiting young people. Is Russia FSB (or even Russia) even mentioned? Generally if an article is about FSB, it implies Russia. Otherwise, you would have to admit that Russia is a failed
25.
by cookiengineer 1mo ago
There's lots of people working for NATO and federal agencies in Europe that have been assassinated by the luckystrike branch of the FSB. The name comes from the Telegram account with underscores in between, and they're essentially
26.
by cookiengineer 1mo ago
FBI has no jurisdiction over Russia. And Russia doesn't give a damn, as they literally gave APT28/29 the mandate to do this, the only exception being that no former Sovjet territories can be attacked. (With the current exception o
27.
by cookiengineer 1mo ago
yawns Good morning world, Here's the updated Antimiasma tool for mitigation [1] [2]. More details on how this tool was built and how the Miasma worm works on my website [3]. This is the first false flag in the campaign series, where
28.
by cookiengineer 1mo ago
> CI usually has the most privileged secrets anywhere in a company lol Literally the reason the stealer of Miasma was focusing on extracting tokens from the CI/CD runner from the start.
29.
by cookiengineer 1mo ago
We're talking about Microsoft, who created a notepad.exe that can run an RCE with an LLM bypass prompt. In the previous Miasma waves, Microsoft was so overwhelmed that they delayed the VSCode extension installs for a couple days with a
30.
by cookiengineer 2mo ago
I kind of modded my GBA a while back, and bought some upgrades like a better display and an sdcard using cartridge. Now it's my travel device when I'm on holiday or having no energy left to focus on code. It's pretty convenie

More ›