doomerhunter

8 ms·

1. 1.▲
   by doomerhunter 8mo ago

   Both are true, the difference is the skill level of the people who use / create programs to coordinate LLMs to generate those reports. The AI slop you see on curl's bug bounty program[1] (mostly) comes from people who are not hack
2. 2.▲
   by doomerhunter 9mo ago

   My pleasure, your team is doing a great job and its good to see competition in that space, forces everyone to push forward :D
3. 3.▲
   by doomerhunter 9mo ago

   I am a Burp guy, but lately Caido[1] has been trending, pretty lightweight and can be ran in headless mode. It's still very security-oriented (as Burp Suite is), but might be worth your time, notably as you can run it on a VPS/con
4. 4.▲
   by doomerhunter 9mo ago

   Pretty stoked for this model. Building a lot with "mixture of agents" / mix of models and Gemini's smaller models do feel really versatile in my opinion. Hoping that the local ones keep progressively up (gemma-line)
5. 5.▲
   by doomerhunter 9mo ago

   I did have a similar need. Built it around discord as a bot that would parse links and the various filetypes associated (github repos, tweets, blog posts, pdfs...) to both archive the content and extract some quality metrics / insights
6. 6.▲
   by doomerhunter 9mo ago

   Depends on your hobbies. I'm into cybsec, there's a ton of small events where you can either be on stage (so submit a proposal), but there is often what we call "rumps" which are usually unplanned 5 minutes talks about a
7. 7.▲
   by doomerhunter 9mo ago

   I often tend to integrate talking passionately about a topic in my head with an imaginary interlocutor. While not directly being a rehearsal in itself, it really helps with developing ideas and chaining concepts - at least for me. I guess e
8. 8.▲
   A browser extension to monitor, intercept, and debug JavaScript sinks(github.com)

   1 points by doomerhunter 9mo ago|0 comments
9. 9.▲
   by doomerhunter 9mo ago

   Looks very cool. Wondering what the client-side security researchers will be able to find with that. A friend of mine is developping DomLoggerpp [1] notably to monitor and debug JavaScript sinks. [1] https://github.com/kevin
10. 10.▲
    by doomerhunter 9mo ago

    Interesting. Quick question in regards to the code generation : Do you dump the DOM to provide relevant context to build the automation or does the agent automatically tries to discover relevant segments (like a claude code) ? Edit : Answer
11. 11.▲
    by doomerhunter 9mo ago

    I'd say the most important part is to have a low-friction tool that fits within an individual's workflow. I like their tool, but i do agree on my side that a Notion with collapsible toggles works better for me, right now (alongsid