ejcho

20 ms·

1.
18 year old critical vulnerability found in Nginx(twitter.com)
39 points by ejcho 4mo ago|3 comments
2.
by ejcho 6mo ago
Seriously? Can we just acknowledge that this staggering loss of human life is appalling and heartbreaking regardless of how you brand it?
3.
Cost Effective SOTA Vulnerability Detection with Open Source RL(depthfirst.com)
1 points by ejcho 6mo ago|0 comments
4.
by ejcho 7mo ago
> for instance, Gemini-3-Pro-Preview, one of the most capable models evaluated, exhibits the highest violation rate at 71.4%, frequently escalating to severe misconduct to satisfy KPIs sounds on brand to me
5.
by ejcho 8mo ago
Seems like a space that is really heating up. I recall most of the foundational labs announced some kind of agentic security product last year (OpenAI's Aardvark, Claude Code security reviewer, etc.)
6.
by ejcho 8mo ago
I think with the advent of the AI gold rush, this is exactly the mentality that has proliferated throughout new AI startups. Just ship anything and everything as fast as possible because all that matters is growth at all costs. Security is
7.
by ejcho 8mo ago
do people even care about security anymore? I'll bet many consumers wouldn't even think twice about just giving full access to this thing (or any other flavor of the month AI agent product)
8.
by ejcho 8mo ago
I really hope this is performative instead of something that the Anthropic folks deeply believe. "Broadly" safe, "broadly" ethical. They're giving away the entire game here, why even spew this AI-generated champions
9.
by ejcho 11mo ago
reminds me of https://www.mcsweeneys.net/articles/at-least-we-owned-the-li...
10.
by ejcho 11mo ago
the man is a generational grifter, got to give him credit for that at least