ngneer

7 ms·

1.
by ngneer 1y ago
"And change the combination on my luggage!"
2.
by ngneer 1y ago
Thanks. I just find it funny that security lessons learned in past decades have been completely defenestrated.
3.
by ngneer 1y ago
Don't eval untrusted input?
4.
by ngneer 1y ago
Thanks for trying these out :). Highlights the often subtle difference between knowing the answer and deducing the answer. Feathers could be ground into a pulp and condensed, too. I am not trying to be clever, just seems like the response i
5.
by ngneer 1y ago
I do not know whether the state of the art is able to reason or not. The textbook example you gave is admittedly not very interesting. What you are hearing from people is that parroting is not reasoning, which is true. I wonder if the state
6.
by ngneer 1y ago
I am not too familiar with the latest hype, but "reasoning" has a very straightforward definition in my mind. For example, can the program in question derive new facts from old ones in a logically sound manner. Things like applyin
7.
by ngneer 1y ago
I wonder if there is any relation to the cancelled Royal and Beast Lake projects. https://www.notebookcheck.net/Intel-CEO-abruptly-trashed-Roy...
8.
by ngneer 1y ago
I was doing web design in the early days. I recall the thrill of thinking how the possibilities were endless. This article reminds me of "A List Apart". That website is still running, incidentally.
9.
by ngneer 1y ago
I think it was more a PoC. I would be more impressed if it was deployed in production. "we want to reiterate that these are highly experimental results". If the dividends are massive, would they not deploy it in production and tel
10.
by ngneer 1y ago
It's reasonable to perceive most of the value in math and computer science being "at the scale" where there is unpredictability arising from complexity, though scale may not really be the reason for the unpredictability. But
11.
by ngneer 1y ago
https://news.ycombinator.com/item?id=42017771 Meh.
12.
by ngneer 1y ago
I do the same, but entry level problems that require healthy analysis. New frontier LLMs do not manage to do so well at all.
13.
by ngneer 1y ago
Math and physics are pretty stable. So is computer science. Avoid voodoo.
14.
by ngneer 1y ago
Maybe very very soft "engineering". Do you have metrics on which prompt is best? What units are you measuring this in? Can you follow a repeatable process to obtain a repeatable result?
15.
by ngneer 1y ago
Touché
16.
by ngneer 1y ago
I am not suggesting we refuse to close one window because another window is open. That would be silly. Of course we should close the window. Just pointing out that the "950X" example figure cited fails to account for the full cost
17.
by ngneer 1y ago
Playing devil's advocate, compare their popularity. You may have fallen prey to the base rate fallacy.
18.
by ngneer 1y ago
I agree with the sentiment and analysis that most humans prefer short term gains over long term ones. One correction to your example, though. Dynamic bounds checking does not solve security. And we do not know of a way to solve security. So
19.
by ngneer 1y ago
This is not a stupid question. I have seen other comments on the thread that confuse the two terms and run with it. Better to ask than assume. Especially since "VM" is the same label for two or three distinct yet related notions i
20.
by ngneer 1y ago
That's very cool. You probably know more about it than I do, then, but my advice is to articulate the exact problem you try to solve. I expect your field is probably teeming with AI proposals or offers on how to manage vulnerabilities,
21.
by ngneer 1y ago
Fair point. I was not blaming CVE for the situation, simply bemoaning the situation.
22.
by ngneer 1y ago
Spot on. Vulnerability scanners that make up an organizational Security Score (TM) tend to operate at the wrong level of abstraction, flagging some library somewhere that never runs and has nothing to do with your production flow or archite
23.
by ngneer 1y ago
I disagree that it is Way Better than before. A judgement call is worth more than a team wasting effort chasing irrelevant pseudo-vulnerabilities being reported as vulnerabilities. A broken yardstick is worse than no yardstick.
24.
by ngneer 1y ago
Great magazine, but not without limitations. The one page limit effectively means each article is at most a minimal anchor for a topic (and sometimes an ad for the author), so not a lot gets conveyed. PoC || GTFO and Phrack are better for c
25.
by ngneer 1y ago
There is no sequence of steps that takes us from where we are to the society depicted in Star Trek, or at least none has been outlined so far. If it were to happen, the world would need an abrupt phase change (e.g., First Contact). You may
26.
by ngneer 1y ago
Thought experiment. Suppose all binaries could be instantly reverse engineered to perfection. How would that change security?
27.
by ngneer 2y ago
Still use it in the terminal when debugging cloud applications. KUTGW!
28.
by ngneer 2y ago
That's quite nice! You may wish to look into implementing a PID controller, so as to avoid overshoot (your carrots become too thawed initially) and unnecessary oscillation about the setpoint (meaning you are wasting energy on cooling a
29.
by ngneer 2y ago
Sorry about that. Assumed you were trying to piggyback on the existing, to come up with a practical fix. Never entered into my mind that you were suggesting to overhaul the infrastructure. Yes, if you redesigned everything from scratch ever
30.
by ngneer 2y ago
Exclusively? You make it sound like VoLTE is mandatory. That is not the case, to my knowledge. On a 4G network, for example, one does not always have VoLTE available, and yet one is always able to place voice calls. Since your conviction is

More ›