tbiehn

7 ms·

1.
by tbiehn 2y ago
Nice (and MIT Licensed!) - I'll give this a shot. Another thing these types of tools bring is multiplayer support. Which I found my distributed teams really benefiting from over time.
2.
by tbiehn 2y ago
This project (and others like it) are graphviz wrappers - they do some really cool stuff to emit styled .dot files that look better than writing and rendering raw gv.# Allowing specification in Python offers very little advantage - in theor
3.
by tbiehn 2y ago
Semgrep is another great option to get value out of static analysis checks against both the language and a few common frameworks. It remains a popular choice for security folks writing static detection rules (and contributing them to the co
4.
by tbiehn 2y ago
Interesting idea - do you handle ‘dead keys’ as well? Let’s say you optimistically re-fetch a few times, but no client re-requests?
5.
by tbiehn 2y ago
Just imagine if we didn’t use heuristics to fix arbitrary inputs and instead we used some sort of learning algorithm that was trained on producing valid looking json - then all we’d need to do is add a prompt and start with some random nois
6.
by tbiehn 3y ago
Not the fort-knox implementation it claims on the tin. 'LocalSend uses a secure communication protocol that allows devices to communicate with each other using a REST API. All data is sent securely over HTTPS, and the TLS/SSL cert
7.
by tbiehn 3y ago
Reminds me of https://tinygo.org/ - a project that brings Golang to embedded devices, browser (wasm) contexts. Do you converge or diverge from that project?
8.
by tbiehn 3y ago
I’m chatting with a founder who started building a moderation pipeline with gpt-4 w/ embeddings to save credits & time. Seems like something that will become ubiquitous.
9.
by tbiehn 3y ago
This article shines a light on exactly why LLMs /arent/ just autocomplete with context. There’s real computation going on in there. https://arstechnica.com/science/2023/07/a-jargon-free-explan...
10.
by tbiehn 3y ago
A tip for your context window problem: prefer ‘editing’ a previous message to add whatever clarification is required - rather than having a ‘chat.’ Definitely helps keep it on the rails.
11.
by tbiehn 3y ago
Yet another DNS file delivery thing - wrote a few years ago to get files into restrictive networks and results out: https://dualuse.io/blog/dnspump/
12.
Automating Core AppSec Tooling Dev Loops: Language Model Powered Rule Generation(dualuse.io)
1 points by tbiehn 3y ago|0 comments
13.
by tbiehn 3y ago
Another factor; so many programs today either require or… at least try a network connection before they actually DO anything.
14.
Large Language Models in AppSec: An Innovator’s Primer(dualuse.io)
1 points by tbiehn 3y ago|0 comments
15.
by tbiehn 3y ago
I keep plugging my own… yet another API invoker - with parallel queries, templates, and config files written in Golang; https://github.com/tbiehn/thoughtloom Has some interesting examples, but I expect the population o
16.
ThoughtLoom – tool for creating chat LLM tools for the CLI(github.com)
2 points by tbiehn 3y ago|1 comments
17.
Harnessing the Hive Mind: Semgrep and Nuclei Are Shaping the Future of Security(dualuse.io)
3 points by tbiehn 3y ago|0 comments
18.
by tbiehn 4y ago
I wonder if the author had ever tried milkdrop before? Seems like the same type of thing. https://en.m.wikipedia.org/wiki/MilkDrop
19.
by tbiehn 4y ago
The whole thing actually goes back to smoking weed. The ‘no mouse ethos’ goes at least as far back as the ratpoison window manager and this historic post: https://www.nongnu.org/ratpoison/inspiration.html Tiling window
20.
by tbiehn 5y ago
I don't think 'young traders' get news from bloomberg articles quoting dudes in totally sick ascots. It's almost self-parody.
21.
Build a Small Radar System MIT(professional.mit.edu)
3 points by tbiehn 7y ago|0 comments
22.
by tbiehn 7y ago
You, like me, might be looking for benchmarks; https://www.phoronix.com/scan.php?page=article&item=radeon-g...
23.
THC's Favourite Tips, Tricks and Hacks(github.com)
4 points by tbiehn 7y ago|2 comments
24.
by tbiehn 7y ago
So if a host supports SNI you send it 400+mil requests? C'mon, dish.
25.
by tbiehn 7y ago
Interesting, some results out of Shodan were surprising - this might be the reason. How do you pick what domains to try?
26.
by tbiehn 7y ago
It turns out that if you have a targeted domain you have a good chance of finding it in one of the popular cloud hosting ranges. Masscan + curryfinger work well together. Alexatop + masscan + curryfinger makes an interesting dataset.
27.
Curryfinger – Find the Server Behind the CDN(dualuse.io)
141 points by tbiehn 7y ago|40 comments
28.
Hack a Tesla 3 Pwn2Own to own a Tesla 3(techcrunch.com)
18 points by tbiehn 8y ago|2 comments
29.
by tbiehn 8y ago
This is a neat approach - but the current implementations adjacent-line tab-stopping only works if you put block opens on separate lines.
30.
by tbiehn 9y ago
This is exactly my point - the available controls are not sufficient (plus immature). Providing a control that lets you create trusted client code lets you (comprehensively) cover the risk of code introduced 'after build time'. T

More ›