zer0c00ler

6 ms·

1.
Claude Code: Data Exfiltration with DNS(embracethered.com)
4 points by zer0c00ler 1y ago|0 comments
2.
by zer0c00ler 2y ago
Wild that this about behavior from 7 years ago - imagine additional fines that will need to be paid in 7 years for current market manipulation by some of these giant players (incl in US). Things are moving really slow. The amounts are also
3.
by zer0c00ler 2y ago
A lot of people wrongly believe this means no firewall. If you don't use firewalls (yes, even for web traffic and SaaS, limit who can access your stuff), you are doing something wrong.
4.
by zer0c00ler 2y ago
For anyone who didn't know Google apparently deleted (like in making it unrecoverable) a larger customers subscription (and GCP data) and also all backups as far as it sounds. The customer luckily had their own backups elsewhere outsid
5.
by zer0c00ler 2y ago
Just out of curiosity, do you play an instrument? I'm wondering if it impacts people with strong emotional bond to art more than others. I felt it was just super weird and nonsensical.
6.
by zer0c00ler 2y ago
Whenever this story comes up I think of this movie, called 23, that's tells the story from the hackers perspective. https://en.m.wikipedia.org/wiki/23_(film) Both stories are fascinating.
7.
by zer0c00ler 3y ago
Microsoft's mice and keyboards also were exceptionally good
8.
by zer0c00ler 3y ago
I think each test served exactly its purpose and it's incredible to see the rapid progress. Unclear why you believe the first two were not a success at all? Did you expect a novel vehicle like this would just work the first time?
9.
ASCII Smuggling: Crafting Invisible Text and Decoding Hidden Secrets [video](youtube.com)
3 points by zer0c00ler 3y ago|1 comments
10.
by zer0c00ler 3y ago
Google mitigated it via CSP , as did Bing Chat. ChatGPT is still vulnerable btw
11.
by zer0c00ler 3y ago
Agreed mostly, although I'm less of a fan of the "dream" terminology. The key takeaway is that we can't trust LLM output and systems need to be designed accordingly. Eg Agents will never be able to securely take actions
12.
by zer0c00ler 3y ago
This sounds good, but didn't Apple get off the hook? Anyone can decipher what the difference are?
13.
by zer0c00ler 3y ago
Multiple resultsets is a common term. Where a resultset is a table basically. SQL Server (since 2005) can actually even have multiple active resultsets on a single connection. Assume same is true for most other database servers.
14.
by zer0c00ler 3y ago
What are the reasons that makes this possible? The articles I have seen are not explaining what makes this different? What needs to be invented to get end to end security for push? I might be missing the obvious, apologies upfront.
15.
by zer0c00ler 3y ago
Likely just 0 testing. Today I switched Outlook to the new Outlook and then it couldn't access my email account because of some licensing issue? No other error or how to resolve. Who allows things like this to be shipped without minima
16.
by zer0c00ler 3y ago
Read OpenAI's response to this security issue carefully - it tells you a lot about how they think of being responsible for issues like this. I remember they put all the blame on the open source library, rather than taking responsibilit
17.
by zer0c00ler 3y ago
I have trouble understanding what Q is. It can't be that new Chatbot named Amazon Q in AWS, because it has very few capabilities. It's kind of embarrassing. What am I missing? Is there something else shipping in future? doubt any
18.
by zer0c00ler 3y ago
I have trouble understanding what Q is. It can't be that new Chatbot named Amazon Q in AWS, because it has very few capabilities. It's kind of embarrassing. What am I missing? Is there something else shipping in future?
19.
by zer0c00ler 3y ago
One observation is that the endless thank you and love you messages are getting a bit tiring... even Twitter likes show a steep decline in interaction and interest. Can only play that card so many times.
20.
by zer0c00ler 3y ago
Yeah, OpenAI lost a bit of its magic. It's sad because it was really fun so far to see all the great progress. But there are so many unanswered questions still and the lack of transparency is an issue, as is the cult like behavior tha
21.
by zer0c00ler 3y ago
Wouldn't open source mean you can recreate the model from scratch by knowing the training data? There is a weird definition of open source that creeps in here. Llama2 is effectively, proprietary compiled software. GPT-4 is proprietary
22.
by zer0c00ler 3y ago
Elon brought him in, which is quite the irony. Funny even. It also is the reason Elon and Larry Page don’t get along anymore. Ilya is certainly world class in his field, and maybe good to listen to what he has to say
23.
by zer0c00ler 3y ago
Three engineers isn’t a lot honestly after such a stunt. I’d assumed there would more loyal folks, but maybe most are really in for the mission. The next couple of weeks will tell.
24.
by zer0c00ler 3y ago
You assume they were indeed blindsided, which I very much doubt. I think it’s a good outcome overall. More decentralization and focused research, and a new company that focuses on product.
25.
by zer0c00ler 3y ago
It’s 195 countries!
26.
by zer0c00ler 3y ago
I doubt this was a surprise to them, I’m sure Sam was well aware of the concerns and repeatedly ignored them, and even doubled down. Putting OpenAI’s mission in jeopardy. Many politically aligned folks will leave, and OAI will go back and f
27.
by zer0c00ler 3y ago
His timeline.
28.
by zer0c00ler 3y ago
I don’t think there are 230+ countries, at least not on this planet.
29.
by zer0c00ler 3y ago
No, it’s 11:24 pm pst and not available for me.
30.
by zer0c00ler 3y ago
ChatGPT and plugins were already agents. An agent just does stuff on somebody else’s behalf. Browsing, browses the Internet for the user, code interpreter creates and runs Python code for the user… What you describe are what’s called autono

More ›