+ To be clear, this tool does not solve the problem if you are one of the first people to get infected; it minimizes your chance if you are the N-th person
A couple of months ago, our team got hit by the first version of Shai-Hulud through a random `npm install`. We didn't catch it until it was too late.I built Computer Police for our team to never be in this situation again.It's designed to block that earlier. It runs a local registry proxy between your package manager and npm/PyPI, and stops confirmed-malicious packages before they touch...
So the claim that OSS models can find those zero-day issues was a lie.
A few months ago, Cursor released a technical blog post describing how they implemented the instant apply feature. The post went deep into how and why it works so well. They even did a part 2 in collaboration with an LLM inference provider - https://fireworks.ai/blog/cursor.However, when I checked today, the blog post had been deleted. If you go to the https://www.cursor.com/blog/instant-apply,...
https://chromewebstore.google.com/detail/secure-ai-generated-code/bengiidgkchpliicfplbejjnoennfkmo
*TL;DR;*Demo: https://youtu.be/wEC9qVaB4_YI created a free Chrome extension that scans code generated by ChatGPT and Claude.ai detects security issues and helps you fix them.Please give us feedback about the extension, we want to improve it! (and tell us if you would be interested in using VS Code extension as well)*Why?*LLMs were trained on code written by humans (your public code from...
*TL;DR;*Over one month ago I posted about a really hard problem that I "accidentally" solved (https://news.ycombinator.com/item?id=40460084).The problem is to resolve cross-file references for multiple programming languages. I can generate a graph representation of the codebase.*Why do you need to have a graph representation of the codebase?*- To understand how code references other code- Track...
I prefer writing high-quality content (posts) instead of commenting. It is not in my nature to write comments (and this style of contributing).
It does not mean that I am not putting high effort into writing posts - quite the opposite. When I write long content I put all my heart into it and many hours.
What I mean is that I would love to meaningfully contribute and gain karma by doing "content" the way I like and prefer and not being forced to comment.
How do you gain karma on Reddit when you constantly get blocked and filtered?I am a cybersecurity expert and I have experience in writing decent technical content (like https://blog.vidocsecurity.com/blog/hacking-swagger-ui-from-xss-to-account-takeovers/ or https://www.moczadlo.com/2024/delightful-inputs-with-intellisense-and-syntax-highlighting)It is almost impossible to translate it into...