News for hackers. Stuff that matters.

r9295

In my experience, the issue has been likelihood of exploitation or issue severity. Claude gets it wrong almost all the time.

A threat model matters and some risks are accepted. Good luck convincing an LLM of that fact

Re:A Fuzzer for the Toy Optimizer on Wednesday March 18, 2026 @11:14AM (#47426808)
Those interested in testing optimizers may have a look at equivalence modulo testing, a fascinating research field:

https://dl.acm.org/doi/10.1145/2666356.2594334

Re:Kidnapped by Deutsche Bahn on Monday December 29, 2025 @08:53AM (#46420772)
This has been the case since I moved to Germany, 6 years ago. National humiliation is apparently an insufficient detterent.
Re:A P2P Vision for QUIC (2024) on Thursday November 06, 2025 @10:00AM (#45836008)
It really depends on the implementation? From my understanding, WebRTC uses it to broker the connection and nothing more. Then it's p2p
Re:Testosterone Administration Induces a Red Shift in Democrats on Saturday October 18, 2025 @01:23PM (#45628909)
136 males? Fooled by randomness
Re:EU lawmakers push to ban term 'veggie-burger' on Friday October 10, 2025 @06:45AM (#45537324)
Unsure what either of those have to do with this law
Re:Python on the Edge: Fast, sandboxed, and powered by WebAssembly on Thursday September 25, 2025 @08:34AM (#45372041)
WASM runs in the browser which is why it receives so much consideration (rightfully so).
Re:Keep Pydantic out of your Domain Layer on Saturday July 26, 2025 @06:02AM (#44692855)
Personally, I think that's a good idea. Design patterns naturally make sense (Visitor, Builder for e.g) once you encounter such a situation in your codebase. It almost makes complete sense then. Otherwise IMHO, it's just premature abstraction
Re:Mapbox Geospatial MCP Server on Wednesday June 11, 2025 @02:23PM (#44250365)
Honest question: what's the fun in travel if you remove all uncertainty?
Re:AI Changes Everything on Wednesday June 04, 2025 @05:52AM (#44178973)
How is one supposed to context switch between reading a book and rigorously understanding and verifying potentially hundreds of lines of code generated by an AI?
If you can translate the schema into native rust types, then yes!

https://github.com/oxidecomputer/typify may help for starters. Please create an issue if you need further help with integration!

Glad to hear this! Please create an issue if you run into any issues during the integration.
Re:New speculative attacks on Apple CPUs on Tuesday January 28, 2025 @02:07PM (#42856529)
They've also consistently put out some of the best fuzzing research
I'm assuming it's similar to Spotify using session musicians to create ghost artists. Instagram won't need to pay actual creators since they own all the content created by these AI generated will be owned by them
An idea I that I considered implementing was to instrument parser libraries (png/pdf etc) with address sanitizer (for iMessage/Chrome/Webkit) and run the instrumented version for 5% of all parsing operations. If we get enough people to use this, exploits may be easier to discover?
Re:Stopping by Woods on a Snowy Evening on Sunday December 22, 2024 @02:59PM (#42488661)
I assume every English teacher of quality must have gone through this poem with their class. Mine certainly did! This reminds me, I should write to her and thank her for introducing me to such enchantment
Re:An Interview with Bill Watterson on Thursday December 05, 2024 @03:25PM (#42332356)
I was gifted the entire collection a couple of years ago by my father, having grown up adoring Calvin and Hobbes, mostly thanks to him. I used to re-read the few books at the local library over and over again. The Christmas strips were my favourite, because I hadn't experienced snow at the time.

The entire collection opened a window into Watterson's evolution. He became a bit more cynical as time passed. I loved it.

Reading about his respect for his work, his refusal to sell out and his restraint made so much sense. You could feel it, the way these characters came to life. The essence ever intact.

Forever changed, forever grateful

This brings to mind a recent thought I had - our senses and intuition continue to be abstracted and delegated. It is especially humiliating when this delegation, which we must obey, is derived from data which we are unable to comprehend or perceive.

The medium is the message

Classic BusinessInsider article with no actual insight or sources, just a few shallow quotes and sensational extracts.
Re:Life without Aadhaar digital identity in India on Tuesday September 24, 2024 @03:52PM (#41640219)
Renewals, from what I heard, were difficult to hinder since you already had an official state issued document.
Re:Life without Aadhaar digital identity in India on Tuesday September 24, 2024 @01:29PM (#41638909)
Needed to get one for my passport. At that point, in 2017, it "wasn't required" but the state bureaucracy made it clear I wasn't getting it without my Aadhar card.
I seriously doubt the claim that companies held onto workers during the economic downturn, Why are there companies complaining about staff shortages (eg: Deutsche Bahn, Airport staff etc) if they retained their staff?
Re:Evaluating Fuzz Testing on Tuesday July 02, 2024 @09:33AM (#40856480)
Further reading (published this year) along similar lines: https://mschloegel.me/paper/schloegel2024sokfuzzevals.pdf

Building fuzzers that are as efficient and generic as AFL++ (with cmplog) is a truly difficult undertaking.

Older »