umarcyber
Re:Critical CVE issued for hallucinated SQLite vulnerability
on Monday August 03, 2026 @12:16PM (#49157777)
It really is a shame that funding cuts at NIST has led directly to this. I don't know if there is an incentive for a non-profit to come out of the woods to do the validation and enrichment process, but boy do we need it.
Like gortok has said, LLMs are just probabilistic text-prediction engines. They cannot automate the vulnerability validation lifecycle because they cannot account for improbable edge cases. They may not even get the version of the software right...
Re:The newest Instagram “exploit” is the goofiest I've seen
on Wednesday June 03, 2026 @01:19PM (#48386825)
I think one has historically been more text based vs image based. so for comms, i think X makes more sense. Space Force is under DoD so funding not much an issue. NASA, not so much. They have to fight for every nickle they get, so appealing to audiences via images/videos makes sense. I'm more so questioning why HE needed an account, instead of just the organization. Like Space Force posting makes more sense than him using it. I think what you're getting at is that the medium of communication has changed to social media. I get that. I just think it expands the attack surface for that org. Just have one account and post through that
Re:The newest Instagram “exploit” is the goofiest I've seen
on Monday June 01, 2026 @01:40PM (#48360089)
I'm sitting here wondering why the Chief Master Sergeant of the U.S. Space Force has an Instagram account to begin with. I understand it's the office itself, but still don't see the reason to expand the attack surface of government offices. X makes sense, Instagram, I'm not so sure as much
Re:Launch HN: Freestyle: Sandboxes for AI Coding Agents
on Monday April 06, 2026 @04:29PM (#47666602)
Your UI design is really nice.
Re:PC Gamer Recommends RSS Readers in a 37MB Article That Just Keeps D...
on Sunday March 22, 2026 @05:58PM (#47482648)
This was the exact motivation that led me to develop my own news feed for a vulnerability dashboard I'm working on. I would wait for my NVD API calls to finish by scrolling tech sites but was always inundated by ads...