biwills
Joined 7 years ago
Karma
66
Submissions
29
Member since
Sep 13
https://biwills.com
View on Hacker NewsRecent submissions
Comment · 1 month ago
Do we know the code behind these vulnerabilities were written by AI? It seems like if anything AI was used to find exisitng vulnerabilities that would otherwise be used/sold as zero days and go unreported.
It was always the case that finding vulnerabilities in software was easier than writting perfect software. I'm hopeful that we can use AI to make software more secure over time. Project Zero [1] and others has shown many times the past few years (pre LLMs) that automated fuzzing and other forms of dynamic analysis are very effective, which bodes well for automated testing via LLMs!
I agree that more code = more bugs overeall, but there are slow moving codebases that run some of the worlds most valuable software. Seems like using AI to find vulnerabilities in that code is a huge win across the board.
[1]: https://www.google.com/search?q=site%3Aprojectzero.google&q=...
Comment · 2 months ago
FWIW they have changed the price a few times [1].
The chances that this would survive ICANN's dispute-resolution policy [2] is very low:
> (iii) your domain name has been registered and is being used in bad faith.
I don't think putting up a page asking for $1M would pass the "bad faith" test
1: https://x.com/polycoolintern/status/2090532162067918941 2: https://www.icann.org/resources/pages/policy-2024-02-21-en
Comment · 2 months ago
> And then there’s the Stack Overflow Developer Survey.
Honest question, at what point is the Stack Overflow Developer Survey not representative of the average software engineer, many (most?) of who no longer use Stack Overflow?
Comment · 2 months ago
true and I'd love to be able to expand support out for the equivalent versions in linux / windows. For now, you can always fall back to using safeStorage on non macOS platforms!
Comment · 2 months ago
> What about consensus? Elections? Which server is the primary for a given repository? It also doesn't matter! There's no state and no consensus here. Any server can be the primary. All updates to the write-ahead log are synchronized with an atomic compare-and-swap (CAS) operation on S3, so it's always safe for any instance of a repository to receive a push.
Again reminded of what an amaizing piece of engineering S3 is (99.999999999% - 11 nines of durability) [1]
1: https://docs.aws.amazon.com/AmazonS3/latest/userguide/DataDu...
Comment · 1 year ago
I disagree, many companies are still great even after going public in the last decade:
Shopify, Cloudflare, Zoom, Spotify, Roblox, and Coinbase are all notable examples.
Comment · 1 year ago
Please add links on your site to your Terms of Service and Privacy Policy.