bsamuels

Joined 13 years ago

Karma
2,082
Submissions
379
Member since
Nov 20
Director of Engineering @ Trail of Bits. If you want to ask me a question, please send an email rather than reply on HN.

https://twitter.com/thebensams

https://github.com/bsamuels453

View on Hacker News

Recent submissions

Comment · 4 months ago
Comment · 4 months ago
and how do you propose fixing the hundreds, if not thousands, of valid, impactful security bugs that frontier models will find?
Comment · 5 months ago
they buy it from research peptide vendors
Comment · 8 months ago
thinking tokens, output tokens, etc. Being more clever about file reads/tool calling.
Comment · 10 months ago
dont unzip an untrusted payload
Comment · 11 months ago
welcome, you're well along the path of realizing that most of the people on this site don't know what they're talking about
Comment · 1 year ago
IP rate limiting hasn't been a serious misuse prevention tool for 15-20 years
Comment · 1 year ago
as soon as you publish a benchmark like this, it becomes worthless because it can be included in the training corpus
Comment · 1 year ago
In addition to what Will posted, published reports for blockchain projects tend to be skewed compared to our other groups.

Blockchain clients tend to want to publish the report, but that isn't true for our business lines/projects/clients that are more interesting to HN's audience.

Comment · 1 year ago
the exact details of the attack were still evolving when we pushed the blog post out, so we kept it to what we did know and what could be extrapolated from it
Comment · 1 year ago
had the same thing coincide with covid, but much harder to fall asleep once disrupted. Melatonin only seems to last for an hour or so, so I would take one to go back to sleep after a disruption
Comment · 2 years ago
3. is a romance scam. pig butchering/romance scams take place over multiple months, not one texting session
Comment · 2 years ago
I love these threads because nobody in them ever knows what entrapment is
Comment · 2 years ago
At my previous job we used GCP and went through so much effort/tooling to try to fix IAM. We definitely would have given this tool a spin. Ignore the HN flashmob.

Another use case you might run in to as you talk with more clients is figuring out what developer IAM roles need to be. This was the far bigger problem for us as we had a ToS that restricted employees from viewing/accessing user data.

Comment · 3 years ago
> largely on account of the victims being unsympathetic.

the crass bullshit that people on HN say astounds me every day. the victims here are literally the people who need protecting the most

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton