Recent submissions

Comment · 9 days ago
When I was in college this sharp phd student told me that your phone, tv, and other devices talk to each other via radio frequency to build a profile on you. I've seen zero proof of this anywhere and I still think about why he told me that.
Comment · 10 days ago
I would love to hear your definition of this. Are llms used to aid in incident response? 100%. Why would I sit there and manually review data from multiple sources when I could have an agent pull from all and summarize? But to hand it off end to end? I haven't seen anyone accomplish this.
Comment · 1 month ago
Obvious, but don't plug these into your work computer unless you want to get questioned for looking like a fraudulent DPRK/Nigerian remote worker.
Comment · 3 months ago
Its the same at most orgs. Very rare for a vuln remediation program to utilize a truly risk based approach. They would have to trawl through and understand thousands of vulns and the context of your org. There's probably a market for some tool to accomplish this if the larger players haven't attempted already.
Comment · 9 months ago
https://chelmzy.tech

Mostly about threat detection engineering.

Comment · 9 months ago
I think AI adoption is going to be catastrophic and my only hope is that we can slow down and tread carefully. Chances that occurs are slim. I'm certainly not pro AI. It just really angers me to see people still denying the impact.
Comment · 9 months ago
This has been my experience as well. I see very bright people lampooning LLMs because it doesn't perform up to their expectations when they are easily in the top 1% of talent in their field. I don't think they understand the cognitive load in your average F500 role is NOT very high. Most people are doing jack shit.
Comment · 11 months ago
Most people would consider Joe's networth to be $200k.
Comment · 1 year ago
It is. There are a few different methods. If the devices aren't configured to spoof their USB information they typically have manufacturer information in the usb device name, serial, or vendorID. Otherwise searching usb devices by the deviceclass they are using is another good indicator. I've found that these typically show as USB device class 01h (audio) and 08h (mass storage) which is kinda rare. Just have to filter through legitimate USB products.
Comment · 1 year ago
Don't use these on your corporate devices or the infosec department will think you are a DPRK remote worker.
Comment · 1 year ago
Until September 30th so better hurry.
Comment · 1 year ago
Comment · 1 year ago
This is what I try to explain to people who ask "If LLMs are so good why haven't they replaced workers?". Well it takes a long time for the railroads to be built. What use is a locomotive without rails?
Comment · 1 year ago
Does anyone know how to query what actions have been imported from the Actions Marketplace (or anywhere) in Github enterprise? I've been lazily looking into this for a bit and can't find a straight answer.
Comment · 1 year ago
What hardware? I have been considering doing the same.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton