hackermailman
Joined 10 years ago
Karma
1,990
Submissions
879
Member since
Sep 28
Recent submissions
Comment · 9 days ago
Comment · 11 days ago
Will we even read code once AI just generates platform native executable binaries using a blackbox AI optimized compiler we have no access to?
Seems we will be writing programs using some kind of logical formal methods[1] and generating the code without ever looking at it and testing the system properties. I imagine AI will make its own intermediate programming language that benefits it the most instead of human readability
Comment · 11 days ago
True they can also get information from the public ssh key like if you used a real email address or name to start spear phishing or who knows what else like extortion threats to your company
Comment · 11 days ago
You could try a beginner 'lightweight formal methods' book then learn how to make a model of whatever LeetCode algorithm you optimized and test it for correctness https://forge-fm.github.io/book/2026/
Then you can check other LC solutions for bugs not caught by the test inputs because FM software like forge can find very tricky logic errors
Could also find some algorithm engineering course floating around and try and optimize a LeetCode solution you made for your specific hardware or their judging server learning what benchmarks to use. MIT has one but probably others: https://jshun.csail.mit.edu/6506-f26/schedule.html or if LC doesn't allow to download test inputs try competition programming archives they give you the test data https://usaco.org/index.php?page=training
With AI writing an entire algorithm test bench is pretty easy but what do you test, what stats are meaningful, vectorized registers, all those real world things.
Comment · 11 days ago
The Ebury botnet that's been around for a decade now is likely spying on Tor exit ssh tunnels looking for other criminals logging into their h4xxr jump boxes, ransomware deployments they can intercept and exploit themselves, financial crime market operators, crypto drug dealers etc.
Comment · 11 days ago
A Yubikey, though simply generating ssh keys instead of using passwords would stop this MITM attack. So would changing the rounds and port of ssh on your system and the remote box making yourself an invisible protocol nothing would recognize.
Yubikey benefits is it stores the keys in the hardware if your laptop is compromised somehow or stolen they at least don't get all the ssh keys too
Comment · 12 days ago
The author of that book has a course for it too
https://61040.github.io/fa26/schedule/
It's sort of an analytical way to design a user interface and is pretty helpful I find
Comment · 12 days ago
Try this book https://essenceofsoftware.com/
For example your personal website has a concept with no purpose the upper right oval things which are PgUp/Dn on my phone display. If you learn basic conceptual design you can easily architect small sites like the things in your portfolio while sitting in front of someone, then have AI of choice immediately build the entire user interface and they can test it out themselves.
Translating concepts into typescript code is trivial and exampled here https://61040-fa23.github.io/pages/concept-implementations.h... and AI can do this for you. The idea is concepts are reusable and modular and self contained. Whatever the user sees or has functional access to is what you design for and AI generates the hidden backend. If you design this way you discover many things are identical and can reuse an existing concept for it. You also discover many things have no real purpose and should be removed such as the 'don't hire me' section.
Some of the problems with your personal biz advertising site others have mentioned would've been caught by conceptual design such as what is the purpose of this site? To display a portfolio of work and harvest leads. What is the operational principal or how would someone use this site? Then you'd immediately catch there's no about me description above the logos/names etc., no obvious contact page therefore no harvesting of leads. You'd see that the descriptions of each portfolio entry should be included when you click on them instead of having these at the bottom of the page under 'Notable'. What is the purpose of enlarging an entry? To get more information. That is 2 concepts with the same purpose and break the design. Why not just include the notable designs and leave out the rest?
Anyway that book changed the way I write software and it fits nicely with vibecoding up a prototype.
Comment · 12 days ago
I agree with the 3blue1brown guy because now is the time to reinvent all pure math so it actually works. The other day I worked through a paper that redefines probability using game theory as a foundation and it was almost trivial to prove everything with an AI assistant. What else can be redefined
Comment · 17 days ago
If you remove the paywall and translate it's the A/I group being shut down https://www.state.gov/releases/office-of-the-spokesperson/20...
The Dutch police imaged the drive, gave it to the Americans and gave the server back to XS4ALL which itself appears to have shutdown too I think
Comment · 17 days ago
I like the fancy security theatre display that the Trezor device has but turns out it initializes with a copy of the legitimate firmware then saboteurs simply overwrite the random seed generator with a predetermined seed after all the startup security checks. https://www.zetter-zeroday.com/trezor-wallets-also-compromis...
Comment · 1 month ago
Expii did something similar but abandoned the AI judge that gave you more practice though I don't know why
Comment · 3 months ago
In Sussman's book 'Software Design For Flexibility' he uses Match? in the pattern matching chapter to run on graphs. I think OCW archived his MIT course for the book too
Comment · 4 months ago
It's a welfare economics theory course that requires many frameworks with measures where you are maximizing some graphical representation. It also requires assumptions to work and can be visualized in a model where you can see what happens when one of the assumptions doesn't hold.
For example the old and new Berkeley model to study rent control effect on market prices
Otherwise interviews are the same more or less with emphasis on reading code and being asked is there a more optimized approach and then seeing if the candidate invalidates the cache. You'll probably still get hired if you do it once but after being told something and you do it again in the next interview then nope. They still fly everyone out and do a superday with back to back interviews (and pay for the time).