inahga
Joined 2 years ago
Karma
244
Submissions
52
Member since
Oct 8
Recent submissions
Comment · 11 days ago
I really don't understand how "need to pay for an LLM subscription to be usable" isn't a large indictment of the tool.
Comment · 2 months ago
Sadly I'm not. Either way, how LLMs work mean that traditional software analysis tools are every bit as important as they were in the before times. This is why we see a lot of hype around LLMs and formal verification.
Comment · 2 months ago
I probably would have made the same mistake. It is negligent to write GitHub Actions without using static analysis.
Use zizmor in CI https://github.com/zizmorcore/zizmor
error[template-injection]: code injection via template expansion
--> .github/workflows/jira_issue.yml:24:29
|
22 | run: |
| --- this run block
23 | # Escape special characters in title and body
24 | TITLE=$(echo '${{ github.event.issue.title }}' | sed 's/"/\\"/g' | sed "s/'/\\\'/g")
| ^^^^^^^^^^^^^^^^^^^^^^^^ may expand into attacker-controllable code
|
= note: audit confidence → High
= note: this finding has an auto-fixComment · 2 months ago
I don't understand his point either. I used to work off of Diehl Road not too far from the CyrusOne DC[1] and it is anything but a prairie. It has greenery, but it's just the usual fake landscaping that all the industrial parks in Aurora, Bolingbrook, Warrenville, etc. do.
And there's counterexamples to the desolate office space... the Ace Hardware corporate office[2] I think is remarkably pleasant.
Comment · 3 months ago
> That Pookie can show a video from a flock camera showing him somewhere else is a massive boost to his civil liberties. Same with whatever poor sap gets beat by the cops.
Not even remotely. The US is already at the stage where citizens can be brutally murdered, have said murder filmed at multiple angles, and have the officers involved get away with it.
Your civil liberties are irrelevant when we can just redefine and expand what it means to endanger a police officer. Or have the officers bypass the judicial system entirely.
Camera footage will only be used against you, not for you.
Comment · 3 months ago
If you hold police accountable, they respond by refusing to work. That's a problem that, at this time, has no solution.
Comment · 5 months ago
Tesla https://www.tesla.com/support/vehicle-firmware-prevent-autos...
Ford https://www.caranddriver.com/news/a70513450/ford-4-million-v...
GM https://www.themanual.com/auto/gm-brake-fluid-warning-recall...
I think Chrysler does it too, but I only find mention of the time they bricked a bunch of Wranglers with a bad OTA update.
Broadly I don't think it's hard to imagine a software update being safety critical if the software is used in a safety critical system.
Comment · 5 months ago
Has anyone experienced a case where they needed an over-the-air safety update/recall performed, but weren't able to because they removed the cellular modem?
I'd like to think failure to apply an OTA safety update would trigger a mail-out notification requesting you bring the vehicle into the dealer. But that's probably optimistic...
Comment · 7 months ago
The ciphers used by WireGuard are not FIPS 140-3 certified. So you have to also change the ciphers, as is done in this project.
Comment · 8 months ago
On the contrary, GP's warning saved my time and attention. For that I thank them.
Comment · 8 months ago
You should persist certs somewhere. Otherwise your availability is heavily tied to LE’s uptime.
Comment · 9 months ago
Mostly, if not entirely due to intentionally poor breeding practices. Who betrayed who?
Comment · 11 months ago
Watching this classic channel may be safer https://youtube.com/playlist?list=PLU4IMu04MIlJgB6Aaj07q-5iX...
Comment · 11 months ago
Sure, I don't mean this to arouse anger. I point it out for the Democratic primaries in March. https://ballotpedia.org/Illinois_gubernatorial_and_lieutenan...