jdefr89

Joined 16 years ago

Karma
548
Submissions
272
Member since
May 29
Email: [email protected] GitHub: github.com/jdefrancesco

Vulnerability Researcher @ MIT. Develop both software and hardware solutions to many security based computing problems.

View on Hacker News

Recent submissions

Comment · 1 month ago
Yes… It is clearly satire. It’s funny to see how many people don’t realize it…
Comment · 3 months ago
I implemented it quite quickly I use SimHash for now but I need to refactor and possibly replace…
Comment · 3 months ago
Wow. Wasn’t expecting to see this here… I am the author…
Comment · 3 months ago
You can still exploit a system and easily prove it via simply popping a shell or calc.exe or updating a database with a new entry, etc… They didn’t have to let it loose on the network. If that system was air gapped - problem solved.
Comment · 3 months ago
Security Researcher here. While you’re correct that air gaps aren’t a totally secure mechanism to rely on, they sure as hell can raise the bar for realistic exploitation. You pretty much need to rely on tricking someone into running your exploit or something of that nature. That said, they could have completely avoided this problem with an air gap. Simply don’t provide it network access. That isn’t too hard to do.
Comment · 4 months ago
I am at a similar salary. I live in Kendal Square; nearly on MIt campus for convenience and due to the fact I relocated to Cambridge from PA when I took my research pos at MIT lab. I pay 4000k a month for a STUDIO. That includes no utilities or anything. Then add groceries and all that stuff. Then add supporting your significant other and various other things…. trust me it disappears fast. Yes there is some cash left over if you do absolutely nothing but stay in your home… Things get tight. I shouldn’t feel pressure given my salary but sometimes I think if things really went downhill… my salary isn’t leaving me room for a care/worry free life style. Not the way it would have 10 to 15 years ago. Things are too expensive…
Comment · 4 months ago
Hello Joseph. I am awesome Joseph. I am at MIT LL. Can’t wait to check this out a bit deeper.
Comment · 7 months ago
A few things here.

1. Use a proper Markdown parser. The grammar is easy to define EBNF style most implementations I see now days use some recursive descent parser, etc… Regex implementation was used in original authors parser when it became popular.

2. You can resolve ambiguities and define more consistent symbols that make sense. Most markdown implementations are decent and follow common sense best practice syntax.

3. The beauty is its simplicity. You can pick it up in a few minutes and utilize it anywhere you damn near see a text box.

4. Parsing to HTML isn’t the only option! I mostly use TUI markdown viewers that render the document via ANSI escape codes beautifully. Check out glow project. But once you parse and have a AST, you can easily walk it and render it in other ways as well. Again though. Everyone can read a text document and a html document. You can render it to a PDF if need be.

5. Do we really need a whole new markup text2<format of some kind>? Markdown is simple fast and widely supported. So I have to say.. I prefer it over most things and that includes Rst.

If you need real beauty and power you can move to LaTeX or something… My two cents anyway.

Comment · 7 months ago
Sort of hard to do because AI it shoved down your throat in one form or another virtually everywhere you go. I also think a lot of us Hackers are mourning the fact we spent many years mastering machines and programming just to have the skill devalued (at least from the publics perspective) nearly over night. I personally think it is more important now more than ever to understand technology. To be able to write code, understand how a CPU works etc. Tech literacy will help prevent doom scenarios. A future where virtually everyone depends on AI and Computers but lacks people who actually understand them from a low level perspective seems bleak. I know thinking itself seems to have gone out of fashion and its given rise to misinformation and/or political nonsense like the rise of fascism etc... I think a lot of us just feel "empty" and are trying to express it.
Comment · 7 months ago
Over reliance on LLMs is going to become such a disaster in a way no one would have thought possible. Not sure exactly what, who, when, or where.. Just that having your entire product or repo dependent on a single entity is going to lead to some bad times…
Comment · 7 months ago
Which one was yours???
Comment · 7 months ago
That’s what I really gets me. These folks who are “so rich from said technology” always need you to buy their course for $5,000… Likes buddy if you were bringing in so much money you probably wouldn’t be pestering people to take your “course” and you certainly aren’t going to give any info away that have value only because they are obscure or hard to do… They are also almost ALWAYS self proclaimed experts. Oversight everyone because an AI expert. Before ChatGPT they probably had zero AI was a large field and machine learning is one small part of it..
Comment · 7 months ago
That’s all it came down to with me.. FreeBSD doing WiFi circa 2002 was a remote dream. Shit even Linux you had to use ndiswrapper and it still prob wouldn’t work
Comment · 7 months ago
I’m 37 and have coded my entire life. I even got to pull the drop out of college and do star up and make money type thing before I took my current position.. I have to say AI has sucked the heart and soul out of coding.. Like it’s the most boring thing having to sit and prompt… Not to mention the slop, nonsense hype etc.. Never attach your identity to your job or a skill. Many of us do that just to be humbled when a new advancement occurs… I know I see programming and looking at Open Source code to contribute and all of it…. Is just lifeless. Literally and figuratively. Sorry for long rant I needed to vent.
Comment · 7 months ago
I am not a graduate but Apple has reached out to me twice in the past month. Many others too so I wouldn’t say it’s absolutely dead but it’s tightened a bit.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton