mpeg

Tbf as someone with an infosec background, I would have probably written just about the same.

Pickle payload is a red flag precisely because pickle is not a safe serialisation format format when taken as untrusted input, here the input was trusted but it's still giving someone en easy escalation path (exactly what happened)

And most people would assume the whole cookie payload would be encrypted if they saw just a binary blob, and not realise you can fully read it if it's just signed

But, yes, the post was probably edited by an LLM, as is pretty much everything else you read online these days.

If you're going to make this argument, at least say GLM 5.3 instead of Claude, Claude will refuse to touch anything remotely close to this unless you're in the super special club.

And after messaging them and being turned down, still showing up to see if you find them

sometimes you don't pay the whole amount back, say I went for food and drinks I might expense the food but pay the drinks out of pocket

plus, it was a neat way of having a company supplied line of credit and defer payment for a couple months with no interest

Last time I worked corporate the card even allowed cash withdrawals, and would automatically mark them as personal expenses so I could pay them back.

Very handy when I don’t want to use my money for whatever reason but also don’t want the company to know everywhere I’ve been

I recognised Kenton from his profile pic, he’s definitely doing well but also is a terrific principal engineer, and still somehow finds the time to answer questions on discord, I’ve had chats with him about DOs even though my spend on the cf platform is ridiculously low

Announcing that the SSR memory leak is gone as part of a product launch is wild.

I think the reason it feels that way (I agree) is that forums had real community; I met irl friends in forums, people I stayed close with for many years

The modern day equivalent is probably discord, there are servers with really close communities where everyone knows each other

I remember in the early 2010s we used to get so much food off deliverance to the office

We found out you could add a negative tip and it would discount it off the price, but no one exploited it too scared that if they banned our address we’d be eating Tesco meal deals instead.

Now please do one to replace the MBA executive that gets hired to restructure the engineering team, asking for a friend.

Spanish is certainly an easy language to learn, but it’s a very hard language to master.

I’m a native Spanish speaker and I find English poetry much easier to understand, English is more rigid and while technically it might have a larger vocabulary you can do less with it, while the flexibility of Spanish in terms of word order and suffixes makes it possible to craft some really labyrinthine verses

to be fair, the title is very misleading, it took me a minute to understand what they meant

The title is a bit confusing, they're not using ciphertext for inference – they're passing ciphertext around in cases where an agent calls into another agent without exposing the plaintext to the end-user

Inference is still done in plaintext after this multi-agent message gets decrypted in the server side

As a counterpoint to all the negative comments here, it’s entirely possible the CTO knows it’s gonna take x time to get your company laptop, which precisely because it’s a regulated industry might mean days/weeks of you waiting around with nothing to do

In that situation it makes sense for you to bring a personal laptop which you can use to access non confidential stuff, you might not write any code in it and might just be given docs to read through