nullcathedral

Joined 10 months ago

Karma
105
Submissions
24
Member since
Dec 12
hn username @ hn username dot com

happy to discuss infosec, vulndev, etc.

There’s apparently a generative AI “artist” using the same name. We’re not related.

View on Hacker News

Recent submissions

Comment · 7 months ago
I wouldn't be surprised if we saw a headline in a few years when we find out other actors (e.g. China, Russia) have been buying this data en-masse too.
Comment · 7 months ago
Yikes. Why are private organizations so happy to participate in mass surveillance.
Comment · 7 months ago
I got bored so I decided to take another look at Roundcube :)
Comment · 7 months ago
This was one of my most frustrating disclosures, feedback on the process is very welcome :)
Comment · 7 months ago
Did you request a SSL certificate? Those are public, actors use those to scan any newly requested website for known vulnerabilities and other misconfigurations. I suspect you're just looking at standard internet noise :)
Comment · 7 months ago
Sonnet 4.6 and Opus 4.6 are still available here. Pro+ subscription.
Comment · 7 months ago
Do you run a dedicated "AI SRE" instance for each customer or how do you ensure there is no potential for cross-contamination or data leakage across customers?

Basically how do you make sure your "AI SRE" does not deviate from it's task and cause mayhem in the VM, or worse. Exfiltrates secrets, or other nasty things? :)

Comment · 7 months ago
I think the underlying point is valid. Agents are a potential tool to add to your arsenal in addition to "throw shit at the wall and see what sticks" tools like WebInspect, Appscan, Qualys, and Acunetix.
Comment · 8 months ago
The website gave it away for me, felt very AI generated
Comment · 8 months ago
Comment · 8 months ago

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton