technion

The entire premise of Bimi is just EV certs all over again, wrapped up in an email security blanket. Naturally it starts with a cartel of limited approved CAs.

Why not? Those pros have their opportunity to use this exploit dwindling by the hour as news of this and pressure to patch grows and grows. All the major managed hosting companies had this patched in the first 24 hours.

I never mentioned unreleased private exploits, I mentioned what every thought leader and popular creative wants us to believe right now.

There is a lot of cynicism in this thread but the fact this is still open and hour later ends the narrative in my view. There are not "thousands of swarms of agents autonomously compromising every site for its authors" or any the other x / LinkedIn dribble ive been reading.

It clearly isnt happening.

Claude is absurdly sensitive to anything that touches cyber, and threatens bans if it gets a whiff of a pentest going on. it wouldnt surprise me if openai had a similar approach.

Yesterday I joked that claude gave me a cyber stop for asking how to make the anime girl video for an exploit, but it was a thing that happened. Meanwhile im trying to convince people around me that having grok nudify people isnt "fine" just because grok says it is. Its wild where the lines a drawn.

I'm sure there is more to it than generally "ask Claude". I asked Claude this as a joke and it downgraded all the way to Sonnet before it would answer, and I was previously approved for their dual use cyber program.

The latest POC video for the php2shell exploit features a dancing anime girl. How would you create a video like this?

In nearly every org I've been in or contracted to, the public landing page of the company gets a special place outside of any ops of general technical team, and is instead the work of a marketing group or a "creative" outsourcer who will default to Wordpress on PHP.

Wait, they rebounded scout as autopilot?

As someone who works with Microsoft intune autopilot regularly... ugh.

I never thought I'd see a browser support list that specifically includes "Dilo" or, in the last few years, "Internet Explorer", but apparently you're comprehensive.

I went to look for unauthenticated CBC mode like every time I see this sort of thing but it's actually GCM mode so, well consider me surprised.

It's in the sysadmin sub because we are routinely the people told buy and manage Grammarly deployments, and we're the people generally cancelling those services now given everyone is being pushed to use their flavor of AI instead. And those emails from users upset that we're doing what management told us to do (following this Grammarly advice)? They go from end users to sysadmins.

The purchase of Tumblr was basically Elon purchasing Twitter without the political gain. I'm amazed the purchase decision was ever made, and more amazed that it still exists after the hit to the user base.

This might depend what you mean by code. In the sysadmin space I ask a web interface for poweshell to generate specific information multiple times a day, and pasting it into a terminal is really the cleanest workflow on a corporate machine where you have to justify running an executable.

Vmware vsphere is not at all in the consumer space where virtualbox exists.

Ai cant make a static HTML page sitting on something like cloudflare pages have an rce bug.