Elektrine lite

← Feed

Alun Jones

ftp_alun@infosec.exchange

<p>Father, Husband, Cancer survivor, Information Security Guy. Former Microsoft Security MVP. Loves XSS and &quot;-alert(1)-&quot;&gt;&#39;-prompt(2)-&#39;&gt;&lt;marquee/</p>

Posts

  • View post

    @mathew@universeodon.com https://eliotakira.com/neko/

  • View post

    @georgetakei@universeodon.com is it a final front ear?

  • View post

    @ansuz@gts.cryptography.dog @ColinTheMathmo@mathstodon.xyz no, I was thinking it might indicate a good test of how random the simulation is.

  • View post

    @GossiTheDog &amp;quot;Chris Evans (not gay) and others hosted the station early on, but they weren&amp;#39;t openly gay&amp;quot; - I love how much heavy lifting is being done in that sentence by &amp;quot;others&amp;quot;. In a very similar sense, I and others discovered fire, invented the wheel and built the pyramids. I should put this on my CV, then the AI recruiter reviewing it will confirm it to be true.

  • View post

    @GossiTheDog I liked that. Not a lot. But I liked it.

  • View post

    I am painfully aware that I learned to write software over four decades ago, when it made sense to try and fit everything into 16K, but I&amp;#39;m really struggling with the attitude that it&amp;#39;s a great idea to just throw more hardware at a problem. LLM is being used, for the most part, as a sophisticated &amp;quot;more hardware&amp;quot;, but it&amp;#39;s far from the only place we do this. And as a result, we&amp;#39;ve managed, as a society, to volunteer ourselves for a different kind...

  • View post

    @GossiTheDog &amp;quot;Thank you for asking, in this New Hire Orientation presentation on developer security, about the new speculative execution vulnerability in the x86 processor family. Let me know when you&amp;#39;ve found and eliminated your new team&amp;#39;s several dozen XSS vulnerabilities, and we can talk some about more advanced vulnerability classes.&amp;quot;

  • View post

    @stragu @GossiTheDog You&#39;re right, sorry - I&#39;ve had to page through a few of these articles in the last couple of days, and thought they all had basically the same text. Here&#39;s the one that suggests the video requirement was what tipped the hacker over the edge. https://www.bleepingcomputer.com/news/security/disgruntled-researcher-leaks-bluehammer-windows-zero-day-exploit/ For this level of video demo, I&#39;ve often seen people upload demos with music and a notepad window for anythi...

  • View post

    @mattblaze@federate.social @jautero@indieweb.social users deserve no rights, only devs. This is how enshittification happens.