Painted by a homeless man: https://streetartutopia.com/2024/10/13/painted-by-a-homeless-man/

@drahardja @SteveBellovin What is this *not* good for?

Doing my weekly update of TeXLive, I spotted this as a new feature. Just what I want—SQL injection in document source…

@muneef This PNG could've been a HTML table...

Writing things down isn't just good science; it's the ultimate kink. 😝

the zendesk hack, for anyone interested

https://gist.github.com/hackermondev/68ec8ed145fcee49d2f5e2b9d2cf2e52

@asicc I have no clue how this should/could be resolved unfortunately.

People getting more familiar with the infrastructure around them would probably help, but technology goes in a direction that hides these details, hence its popularity.

@asicc My point is exactly that the contents of an URL doesn't seem to matter _at all_ because many people have no idea what trustworthy domains are (or how they would like like as part of an URL).

In other words you don't have to register n<very weird e-like character>tflix[.]com for your scam because people will just trust PayForYourTV[.]so.

@tara @bitzero TIL about elinks, it looks awesome!

The current chaos in WordPress caused by Matt seems like a good time to remind folks that the Mastodon “community” websites and trademarks are 100% owned by one man, despite pleas from current and former project members to make Mastodon a foundation with a board.

gm fedi

sometimes the answer is not "have you tried turning it off and on again" but "have you tried using the physical power switch while sacrificing a goat"

Now that I look at it, Empire of Ghidra has strong Mordor vibes...

I decided to document this weekend's debugging adventure

#rpg #therapy

@bfjvii @mjd The moment that word appears you know you are being scammed.

[RSS] Every bug/quirk of the Windows resource compiler (rc.exe), probably

https://www.ryanliptak.com/blog/every-rc-exe-bug-quirk-probably/

[RSS] Finding a Heap Buffer Overflow in the ASAM MDF Library Used in ADAS Systems with AFL++

https://g0ku704.github.io/2024/08/13/mdf4_parser_vuln_CVE-2024-41445.html

CVE-2024-41445 #fuzzing

I’m glad we wrote that paper. However LLMs “still lack basic reasoning skills” makes me cringe.

Information theory tells me that because an LLM is a finite set that is not able to grow itself, once it is trained has a finite capability. And that capability is driven by statistics and numbers.

intuitively (to me at least) if you present an LLM with a prompt that’s weird enough it will “hallucinate” answers because it has no critical thinking, it’s just a big probability machine that tries to find the most likely answer to your question. As a result, present an LLM with a chess problem brain teaser unique setup, chances is the LLM will make up rules because what it trained against isn’t chess rules but “in general chess problems end with a checkmate” and it will interpolate the movements from where you are to a checkmate.
https://mastodon.social/@appleinsider/113295305642702643

@fortyseven @realhackhistory Exactly, this is how Art looks like.

@tmr232 Sun and Oracle are also HW companies, but it's probably just Tinfoil Hat Me talking...