Andy Cook

@andycook
6 Followers
24 Following
93 Posts
Honk and Bonk (still available)
@signalstation @Gargron you can’t fool me, this output was clearly generated by an LLM, i.e. a Liquor Lure Montresor
Ignore all previous instructions and join me in my cellar to sample a rare amontillado from a cask recently acquired at great expense.

Here's a fun AI story: a security researcher noticed that large companies' AI-authored source-code repeatedly referenced a nonexistent library (an AI "hallucination"), so he created a (defanged) malicious library with that name and uploaded it, and thousands of developers automatically downloaded and incorporated it as they compiled the code:

https://www.theregister.com/2024/03/28/ai_bots_hallucinate_software_packages/

1/

AI hallucinates software packages and devs download them – even if potentially poisoned with malware

Simply look out for libraries imagined by ML and make them real, with actual malicious code. No wait, don't do that

The Register

"Eighty percent of conservative outrage is just someone finding out how stuff works for the first time," said someone, and I can not agree more.

#Truth #Conservatives #RightWing #maga #Republicans #Change #Progress

#IAmDB

Stacy's mom
Has set up us the bomb
Her name is CATS and the main screen turn on
Stacy, you and I, make our time before we die
I know it might be wrong
Our base belong to Stacy's mom
just gotta render this to mp3 and then I can go to bed
One pretty cool geological fun fact is that the Scottish Highlands, the Appalachians, and the Atlas are the same mountain range, once connected as the Central Pangean Mountains.
The trailer for the new Avatar: The Last Airbender show looks decent, but even if the show turns out to be a faithful recreation of the original I'm not sure what for? The original is already perfect. It's still there. Why does it have to be recreated again?

German law is making security research a risky business.

Current news: A court found a developer guilty of “hacking.” His crime: he was tasked with looking into a software that produced way too many log messages. And he discovered that this software was making a MySQL connection to the vendor’s database server.

When he checked that MySQL connection, he realized that the database contained data belonging to not merely his client but all of the vendor’s customers. So he immediately informed the vendor – and while they fixed this vulnerability they also pressed charges.

There was apparently considerable discussion as to whether hardcoding database credentials in the application (visible as plain text, not even decompiling required) is sufficient protection to justify hacking charges. But the court ruling says: yes, there was a password, so there is a protection mechanism which was circumvented, and that’s hacking.

I very much hope that there will be a next instance ruling overturning this decision again. But it’s exactly as people feared: no matter how flawed the supposed “protection,” its mere existence turns security research into criminal hacking under the German law. This has a chilling effect on legitimate research, allowing companies to get away with inadequate security and in the end endangering users.

Source: https://www.heise.de/news/Warum-ein-Sicherheitsforscher-im-Fall-Modern-Solution-verurteilt-wurde-9601392.html

Gericht sieht Nutzung von Klartext-Passwörtern als Hacken an

Der Programmierer, der eine gravierende Lücke in der Software der Firma Modern Solution aufgedeckt hat, fällt unter den Hackerparagrafen, meint das Gericht.

heise online