Mastodawn

@acdha @osxreverser In my opinion, we should stop expecting developers to know everything about infra. It just doesn't work for vast majority of developers. They like and want to write code, they should focus on that. The release pipelines and all other bs should be managed by other (paranoid) specialists.

JA Mar 18

@campuscodi
a) that's browser's and AV's job already
b) what about the eventual censorship abuse from the government when ISPs implement the list

JA Mar 11

@osxreverser have you seen this post? Would like to hear your thoughts

https://blog.mozilla.org/en/firefox/hardening-firefox-anthropic-red-team/

Yeah writing exploits is still hard and LLMs can't do it, but attackers can now find lots of bugs cheaply? On security engineering side, this should help to find and patch things in bulk too. Does anything change in the real world security though?

Hardening Firefox with Anthropic’s Red Team | The Mozilla Blog

For more than two decades, Firefox has been one of the most scrutinized and security-hardened codebases on the web. Open source means our code is visible,

Show thread

JA Mar 11

@Lee_Holmes @briankrebs Indeed, why would Meta want another social network full of bots :)

Show thread

JA Feb 24

@freddy Congrats! News are only highlighting the AI switch button, not the TT support 🙈

Show thread

JA Feb 23

@ariadne Same, but I remember people also used to post "I just ate a sandwich" on Twitter and I didn't understand why it exists for a while

Now for some reason people like to chat with their computer over a messenger

Show thread

JA Feb 21

@osxreverser ahh, I just wish they edited the blog post to sound less AI

Show thread

JA Feb 17

@tychotithonus Nope, just replaced the original if you look at the file history

https://infosec.exchange/@caspicat/116083415231058852

JA (@[email protected])

@munin 9 months https://github.com/MicrosoftDocs/learn/blob/main/learn-pr/github/introduction-to-github/media/2-git-flow-image.png

Infosec Exchange

Show thread

JA Feb 17

@munin 9 months
https://github.com/MicrosoftDocs/learn/blob/main/learn-pr/github/introduction-to-github/media/2-git-flow-image.png

learn/learn-pr/github/introduction-to-github/media/2-git-flow-image.png at main · MicrosoftDocs/learn

Microsoft Learn: Cloud & AI Training Content. This repository is public for Instructor Led Training purposes; we do not accept pull requests in this repository. - MicrosoftDocs/learn

GitHub

Show thread

JA Feb 3

@b0rk Voted CORS because people forget that browser will perform the actual network request in non-preflight requests, the client just can't read the result (this often used to lead to CSRF before samesite cookies adoption).