launchdaemon

32 Followers
365 Following
259 Posts
Mostly interested in mobile security/ malware/ reversing, coffee and burritos.
The invisible man had trans parents.
Is AI Profitable Yet?

Funny that.
Canada has such an easy job right now to literally just not be America but it has decided to push ahead with this bill C22 ๐Ÿ˜’

I strongly believe there are entire companies right now under heavy AI psychosis and its impossible to have rational conversations about it with them. I can't name any specific people because they include personal friends I deeply respect, but I worry about how this plays out.

I lived through the great MTBF vs MTTR (mean-time-between-failure vs. mean-time-to-recovery) reckoning of infrastructure during the transition to cloud and cloud automation. All those arguments are rearing their ugly heads again but now its... the whole software development industry (maybe the whole world, really).

It's frightening, because the psychosis folks operate under an almost absolute "MTTR is all you need" mentality: "its fine to ship bugs because the agents will fix them so quickly and at a scale humans can't do!" We learned in infrastructure that MTTR is great but you can't yeet resilient systems entirely.

The main issue is I don't even know how to bring this up to people I know personally, because bringing this topic up leads to immediately dismissals like "no no, it has full test coverage" or "bug reports are going down" or something, which just don't paint the whole picture.

We already learned this lesson once in infrastructure: you can automate yourself into a very resilient catastrophe machine. Systems can appear healthy by local metrics while globally becoming incomprehensible. Bug reports can go down while latent risk explodes. Test coverage can rise while semantic understanding falls. Changes happens so fast that nobody notices the underlying architecture decaying.

I worry.

"The most effective debugging tool is still careful thought, coupled with judiciously placed print statements." โ€” Brian Kernighan

Substack promoted Andrew Tate as their #1 "bestseller" last week. Cool company. Great leadership.

So I went ahead and made a browser extension.

Kill Yr Substack intercepts every Substack link (even on custom domains) and redirects it to `archive.is`.

Substack's numbers go down. You still get to read the thing tho.

https://jasoncosper.com/kill-yr-substack/

Update: If you have problems with `archive.is`, Ghost Archive is now available as an alternative redirect as of version 1.2.1.

Kill Yr Substack

Jason Cosper

pyghidra-mcp v0.2.0 is out with new --gui mode. ๐Ÿ‘€

Your local LLM drives a real Ghidra CodeBrowser, not a plugin.

New blog post shows firmware RE of the CVE-2024-3273 RCE chain with Gemma4.

https://clearbluejar.github.io/posts/pyghidra-mcp-meets-ghidra-gui-drive-project-wide-re-with-local-ai/

pyghidra-mcp Meets Ghidra GUI: Drive Project-Wide RE with Local AI

pyghidra-mcp v0.2.0 ships a GUI-backed mode that lets a local LLM drive a live Ghidra CodeBrowser at full project scope. Renames, plate comments, and cross-binary pivots land in real time, with every edit tagged in Ghidraโ€™s undo history while the session is alive.

clearbluejar