Neal Walfield

@nwalfield
366 Followers
882 Following
1.5K Posts

I work on Sequoia, a project to improve the OpenPGP ecosystem.

Antifa. Pro democracy. Pro positive and negative liberty.

I had a weird hardware experience today. I built a new PC, but shuffled around RAM and NVMEs, because prices. I put two NVME drives into the new build: a Samsung SSD 980 Pro and a Kingston KC3000. They were already in PCIe adapters so I plugged them in. The Supermicro motherboard refused to post and reset at initializing AHCI. Ok, pulled one drive, it booted. Put that back in and pulled the other, it booted. Eventually I tried moving the Samsung 980 to the on-board m.2 slot and it worked.
Sequoia has a bug bounty program and nearly all hunters use LLMs. If we were to decide that we would prohibit LLM submissions, we may as well close down the program. When interacting with hunters, I'm experimenting with saying: "Please keep your response to less than 200 words. Do not change the topic. Only consider the reported issue." Initial results are positive. The responses are still from an LLM, but they are shorter and seem more on-topic.
New bug bounty report: if a user supplies a time very far in the future to sq --time, then sq doesn't elegantly reject it, but crashes due to an overflow. Yes, this is a minor issue, but where's the security vulnerability?

TIL about bash's caller builtin, which makes it easy to get a backtrace in bash.

https://www.gnu.org/software/bash/manual/html_node/Bash-Builtins.html#index-caller

Bash Builtins (Bash Reference Manual)

Bash Builtins (Bash Reference Manual)

Over the last three weeks, the same bug was reported to Sequoia's bug bounty program five times. My guess is that this correlates with an updated LLM model.

WE DON'T WANT TO KNOW BANKSY'S IDENTITY

STOP INVESTIGATING BANKSY FFS

INVESTIGATE LITERALLY EVERYTHING ELSE

In #Düsseldorf versammelten sich am Samstag mehrere Hundert Menschen zur dritten „PRÜF!“-Demo und verlangten, dass die AfD sowie andere vom Verfassungsschutz als „rechtsextrem“ eingestufte Parteien vom Bundesverfassungsgericht geprüft werden. Die nächste Demo folgt am 11. April.
Noch ein Stempel!

In #Düsseldorf wird trotz des Regens gründlich geprüft!

https://pruef-demos.de/ #pruef