kennwhite

@kennwhite@mastodon.social

cryptography • neuro • cloud • biscuits
ORD-DCA-NYC-BCN ✈️

This profile is from a federated server and may be incomplete. Browse more on the original instance.

kennwhite, to random
kennwhite, to random

Prepping final details for a crypto talk tomorrow and came across this old gem. "What is an unauthenticated signature?" you might ask. Great question.

kennwhite, to random

Incredible research at BlackHat Asia today by Tong Liu and team from the Institute of Information Engineering, Chinese Academy of Sciences (在iie.ac.cn 的电子邮件经过验证)

A dozen+ RCEs on popular LLM framework libraries like LangChain and LlamaIndex - used in lots of chat-assisted apps including GitHub. These guys got a reverse shell in two prompts, and even managed to exploit SetUID for full root on the underlying VM!

image/jpeg
image/jpeg

kennwhite, to random

ahahahahahaha

kennwhite, to random

Felt like a good night for biscuits

kennwhite, to random

So, recapping: the richest man in the world got annoyed about something on Twitter, and thumped his chest loudly proclaiming he would buy it, as-is, no due diligence, for $44B and then tried to back out of the deal and a Delaware judge told him to stfu and pay, and so he did but then through staggering incompetence, drove away so many users & advertisers that seven months later it was pulling in just 10% of pre-acquisition revenue, crushed under $1B/year interest payments to PE & the Saudis.

kennwhite, to random

“JPMorgan Chase notified the Treasury Department of more than $1 billion in transactions related to ‘human trafficking’ by Jeffrey Epstein dating back 16 years…a lawyer for the U.S. Virgin Islands told a federal judge”
https://www.cnbc.com/2023/09/01/report-jpmorgan-flagged-over-1b-in-epstein-transactions-to-treasury.html

kennwhite, to random

Air travel protip: whenever humanly possible, use carry-on instead of checking a bag, especially if you're on a fixed schedule. And always bring meds or important papers onboard with you. Source: me, heavy traveler of 30+ years. And thousands of stranded & confused fliers still digging out from the weekend global chaos & DC ATC fires.

kennwhite, to random

Minor thing, but if you care about accuracy: a lot of speculation swirling about Elmo's site woes today caused by an overdue GCP bill, but according to NYT & Bloomberg, the new CEO already paid the outstanding Google bill back in June. (Archive link to Bloomberg reporting in article)

https://archive.is/2023.06.29-155855/https://www.nytimes.com/2023/06/29/technology/twitter-ceo-linda-yaccarino.html

kennwhite, to random
kennwhite, to random

Good morning Sydney.

kennwhite, to random

I've been tweaking my cinnamon peach crumble recipe and I think I hit a good spot.

kennwhite, to random
kennwhite, to random

“When asked by a podcast host if he believes the outcome of the 2020 election was fraudulent, [former Trump Chief of Staff] Meadows responded, "I do believe that there are a number of fraudulent states ... I've seen at least illegal activity in Pennsylvania [and] in Georgia".
Under the penalty of perjury, Meadows offered a vastly different assessment to [DOJ] investigators, telling them he's never seen any evidence of fraud that would undermine the election's outcome”

https://abcnews.go.com/US/chief-staff-mark-meadows-granted-immunity-tells-special/story?id=104231281

kennwhite, to random

Just discovered Rust recently deprecated base64.decode(), which is arguably one of the most widely used functions in the ecosystem.

The non-warning generating form now is something like this:

use base64::{Engine as _, alphabet, engine::{self, general_purpose}}

let key = general_purpose::STANDARD.decode(base64_key);

And criticism on the Rust forums is 🔥 & 🌶️ .

kennwhite, to random

When you're the CEO of a top 3 airline and your company is cancelling thousands of flights and stranding hundreds of thousands of customers in the process, probably not wise to charter a private jet to bypass the unwashed masses and your own employees.
https://www.usatoday.com/story/travel/airline-news/2023/06/30/united-ceo-apologizes-private-jet-amid-cancellations/70375050007/

kennwhite, to random

Bitwarden password manager: 5+ hour service outage, web vault, login, and API because of upstream US cloud provider [narrator: it was Azure]

“I just tried it myself on a machine completely logged out, and the login page is simply spinning.”

https://status.bitwarden.com

image/jpeg
image/jpeg

kennwhite, to random

OH: There is no reason why AC doesn't exist in England. It's just self-owning at this point. Even the French have AC.

kennwhite, to random

“Canberra is a small place, so we sent the worm [removed from the patient's brain], which was still alive, straight to the laboratory of a CSIRO scientist who is very experienced with parasites,”

I just want to emphasize: WHICH WAS STILL ALIVE

https://www.theguardian.com/australia-news/2023/aug/28/live-worm-living-womans-brain-australia-depression-forgetfulness

kennwhite, to random

I hesitated to even post this, but I had a breakthrough in recreating a recipe from my youth I've been trying off and on to duplicate for 7+ years. Got in so much of a hurry to eat these seafood enchiladas that I forgot the sour cream & crema twisted drizzle and avocado slices, so forgive the non-Insta quality.

kennwhite, to random

Status earlier tonight: Payed for a half dozen sports channel trials, including 3 Spanish language outlets, but zero luck in watching Argentina play Ecuador in the World Cup qualifiers.

Current status: Watching the game on TV using AirPlay from my phone streaming some super sketch Saudi pirate web site.

kennwhite, to random

Wow is the competition stiff this year for Black Hat USA. Some really solid research headed to the main stage in August.

kennwhite, to random

Life tip: When you're past the starving Ramen noodle 5-roommate phase of life, go ahead and spend that extra $37 to NOT book the "basic economy" fare. Especially for 6+ hour flights. Your lower back & blood pressure will thank you. And you'll probably spend that $37 on a checked bag anyway. To the all the middle seat guys in Group 5, I salute you.

kennwhite, to random

Leopold says hey.

kennwhite, to random

Today I learned you can use Ethernet on an iPhone. https://www.macrumors.com/2023/09/22/iphone-15-usb-c-to-ethernet/

  • All
  • Subscribed
  • Moderated
  • Favorites
  • JUstTest
  • kavyap
  • DreamBathrooms
  • thenastyranch
  • magazineikmin
  • tacticalgear
  • cubers
  • Youngstown
  • mdbf
  • slotface
  • rosin
  • osvaldo12
  • ngwrru68w68
  • GTA5RPClips
  • provamag3
  • InstantRegret
  • everett
  • Durango
  • cisconetworking
  • khanakhh
  • ethstaker
  • tester
  • anitta
  • Leos
  • normalnudes
  • modclub
  • megavids
  • lostlight
  • All magazines