kennwhite

kennwhite, 1 month ago to random

Incredible research at BlackHat Asia today by Tong Liu and team from the Institute of Information Engineering, Chinese Academy of Sciences (在iie.ac.cn 的电子邮件经过验证)

A dozen+ RCEs on popular LLM framework libraries like LangChain and LlamaIndex - used in lots of chat-assisted apps including GitHub. These guys got a reverse shell in two prompts, and even managed to exploit SetUID for full root on the underlying VM!

image/jpeg
image/jpeg

kennwhite, 1 month ago to random

Good morning Singapore.

kennwhite, 1 month ago to random

Someone is really enjoying the warm spring day.

mekkaokereke, 1 month ago to random

Still relevant:

https://hachyderm.io/@mekkaokereke/111502639878997581

News is such a confused industry. In order for it to be successful, it needs the majority of people to find value in the news that it produces. Most people are not old, wealthy, straight, white, men, but most news stories are framed from that perspective, even when the framing is false and easily debunkable.

Most news rooms don't look anything close to the people that they need to buy their papers to have a sustainable business.

Failure is inevitable.

kennwhite, 1 month ago to random

Great concluding line by Nvidia's Jensen Huang.
https://www.wired.com/story/nvidia-hardware-is-eating-the-world-jensen-huang/ via @laurengoode

kennwhite, 1 month ago to random

I forgot to post this - here's some little friends we met last week at the beach.

three dogs on the beach under umbrella shade, a beagle mix, a brindle-striped adult, and a Jack Russel mix

kennwhite, 1 month ago to random

Spent some time relaxing with the family near São Paulo for the last week. It was very peaceful.

[alt: beach in southeast Brazil at dawn & sunset]

kennwhite, 1 month ago to random

Great story by @zackwhittaker and nice research by @chick3nman. PSA: don't use deterministic hashing/encryption schemes to hide sensitive data on low-cardinality fields.

Shorter version: don't try to protect critical national infrastructure without consulting a cryptography engineer.

https://techcrunch.com/2024/03/30/att-reset-account-passcodes-customer-data/

kennwhite, 1 month ago to random

Ok, well Glassdoor is dead to me.

https://arstechnica.com/tech-policy/2024/03/glassdoor-adding-users-real-names-job-info-to-profiles-without-consent/

kennwhite, 1 month ago to random

Apparently Instagram (sue me, I'm just there for the capybaras, doggos, and cooking reels) has decided I'm in the target demo for knife sharpeners, wallets, and airline pilot uniforms.

kennwhite, 1 month ago to random

Never give up.

kennwhite, 2 months ago to random

"Foxes Agree to Greater Henhouse Security Measures, Offer Framework"

https://infosec.exchange/@lorenzofb/112139687216087666 via @lorenzofb

kennwhite, 2 months ago to random

Periodic PSA: E2EE or GTFO

kennwhite, 2 months ago to random

“Over and over again the Justices — particularly Barrett, Sotomayor, Jackson, and Kagan — just raked the Solicitor General of Louisiana, Benjamin Aguiñaga […] Over and over they kept asking him for a First Amendment test to apply. And over and over again he kept saying things that made it seem like he’d prepped for oral argument by reading the First Amendment Wikipedia page and checking his vibes.”

https://klonick.substack.com/p/murthy-oral-arguments-sotomayor-scolds by @klonick

kennwhite, 2 months ago to random

Catching up with the latest SCW podcast with Doug Stebila on his security analysis of Apple's new iMessage post-quantum PQ3 protocol, and wow, what a great episode. Show and paper links:

https://securitycryptographywhatever.com

https://www.douglas.stebila.ca/research/papers/Apple-Stebila24/

kennwhite, 2 months ago to random

The only people who call me Kenneth are the government and Google calendar.

kennwhite, 2 months ago to random

"The global dog DNA test market, which was valued at $235m in 2022, is projected to grow to $723m by 2030."
https://www.theguardian.com/lifeandstyle/2024/mar/13/dog-human-dna-test

kennwhite, 2 months ago to random

Via Helen Kennedy @helenkennedy.bsky.social: "I just saw this photo of Edith Wharton and I cannot get over how awesome her angry dogs are."

kennwhite, 2 months ago to random

This piece by @bobmcmillan is hysterical. The original designer of Clippy gets his revenge: “Clippy has that erotically appealing mix of being a bit annoying but also alluring,” he said. “He’s a bad boy, like Christian…from ‘Fifty Shades of Grey.’ ”
https://archive.is/JsURn
https://www.wsj.com/tech/microsoft-clippy-office-ai-virtual-assistant-5cf44348

kennwhite, 2 months ago to random

In the end, the little one won the battle through sheer perseverance.

kennwhite, 2 months ago to random

Happy Sunday.

kennwhite, 2 months ago to random

rosemary focaccia anyone?

kennwhite, 2 months ago to random

my Friday afternoon Slack notifications rn

guinea pig race meme

ted, 2 months ago to random

Time for Kublai to get his first bath.

kennwhite, 2 months ago to random

My friend just sent this to me.