Viewing profile — dloss

Am I wrong to conclude that the statement by Google's VP of Security Engineering that "we simply must eliminate every software vulnerability on Earth" (before AI Agents find them) …

My voice teacher had me blow air into water with a straw. Felt good and had some therapeutic effect on my vocal chords. Apparently the technique had been developed by a Finnish spe…

Carlini gives some more background about his vulnerability research with Claude in this interview by tptacek & co. https://securitycryptographywhatever.com/2026/03/25/ai-bug-f...

If you're fine with CLIs, maybe my Kelora project is worth a look. It's a very flexible log processor with built-in scripting: https://kelora.dev

Do you have any specific pointers concerning that "relaxing/manipulating of fascia/muscles" part? I have only dabbled a bit in qigong and hadn't noticed this. Would love to learn m…

> "simply taking time to feel your body and put your attention into latched tissues can release them." That has been my experience as well. I have developed my own little technique…

I'm sharing Kelora, a hobby project that I have been developing over the last 6 months. It's a scriptable log processor for the command line, with 150+ built-in functions for parsi…

Yes, the 3B variant, with vLLM 0.11.2. Parameters are given on the HF page. Had to override the temperature to 0.15 though (as suggested on HF) to avoid random looking syllables.

Some more example programs in Lambda Calculus here, including a compliant brainf#*k interpreter: https://justine.lol/lambda/

Anthropic recently released a sandboxing tool based on bubblewrap (Linux, quite lightweight) and sandbox-exec (macOS). https://github.com/anthropic-experimental/sandbox-runtime I w…

Here's a list: https://github.com/dloss/binary-parsing

Great list! Will incorporate some of those into my list of tools for binary parsing: https://github.com/dloss/binary-parsing

Very nice! Added to my little list of log viewers at https://github.com/dloss/klp#alternative-tools

For example: No buffer overflows, null pointer exceptions, use-after-free, etc. On ARM and RISCV64 not even the C compiler has to be trusted, because functional correctness has bee…

Well, an L4 variant is used in iPhones: "The Secure Enclave Processor runs an Apple-customized version of the L4 microkernel." https://support.apple.com/de-at/guide/security/sec59b…

There's TinyTeX: https://yihui.org/tinytex/

Noir is a Domain Specific Language for SNARK proving systems. https://noir-lang.org/

I'd like to share "klp", a command-line log viewer for investigating small to medium-sized log files (up to ~100k lines). While there are faster and more mature log viewers out the…

A very easy way to find such "visual" collisions is described in section 4.2 of our drunken bishop paper: http://www.dirk-loss.de/sshvis/drunken_bishop.pdf