Live data from Hacker News

Viewing profile — jdefr89

jdefr89

HN member
Joined
Sat, May 29, 2010, 4:11 PM UTC
HN karma
548
Public activity
271 items

About jdefr89

Email: jdefr89@gmail.com GitHub: github.com/jdefrancesco

Vulnerability Researcher @ MIT. Develop both software and hardware solutions to many security based computing problems.

Recent public activity

  1. comment
    Comment #49056302

    I implemented it quite quickly I use SimHash for now but I need to refactor and possibly replace…

  2. comment
    Comment #49056290

    Wow. Wasn’t expecting to see this here… I am the author…

  3. comment
    Comment #49003467

    You can still exploit a system and easily prove it via simply popping a shell or calc.exe or updating a database with a new entry, etc… They didn’t have to let it loose on the netw…

  4. comment
    Comment #49003441

    Security Researcher here. While you’re correct that air gaps aren’t a totally secure mechanism to rely on, they sure as hell can raise the bar for realistic exploitation. You prett…

  5. comment
    Comment #48734483

    I am at a similar salary. I live in Kendal Square; nearly on MIt campus for convenience and due to the fact I relocated to Cambridge from PA when I took my research pos at MIT lab.…

  6. comment
    Comment #48603285

    Hello Joseph. I am awesome Joseph. I am at MIT LL. Can’t wait to check this out a bit deeper.

  7. comment
    Comment #47634493

    A few things here. 1. Use a proper Markdown parser. The grammar is easy to define EBNF style most implementations I see now days use some recursive descent parser, etc… Regex imple…

  8. comment
    Comment #47600412

    Sort of hard to do because AI it shoved down your throat in one form or another virtually everywhere you go. I also think a lot of us Hackers are mourning the fact we spent many ye…

  9. comment
    Comment #47587242

    Over reliance on LLMs is going to become such a disaster in a way no one would have thought possible. Not sure exactly what, who, when, or where.. Just that having your entire prod…

  10. comment
    Comment #47438474

    Which one was yours???

  11. comment
    Comment #47438185

    That’s what I really gets me. These folks who are “so rich from said technology” always need you to buy their course for $5,000… Likes buddy if you were bringing in so much money y…

  12. comment
    Comment #47412409

    That’s all it came down to with me.. FreeBSD doing WiFi circa 2002 was a remote dream. Shit even Linux you had to use ndiswrapper and it still prob wouldn’t work

  13. comment
    Comment #47398137

    I’m 37 and have coded my entire life. I even got to pull the drop out of college and do star up and make money type thing before I took my current position.. I have to say AI has s…

  14. comment
    Comment #47398058

    I am not a graduate but Apple has reached out to me twice in the past month. Many others too so I wouldn’t say it’s absolutely dead but it’s tightened a bit.

  15. comment
    Comment #47140328

    No better way to learn System32 folder was essential is Windows than by destroying your family computer by removing it.

  16. comment
    Comment #47101877

    Vulnerability Researcher here… Unless your target has a security bounty process or reward; leave them alone. You don’t pentest a company without a contract that specified what you …

  17. comment
    Comment #46800928

    Python and PyTorch all call out to C libraries… I don’t get what he means by “proving LLMs can run without Python and PyTorch” at all. Seems like they don’t understand basic fundam…

  18. comment
    Comment #46796731

    All because this dude is the ultimate judge for all that is good and worth doing somehow..

  19. comment
    Comment #46796711

    Oh.. So you start doing something new and you're top 10% without practicing or being bad at it first? I'd love to test that to see if it's the case... Your logic is "You're not the…

  20. comment
    Comment #46795628

    Obviously familiar with Fabrice Bellard and his technical contributions but it seems like he is a pretty private person and he keeps to himself. I don't really know much about him …

  21. comment
    Comment #46696637

    As someone who does it for a living the challenge can be in both. However this article is asking its agents to do CTF like challenges which I am sure the respective LLMs have seen …

  22. comment
    Comment #46696609

    Yea, this entire repo/article seems super misleading to me. Not to mention asking it to generate API for OOB R/W primitives is essentially asking it to regurgitate what exists on t…

  23. comment
    Comment #46694960

    Most modern kill chains involve chaining together that many bugs... I know because it's my job and its become demoralizing.

  24. comment
    Comment #46694747

    Vulnerability Researcher/Reverse Eng here... Aspects about it generating an API for read/write primitives are simply it regurgitating tons of APIs that exist already. Its still coo…

  25. comment
    Comment #46544179

    It is pretty and it can do pretty much exactly what Rust enums do if they learned basic idiomatic Go.. Rust is a cult at this point honestly.