Viewing profile — jerrythegerbil

The LLMs play a part, but it’s the tempo; the pace. Fully autonomous w/LLM isn’t true. Leadership wants it true. The technological capabilities and acceptance of scapegoating a mac…

An ssh server would exploit a vulnerability in the ssh client when it connects. For example, openssh has both a client and server. There’s been vulnerabilities in openssh, in the c…

This AI generated article about closed-weights model providers collaborating for additional scrutiny of open weights models, where the article itself has the tell-tale structure of…

“However, large-scale, covert industrial distillation aimed at stealing proprietary U.S. technology and undermining American research is unacceptable.” What’s actually happening be…

A datacenter was built a couple hundred feet from my apartment complex around 2013-2014. Absolutely none of your comment would have even remotely held true at the time, and my fami…

“Pre-Authentication” and “Unauthenticated” are meaningfully different things, and for the purposes of marketing reach you always want to push for “Unauthenticated” if possible. Typ…

https://dnschecker.org/#A/motherless.com

MKULTRA was about using drugs to alter state and produce uninhibited truthfulness. Social media has a direct impact on dopamine and uninhibited oversharing. The mechanism isn’t eve…

> Gates that reduce resume flow-through are only useful if their reduction is correlated with quality. The volume is infeasible to review everyone for quality, even at an hour scal…

> I fail 65% of the time. Same exact resume, different luck. As someone who’s run hiring pipelines for technical roles in the past few years, that’s actually a fantastic number. I …

Vulnerability reports were never special. The _demonstration_ of security impact through vulnerability reports was special. The automation of “demonstration of impact” with AI isn’…

Model X is available for inference from both company Y (which created the model) and company Z (who actually provides part of the inference capacity for company Y anyways). Company…

“Zero-Click RCE” This appears to require attacker controlled data already being written to a settings XML file in specific locations on disk. Put simply, this requires another prer…

Glasswing and Mythos are wildly impressive. The team writing about it has a core charter to publish research about how AI will be disruptive to certain industries. The publication …

Yes. When certain keywords are matched or topics, there is a warning transparently injected server side appended to the system prompt of the convo that’s miles long. It is injected…

Parallel Construction is a term: https://en.wikipedia.org/wiki/Parallel_construction Parallel *Re*construction is a play on words I wrote related to a lot of the nuance at play I w…

Certificate transparency worked exactly as designed in this case. Monitoring public certificate transparency logs for anomalies is a different story entirely. By breaking the softw…

The sloppy ones who want a huge headache and leave a publicly auditable trail a mile long that get analysis blogs written about their mistakes.

It you’re seeking something a bit older and battle tested ttyd is a good comparison: https://github.com/tsl0922/ttyd

This blog was written by AI.

Laundering of CC/Trial Accounts/Enterprise LLM inference is already a HUGE market, leveraged in part for distillation attacks on western AI. A whole country’s worth of accounts jus…

It’s so we all read the same version. AI vuln hype cycle in full effect, changes are made, deliberately.

Pretty sure the article explicitly stated the resentment is due to their clearly stated concerns continually being explained away. Was your intention to be an example for resentmen…