Viewing profile — ngneer

"And change the combination on my luggage!"

Thanks. I just find it funny that security lessons learned in past decades have been completely defenestrated.

Don't eval untrusted input?

Thanks for trying these out :). Highlights the often subtle difference between knowing the answer and deducing the answer. Feathers could be ground into a pulp and condensed, too. …

I do not know whether the state of the art is able to reason or not. The textbook example you gave is admittedly not very interesting. What you are hearing from people is that parr…

I am not too familiar with the latest hype, but "reasoning" has a very straightforward definition in my mind. For example, can the program in question derive new facts from old one…

I wonder if there is any relation to the cancelled Royal and Beast Lake projects. https://www.notebookcheck.net/Intel-CEO-abruptly-trashed-Roy...

I was doing web design in the early days. I recall the thrill of thinking how the possibilities were endless. This article reminds me of "A List Apart". That website is still runni…

I think it was more a PoC. I would be more impressed if it was deployed in production. "we want to reiterate that these are highly experimental results". If the dividends are massi…

It's reasonable to perceive most of the value in math and computer science being "at the scale" where there is unpredictability arising from complexity, though scale may not really…

https://news.ycombinator.com/item?id=42017771 Meh.

I do the same, but entry level problems that require healthy analysis. New frontier LLMs do not manage to do so well at all.

Math and physics are pretty stable. So is computer science. Avoid voodoo.

Maybe very very soft "engineering". Do you have metrics on which prompt is best? What units are you measuring this in? Can you follow a repeatable process to obtain a repeatable re…

Touché

I am not suggesting we refuse to close one window because another window is open. That would be silly. Of course we should close the window. Just pointing out that the "950X" examp…

Playing devil's advocate, compare their popularity. You may have fallen prey to the base rate fallacy.

I agree with the sentiment and analysis that most humans prefer short term gains over long term ones. One correction to your example, though. Dynamic bounds checking does not solve…

This is not a stupid question. I have seen other comments on the thread that confuse the two terms and run with it. Better to ask than assume. Especially since "VM" is the same lab…

That's very cool. You probably know more about it than I do, then, but my advice is to articulate the exact problem you try to solve. I expect your field is probably teeming with A…

Fair point. I was not blaming CVE for the situation, simply bemoaning the situation.

Spot on. Vulnerability scanners that make up an organizational Security Score (TM) tend to operate at the wrong level of abstraction, flagging some library somewhere that never run…

I disagree that it is Way Better than before. A judgement call is worth more than a team wasting effort chasing irrelevant pseudo-vulnerabilities being reported as vulnerabilities.…

Great magazine, but not without limitations. The one page limit effectively means each article is at most a minimal anchor for a topic (and sometimes an ad for the author), so not …