Viewing profile — nicce

> You can report a self-XSS sev:hi (and bounty hunters do) and get many orgs to take them seriously, because they don't have serious security practices. Which can be definitely hig…

> Every application has those bugs; on a software pentest, we'd sev:lo them. Every application has a bug that can bring the whole application down for every user without owning a b…

The most expensive defines the price. Others need to be just slightly cheaper.

It is randomly consuming high CPU on my mac as well, without any LSPs. Getting annoying.

> can they discuss the case and try to influence public swing by doing a blog post or sharing evidence that is not verified by anyone other than the party sharing them. With Trumps…

I have seen it before in infected WordPress instances related to recent remote RCE. Probably one victim more.

They did not need to destroy the models they got with pirated content. Would have been more fine if they would have needed to buy the books afterwards and train based on then, agai…

-> the real argument is that CIA will leverage AI against China interests, which is obvious. it's weird how so many people pretend that they are citizens of the world and above it …

Sounds like something Claude might have written and nobody read the code.

As an act of good faith and proof, they could stop spending the record-breaking lobbying money for couple years.

I wonder how this changes things (EU forces to share search data): https://abcnews.com/Technology/wireStory/eu-forces-google-sh...

> There was almost no learning curve, despite being in an entirely different language. The core architecture, data structures, and concepts were the same. > If you read the Bun blo…

> they have an insane bench of really smart people. Filtered heavily into those who care only about money. Many don’t want to work there. Smart people have other choices.

But the company that has a text editor that can read your mind is going to bankrupt you, as it is faster than typing

Seems like all companies think that their products are good enough and can’t offer more, as they always want to remove people instead of offering better and bigger products.

> In my workplace, we're going to decline to renew some software subscriptions because a non-programmer vibe-coded their replacement in a week. The impacts are here, they're just n…

> They really shine on security review, but are very effective with any kind of review. They are getting more and more hostile for making any security assesments. I wonder will the…

Many years until consumers can buy them at reasonable price. Nvdia and AMD are making GPUs bad in purpose for consumers so that nobody can build a datacenter from them. It will tak…

I think individual one still has less capabilities than the one they offer for organizations.

I thought it is already April Fools for a while...

Why would you use them on the web? Serious use happens elsewhere.

Some people might choose Chinese over US these days. Likely looking for EU location.