21–30 of 267 posts
> as ChatGPT confirmed when I asked it to analyze it lol we are so cooked
Before LLMs if someone wasn't familiar with deobfuscation they would have no easy way to analyse the attack string as they were able to do here.
> as ChatGPT confirmed when I asked it to analyze it lol we are so cooked
[flagged]
> as ChatGPT confirmed Tech support knew it was not a good idea. ChatGPT was used to throughly explain why that was a bad idea. Are you trying to make other people look dumb because you need to feel smarter than others for some reason? That's gross.
In order to use the ChatGPT response, in order to avoid looking like an idiot, the first thing I would have to do is confirm it, because ChatGPT is very good at guessing and absolutely incapable of confirming
Using base64 -d and looking at the malicious code would be confirming it. Did ChatGPT do that? Nobody ducking knows
I'm seeing a lot more of these phishing links relying on sites.google.com . Users are becoming trained to look at the domain, which appears correct to them. Is it a mistake of Google to continue to let people post user content on a subdomain of their main domain?
> as ChatGPT confirmed when I asked it to analyze it lol we are so cooked
Isn't analysing and writing bits of code one of the few things LLMs are actually good at and useful for (as opposed to creative writing or whatever). Before LLMs if someone wasn't familiar with deobfuscation they would have no easy way to analyse the attack string as they were able to do here.
I'm seeing a lot more of these phishing links relying on sites.google.com . Users are becoming trained to look at the domain, which appears correct to them. Is it a mistake of Google to continue to let people post user content on a subdomain of their main domain?
RIP the once-common practice of having a personal website (that would have a free host)
> as ChatGPT confirmed when I asked it to analyze it lol we are so cooked
Isn't analysing and writing bits of code one of the few things LLMs are actually good at and useful for (as opposed to creative writing or whatever). Before LLMs if someone wasn't familiar with deobfuscation they would have no easy way to analyse the attack string as they were able to do here.
Earlier quoted context omitted.
He asked ChatGPT to run the command in a sterile environment. He knew it was a bad idea to start with. It's a quick and dirty method in case you don't have a virgin VM lying around to try random scripts on to see what they do. I'd say something edgy about paying attention but that wouldn't be nice.
ChatGPT doesn't run commands, does it?
[flagged]
My standard procedure for copying and pasting commands from a website, is to first run it through `hd` to make sure there's no fuckery with Unicode or escape sequences: xclip -selection -clipboard -o | hd From the developer's post, I copied and pasted up to the execution and it was very obvious what the fuckery was as the author found out (xpaste is my paste to stdout alias): > xpaste | hd 00000000 65 63 68 6f 20 2d…