> vulnerability in the member portal of a major diving insurer
What are the odds an insurer would reach for a lawyer? They probably have several on speed dial.
I found a vulnerability. they found a lawyer
21–30 of 466 posts
Re: I found a vulnerability. they found a lawyer
#22This is somewhat related, but I know of a fairly popular iOS application for iPads that stores passwords either in plaintext or encrypted (not as digests) because they will email it to you if you click Forgot Password. You also cannot change it. I have no experience with Apple development standards, so I thought I'd ask here if anyone knows whether this is something that should be reported to Apple, if Apple will do…
If anything it’s just a violation of industry expectations. You as a consumer just don’t need to use the product.
Re: I found a vulnerability. they found a lawyer
#23This is an LLM-generated article, for anyone who might wish to save the "15 min read" labelled at the top. Recounts an entirely plausible but possibly completely made up narrative of incompetent IT, and contains no real substance.
What is the evidence that the content is entirely LLM generated, rather just LLM-assisted writing of a genuine story?
Re: I found a vulnerability. they found a lawyer
#24> Instead, I offered to sign a modified declaration confirming data deletion. I had no interest in retaining anyone’s personal data, but I was not going to agree to silence about the disclosure process itself. Why sign anything at all? The company was obviously not interested in cooperation, but in domination.
[flagged]
[deleted]
Re: I found a vulnerability. they found a lawyer
#25This is an LLM-generated article, for anyone who might wish to save the "15 min read" labelled at the top. Recounts an entirely plausible but possibly completely made up narrative of incompetent IT, and contains no real substance.
How do you know? Some of the text has a slightly LLM-ish flavour to it (e.g. the numbered lists) but other than that I don’t see any solid evidence of that Edit: I looked into it a bit and things seems to check out, this person has scuba diving certifications on their LinkedIn and the site seems real and high-effort. While I also don’t have solid proof that it’s not AI generated either, making accusations like this b…
Not them but the formatting screams LLM to me. Random "bolding" (rendered on this website as blue text) of phrases, the heading layout, the lists at the end (bullet point followed by bolded text), common repeats of LLM-isms like "A. Not B". None of these alone prove it but combined they provide strong evidence.
You can also see the format and pacing differs greatly from posts on their blog made before LLMs were mainstream, e.g. https://dixken.de/blog/monitoring-dremel-digilab-3d45
While I wouldn't go so far as to say the post is entirely made up (it's possible the underlying story is true) - I would say that it's very likely that OP used an LLM to edit/write the post.
Re: I found a vulnerability. they found a lawyer
#26Earlier quoted context omitted.
Can you share how you confirmed this is LLM generated? I review vulnerability reports submitting by the general public and it seems very plausible based on my experience (as someone who both reviews reports and has submitted them), hence why I submitted it. I am also very allergic to AI slop and did not get the slop vibe, nor would I knowingly submit slop posts. I assure you, the incompetence in both securing systems…
The headers alone are a huge giveaway. Spams repetitive sensatational writing tropes like "No X. No Y. No Z." and "X. Not Y" numerous times. Incoherent usage of bold type all throughout the article. Lack of any actually verifiable concrete details. The giant list of bullet points at the end that reads exactly like helpful LLM guidance. Many signals throughout the entire piece, but don't have time to do a deep dive. I…
I wonder if there's any probabilistic analyser that could confirm that the article is generated, or show which parts might have been generated
Re: I found a vulnerability. they found a lawyer
#27[deleted]
Re: I found a vulnerability. they found a lawyer
#28> Instead, I offered to sign a modified declaration confirming data deletion. I had no interest in retaining anyone’s personal data, but I was not going to agree to silence about the disclosure process itself. Why sign anything at all? The company was obviously not interested in cooperation, but in domination.
[flagged]
Because you are highjacking a thread. Wanna trash the site's design, you should open a top level thread instead.
Re: I found a vulnerability. they found a lawyer
#29[deleted]
Re: I found a vulnerability. they found a lawyer
#30This is an LLM-generated article, for anyone who might wish to save the "15 min read" labelled at the top. Recounts an entirely plausible but possibly completely made up narrative of incompetent IT, and contains no real substance.
HN's comment section new favourite sport, trying to guess if an article was generated by LLM. It's completely pointless. Why not focus on what's being said instead?