threatactor.club

We disclosed this #hackerone report against #curl when someone asked Bard to find a vulnerability, and it hallucinated together something:

https://hackerone.com/reports/2199174

Irgendwas ist immer.

Come join me and the rest of the GitLab AppSec folks for an AMA with one of our top security researchers!

Getting this organised has been my side hustle for the last few months, so would love to see some familiar faces there! 🦊✨

bit.ly/3qNOChj

Dropping this here just in case someone needs clean sheets

When someone says „This meeting has no set agenda“, what I hear is „This meeting is probably pointless, decline“ 😬

"#Fahrradhelme sind nicht für den Aufprall von Autos ausgelegt, betont der führende Hersteller Giro"
"Studie des britischen Psychologen Ian Walker..Die Ergebnisse zeigten, dass Autofahrer dazu neigten, näher an ihm vorbeizukommen, wenn er einen Helm trug."
https://www.forbes.com/sites/carltonreid/2020/07/10/bicycle-helmets-not-designed-for-impacts-from-cars-stresses-leading-maker-giro/?sh=2aec328bcbd4

ChatGPT is going to blow up in the faces of overly confident people who think it can make them a Senior Software Engineer overnight or that we don't need programmers anymore. It's going to be an awkward reckoning.
https://www.businessinsider.com/chatgpt-frequently-wrong-about-coding-but-sounds-smart-2023-8
#chatgpt

Introducing Bark! Low-latency multi-receiver live-sync lossless audio streaming for local networks. It's like Sonos, but open source, so nobody can brick your devices remotely. It's also written in Rust :)

https://github.com/haileys/bark

It sends 48khz uncompressed float32 data over UDP multicast. It can achieve playback sync to within hundreds of microseconds in ideal conditions, and usually to within a millisecond.

I've been working on it in my spare time over the past week, and I'm pretty happy with how it's shaped up. I have three receivers setup and it works remarkably well at keeping everything in sync as I walk around my house. For now it only really works on Linux, and supports Pipewire (and Pulse in theory), but there's no huge impediment to making it truly cross-platform.

It also features a fancy live stats subcommand, which can used on any computer in the same multicast domain to watch the status of the stream cluster:

Werde auf sponti nochmal nach @joern so gegen 01:00 bis 01:30 Uhr im Geraffel Village auflegen. Wie immer, trinkt Bier zur Vorbereitung!

Hi we urgently need 4-5 active (Mini) USB extension cords - plz boost #cccamp23

EyePhone

hate to make an annoying toot on here, but if you are a commie/anarchist/leftist of any kind, it’s time to just install Linux. It’s fine, really.

If you haven’t used it properly in some time, you might be surprised by how fine it is, plus you get to stick to your ideals, and also avoid the complete adware/nagware/spyware shitheap that the rest of the capitalist computing ecosystem has become. Actually, considering all that, it’s quite good, really.

If you had a fully configurable rule-based security scanner, what would you want to scan for?
#scanner #security

Liebe Berliner*innen, ich möchte noch einmal für die großartigen fLotte-Lastenräder Werbung machen. Diese Lastenräder sind unkompliziert gegen eine Ausweiskopie + freiwillige Spende ausleihbar. Wenn man mal eins braucht, ist das sehr praktisch. Die Lastis sind in ganz Berlin verteilt stationiert. https://flotte-berlin.de