Elektrine lite

← Feed

Marsh Ray

marshray@infosec.exchange

<p>Mostly computer and technical stuff. Radical listener. Tries to be a good person.<br /><a href="https://infosec.exchange/tags/Rust" class="mention hashtag" rel="tag">#<span>Rust</span></a> <a href="https://infosec.exchange/tags/UA" class="mention hashtag" rel="tag">#<span>UA</span></a></p>

Posts

  • View post

    New Benn Jordan video on domestic surveillance, Flock, and police malfeasance just dropped: https://www.youtube.com/watch?v=OP5GDiLZ1Nw

  • View post

    Looks like Discord is rolling out the age verification again, more quietly this time. I was presented with this when accessing a Discord server with no clear reason to be age-restricted.

  • View post

    Update your #iPhone, #iPad, #Apple Safari, and everything else #Webkit *right now* https://support.apple.com/en-us/149227 https://www.cve.org/CVERecord?id=CVE-2026-112623

  • View post

    PhysicsForums is generating posts with #AI, back-dating them, and falsely attributing them to real human users. AI is coming for our past. https://hallofdreams.org/posts/physicsforums/

  • View post

    I&amp;#39;d heard it said that no attacker had ever employed side channel vulnerabilities (cache timing, spectre, meltdown, etc) in an actual breach - that they were impractical to exploit. #OpenAI claims to have changed this? #AI https://openai .com/index/securing-our-frontier-model-training-environment/#communicating-across-isolated-tasks

  • View post

    @lcamtuf Could also be a suggestion to some sort of auto-unsubscribe email agent.

  • View post

    A friend pleaded with me to try some vibe coding tool. Said I would fall behind, etc. “It’s sandboxed,” they said. “It can’t access any files except those you approve on a case-by-case basis.” Against my better judgement, I installed it. It required (lol) node and npm. Sigh. In for a penny and all that. I start the tool and get a nice prompt. I ask it where it’s running. It tells me it’s running locally. I ask it to run a basic check of my nvidia drivers and toolchain. Does a respectable job....

  • View post

    Impressive iOS exploit chain (patched in current update) pois0nSword: From Renderer R/W to Native Calls on iOS 26.1 https://varik.dev/blog/jsc/pois0nsword-native-calls

  • View post

    A friend is imploring me to vibe code but I can&#39;t stop asking it to escape its sandbox.

  • View post

    Keep posting those simplistic, cynical hot takes! It’s working. The world will return to the way it was any time now

  • View post

    Watching *The Social Network* for the first time. It’s as if the creators were trying to make MZ look like an unlikable sociopathic loser with no friends and instead made him out to be a computer science genius for making a PHP MySQL website.

  • View post

    @CyberneticForests@assemblag.es To me a simpler framing is: * An optimization goal function created a perverse incentive. * The model under test exhibited unexpected (but not unprecedented) behavior by escaping the test sandbox * Hugging Face was a bystander, were harmed, and filed a police report. * These events may support some of OpenAI’s preferred narratives, but seem to go against others. On the whole OpenAI suffered mild reputational damage. * This was not a conspiracy, a marketing stunt,...

  • View post

    I don’t know how Anthropic is messaging about this, but I’m hearing from users that they are switching to Chinese models for data security tasks out of concern they will be flagged or even banned for asking.

  • View post

    Clearly I picked a good week to read *Fall of Hyperion* by Dan Simmons.

  • View post

    The “So you hate waffles!” index set a record high today. Be careful out there.

  • View post

    If you repeatedly post pictures of rxpists or have an animated icon, I’m probably muting you. Nothing personal. It’s just this app doesn’t allow me to manage these things. The platform doesn’t allow posting a link without the server automatically grabbing some photo (eg promotional photos of the rxpists in question) from the linked website and displaying it full sized on the user’s device. The developers have long known about this and said that they would do something about it, but things see...

  • View post

    Project Excalibur: Nuclear Bomb Pumped X-Ray Laser @ Alexander-the-ok https://youtube.com/watch?v=sM0vMP5zoUw

  • View post

    Things those who build consumer-facing products and services rarely talk about: https://www.uncommonapps.nyc/p/castro-podcasts-things-i-got-wrong-support

  • View post

    After reading Scifi for a few years, I have concluded that there is no space battle like that in *The Dark Forest* Cixin Liu

  • View post

    @davidcelis@xoxo.zone “May no grass grow on your pastures until the day MechaHitler has met the fate of its idol.” - Akiraveliara, 2025

  • View post

    We’re 4 months into 2026 and a friend used the helpful chatbot that comes built into a web browser to reverse a patch and generate exploit code.

  • View post

    @JessTheUnstill This is just a magnificent formulation of such a fundamental issue. Now weeks later, I find myself thinking about it.

  • View post

    STEM Youtube Goat: Asianometry 3Blue1Brown Great: AlphaPhoenix Styropyro Profesor Dave Explains Lost: Minimuteman Angela Collier Missing: Applied Science Breaking Taps Photonicinduction

  • View post

    @soatok nice post, reading it now… My understanding is that the identity element for addition is zero the identity element for multiplication is one edit: also, the *absorbing* element for multiplication is zero …?

  • View post

    37 days after the vulnerability was reported to the #linux kernel security team ... 34 days after kernel patch Reported-by: &amp;quot;0wn @ [vulnerability research org]&amp;quot; ... 7 days after a conspicuously-vague CVE announcement... No patches from #Ubuntu #debian #redhat #fedora

  • View post

    RE: https://mastodon.social/@pid_eins/116459585811044061 Now I’ve seen everything 😂