Eric Hacker

Birth surname is Hacker. Really. 20+ years Infosec. Architect. Consult. Lead.
Paisley fanatic & wannabe DJ.
Hacking the world to make it a better place.

[Robert Graham @robertgraham]

I applied for "Community Notes" access 6months ago and was finally accepted today. I can therefore see the proposed community notes on Elon's posts like this.

There are three proposed notes. Two point to high quality sources debunking the notion that your tax dollars are paying for such flights (immigrants must pay for their own flights on commercial airlines).

However, enough Musk supporters are voting them down that they don't appear publicly, even though they are factually correct. They are only visible to Community Notes people.

There is a third post, citing partisan sites, that supports Elon's claim.

The point is this: because of partisan defenders censoring community notes, obviously false statements like the one below from Musk are not getting Community Noted.

[Eric Hacker @DJHckr]

@valb00 @anton_chuvakin @AutoPilotCyber Data provenance is important for governance, legal and privacy purposes. It will not provide much relief for the security issues.
At best is can theoretically reduce the attack surface. Currently we have no way of measuring that anyway.

[Eric Hacker @DJHckr]

@anton_chuvakin @valb00 @AutoPilotCyber I'm sure I'm not that old, but I did say it somewhere else. https://t.co/W2vxUiximD

[Eric Hacker @DJHckr]

@valb00 @anton_chuvakin @AutoPilotCyber LLM agents rely on LLM completions which violate the basic security principle of separating code and untrusted data.

History tells us this does not end well.

[Eric Hacker @DJHckr]

@DollarTreeBeef I can't explain it. My current excuses include prepping for the #LimitstoGrowth and maybe I'll make a cool glass jar and cob shelter someday.

I have managed to limit the odd glass we save, so now it is only the things that we buy regularly that are the same shape.

[Eric Hacker @DJHckr]

@robertgraham @LeonSimons8 While I'm sympathetic towards your statement, the fact is that most people that have invested themselves in a position will not switch until they get that wake up call, no matter how good the argument. That's what makes this funny.
I no longer go to parties.

[Eric Hacker @DJHckr]

@alexmuentz @robertgraham @anothercohen 1. More revenues subsidizing the cloud connection which has other needs such as over the air updates, telemetry, etc.
2. Security, because while p2p authentication might be realizable, not many seem to get it right.

[Eric Hacker @DJHckr]

@AccidentalCISO Can we include the fact that there is currently no secure way to deploy an Internet facing LLM application that appends user data to a prompt to get results?

[Eric Hacker @DJHckr]

@seclilc Did you give them your phone number?

[Eric Hacker @DJHckr]

@HackingButLegal LLM Applications are a new paradigm in IT services and almost everyone deploying them is still thinking in the old paradigm. There is going to be a lot insecure apps and LAFs are barely functional. I am excited to be a Hacker.

#GetYourLAFs #LLMApplicationFirewalls

[Eric Hacker @DJHckr]

@laughinghan @QuinnyPig @Dropbox For most add-on AI services to work, they need to be intimately familiar with all your data.

The other services often don't have access to the data due to encryption, and when they do, it is only bits and pieces that are out of context in that service.

[Eric Hacker @DJHckr]

@stokfredrik Maté is more like tea than coffee. One can get into particular varietals, roasts, etc. but maté also pairs well with other herbal teas in a way that coffee can't because it doesn't have to be the center of attention.
Maté is a team player. Maté is a good mate.

[Eric Hacker @DJHckr]

@robertgraham Please provide references for your "most" statements.

Our car and my two home chargers are CCS. As I only search for CCS, I know they are all around me.

[Eric Hacker @DJHckr]

@JUNlPER OMG. Take me off this list!!!!!
Unsubscribe Unsubscribe #Unsubscribe
I tried to get out, but I keep going round in circles?
😉😉

[Eric Hacker @DJHckr]

@IanColdwater Sorry, no pic. While I haven't been able to get the kids, age early 20's, to move out, I have gotten rid of the dad bod.
I hope those aren't correlated.

[Br𝕏d Skggs @brdskggs]

Trying to make my LinkedIn profile more interesting if a recruiter is using a large language model like GPT-4 to send me a message.

Looks like it works on the public version of my profile!

[Eric Hacker @DJHckr]

@deepeddyinfosec Wait, you thought you were the customer at a conference? You are the product that is being sold.

[Robert Graham @robertgraham]

Fact-check: there has been no bombshell report confirming covid came from a Chinese lab, especially not from the DoE. As far as anyone knows, it's 50%/50% lab-leak vs. zoonotic.

This fact-check can easily be proven wrong by simply linking to such a report.

[STÖK ✌️ @stokfredrik]

Are ppl still hyped about web3, virtual crypto islands & nfts? I still can’t see the value of any of it & you better believe I tried. Feels like as soon image ai entered the scene it all went meh.

Owning a small piece of land & growing your own food, now that’s tru value to me.

[Eric Hacker @DJHckr]

@sherrod_im @SwiftOnSecurity @EightTons Paranoidalpoint: You need to cultivate a corporate sheeple personal profile on your work computer so you don't stand out for being silent.