bxblin

Interest: Application Security and Web Hacking

[bxblin @bxblin]

Hi people, I am giving out 1 BBH membership from my #FIRSTBLOOD bounty. Just let me know in the reply on why you wanna join BBH. I will pick one person randomly by end of May. Once again thanks @BugBountyHunt3r @zseano for his generosity.

[bxblin @bxblin]

@WyckoffAnalysis SNDK INTC CRDO ALAB LLY WDC MRVL

[bxblin @bxblin]

@justinskycak Evolve the structure along the way

[James Roppel @Upticken]

Bear🐻📉📉 markets wear you out, bull 🐂 markets scare☠️ you out. Make no mistake, this is a Roaring🚀📈 bull market. If your names are not breaking rules, then sit. There is no place for fear😱 in markets, only following rules and honoring stops. NVDA is trying to hold above the 50DSMA and looks Great. All my best ideas were just posted in last night's video. https://t.co/UkFoeQBtoY 2 weeks FREE Getting shaken out due to fear alone is a rookie mistake,

[Linda Raschke @LindaRaschke]

People think good decision-making is about being right...It’s not. It’s about lowering the cost of being wrong & changing your mind. When the cost of mistakes is high, we’re paralyzed with fear. When the cost of mistakes is low, we can move fast and adapt. Make mistakes cheap, not rare. - This thought is from Farnam Street and I thought it applied well to trading!

[Justin Skycak @justinskycak]

The way you increase your ability to make mental leaps is not actually by jumping farther, but rather, by building bridges that reduce the distance you need to jump.

[Justin Skycak @justinskycak]

If you want to build automaticity, then you need to practice automatic recall.

That sounds obvious, but a common mistake even among serious learners is "I'll derive/reason the results from scratch to create a cheat sheet, and then refer to the cheat sheet during practice problems that involve applying those results."

It's good to practice deriving/reasoning results from scratch when doing so is within grasp of your skill level and you haven't done so in a while. However, that DOES NOT COUNT as automatic recall practice on the result itself.

It's just like how recalculating your times tables on a reference sheet that you constantly refer to will prevent you from developing automaticity with multiplication.

So here's what I recommend to do: instead of deriving/reasoning a result before applying it, apply it first and then derive/reason it after. Force yourself to recall the result from memory, and then justify the result afterwards.

By the way, this applies broadly, not just in math.

[Dino A. Dai Zovi @dinodaizovi]

The Eamesian Parable is as true for designing software, systems, and organizations as it is for furniture:

“Never delegate understanding.”

[bxblin @bxblin]

@JarrettYe Same with creation of cards to learn something. You can recall and understand an information. But understanding have depth and if you don't introspect on what you are learning, you can't go deep.

[bxblin @bxblin]

@dinodaizovi Have human decide what to check. Do it manually for a while. Then have the human write the things to focus on for AI to check.

[bxblin @bxblin]

@eruditenights Barbell my friend….barbell

[bxblin @bxblin]

@alexjplaskett @MalwareJake Useful strategy is just use the latest base image tag and do not block built. Most of the time, the issues are patched eventually.

[Daniel Cuthbert @dcuthbert]

I'm going on a web app security rant, so bear with me.

23 years ago OWASP was formed and it tried to help the web application space and those building apps to do so in a secure way. Session management was one of them.

If you had a token, in a header/cookie, make it secure

[JP Aumasson @veorq]

Changes on EVERY page, new chapter "Cryptocurrency cryptography" inc. PoW, algebraic hashing & Poseidon, multi-signatures, threshold signatures, zero-knowledge proofs, and more.
NEW: section about Ed25519; the new Linux PRNG; NIST's PQC standards
https://t.co/na1pn00T9S

[Mike Webster @mwebster1971]

Bill was FULL of ideas, but many didn't work...

He always had a yellow legal pad with him to write out any ideas that came to him. At first, I assumed all these ideas were "gold"...well not exactly.

We were working on some base analysis ideas he had for bar-by-bar (or week-by-week) analysis.

Essentially +1 if the week does this, -1 if it does that...type of thing & he had what sounded like some very logical ideas...the next step was to test them out.

So, after a ton of time of me testing them out...it was time to show him the results.

Well, the ideas, while logical, just didn't work. They were just noise...sometimes working sometimes not, which is normal...but it just didn't give us an edge.

I was frankly scared to tell him it didn't work & I was a bit demoralized as I was excited about this new technique.

I'm sure he realized what I was feeling and quickly said, "Well Mike, this is very valuable information!"

I was a bit puzzled & he continued "Now we know what DOESN'T work so we can move on to something else".

That was HUGE!!!

Rather than him trying to rationalize why his idea should have worked or cherry-picking the data to make it work (MANY do that both consciously & subconsciously).

He just chalked it up to another test, not working...no big deal.

Then he proceeded to tell me the famous Edison lightbulb story & which changed the way I've looked at research ever since.

While I don't use the yellow legal pad, I always have a notebook with me to write down "brilliant ideas". Very often I find out those "brilliant" ideas were just "ideas that didn't work" & that's 100% fine!

The moral of the story...don't get discouraged when you have an idea that fails...you've learned a TON from the process. Many times, the failed ideas will send you down a path that gives you very valuable answers.

If you don't know the Edison story...here's something I found on YouTube (Bill's version was much better😉)

[David Chapman @Meaningness]

Reading Goldratt's The Goal, you think "omg, manufacturing management is actually not using the simple optimization algorithms we learn in second year CS classes??"

And this, similarly, makes me want to buy a defunct American chemical factory and get it running properly!

[Cedric Chin @ejames_c]

I'm actually starting to suspect that the best manufacturers have more to teach software folk than vice versa.

This is not a strong opinion, and I want to retain the ability to revise it.

But manufacturing is harder, older, and lower margin.

[Duckman1717 @duckman1717]

Not Every Stock is a "TML": Just because you own something and you think its a TML, does not make it so. In fact, it probably isn't lol. There is your perception and there is reality. Lean on reality vs. your opinion. Reality perspective comes from experience and studying prior big winners.

[jack @jackbutcher]

The Permissionless Apprenticeship: (thread)

[Andrej Karpathy @karpathy]

# on shortification of "learning"

There are a lot of videos on YouTube/TikTok etc. that give the appearance of education, but if you look closely they are really just entertainment. This is very convenient for everyone involved : the people watching enjoy thinking they are learning (but actually they are just having fun). The people creating this content also enjoy it because fun has a much larger audience, fame and revenue. But as far as learning goes, this is a trap. This content is an epsilon away from watching the Bachelorette. It's like snacking on those "Garden Veggie Straws", which feel like you're eating healthy vegetables until you look at the ingredients.

Learning is not supposed to be fun. It doesn't have to be actively not fun either, but the primary feeling should be that of effort. It should look a lot less like that "10 minute full body" workout from your local digital media creator and a lot more like a serious session at the gym. You want the mental equivalent of sweating. It's not that the quickie doesn't do anything, it's just that it is wildly suboptimal if you actually care to learn.

I find it helpful to explicitly declare your intent up front as a sharp, binary variable in your mind. If you are consuming content: are you trying to be entertained or are you trying to learn? And if you are creating content: are you trying to entertain or are you trying to teach? You'll go down a different path in each case. Attempts to seek the stuff in between actually clamp to zero.

So for those who actually want to learn. Unless you are trying to learn something narrow and specific, close those tabs with quick blog posts. Close those tabs of "Learn XYZ in 10 minutes". Consider the opportunity cost of snacking and seek the meal - the textbooks, docs, papers, manuals, longform. Allocate a 4 hour window. Don't just read, take notes, re-read, re-phrase, process, manipulate, learn.

And for those actually trying to educate, please consider writing/recording longform, designed for someone to get "sweaty", especially in today's era of quantity over quality. Give someone a real workout. This is what I aspire to in my own educational work too. My audience will decrease. The ones that remain might not even like it. But at least we'll learn something.

[TraderLion @TraderLion]

📈 The FREE TraderLion 2023 Model Book is here.

Train your eyes with 30+ marked-up charts of the biggest winners from 2023.

🔁 Retweet and we will DM you the link!

Must be following so we can DM you.