[email protected] 🇺🇦

Hacker of Clouds. Rider of bikes.

[[email protected] 🇺🇦 @kestenb]

@C_C_Krebs @CISAgov What's the worst that could happen? She courts some wealthy people to "sponsor" her children's private school fees and take care of the rest of her debts. Then we'd have to promote her to the supreme court.

[[email protected] 🇺🇦 @kestenb]

When trusting AppAsync the protection against cross-account confused deputy checked serviceRoleArn but could be bypassed by switching to "ServiceRoleArn" or any other case variant.

[Nick Frichette @Frichette_n]

New cloud security research! We found a vulnerability in AWS AppSync that allowed us to trick the AppSync service to assume roles in other accounts, allowing us to access their resources. https://t.co/cu27TJCN7R

[[email protected] 🇺🇦 @kestenb]

Here we go!

[fwd:cloudsec @fwdcloudsec]

Conference day! Welcome session starts at 9am PT. For those remote, livestreams are at https://t.co/oSF15A4S5P

[Kinnaird McQuade @kmcquade3]

If anyone wants a ticket to @fwdcloudsec, please contact me - I have a spare.

Looking forward to seeing everyone!

[[email protected] 🇺🇦 @kestenb]

@divbyzero https://t.co/LlZZ5m6He7

[[email protected] 🇺🇦 @kestenb]

@simonw For example, the first output is git log --pretty=format:'{%n "commit": "%H",%n "author": "%an <%ae>",%n "date": "%ad",%n "message": "%f"%n},' | sed '$s/,$//' | awk 'BEGIN { print("[") } { print } END { print("]") }'
which works fine for the repos I've looked at on mac/bash

[[email protected] 🇺🇦 @kestenb]

@simonw @simonw I'm trying to reproduce your results to determine how long it will be before the model incorporates improvements from interactions like yours to telescope your 10 pages down to (prompt -> solution). Do you have a repo I can test against (for git log output)?

[[email protected] 🇺🇦 @kestenb]

We are currently all hands on deck to create an AI Assistants Policy and approval process to accelerate *secure* adoption of AI technologies. I'll be posting updates of our analysis of ChatGPT etc ToS and Privacy Policies from my infosec exchange account linked in my profile.

[Ed Krassenstein @EdKrassen]

BREAKING: On Jen Psaki's debut of "Inside with Jen Psaki" she completely tears apart the Republican anti-woke movement, showing that it's a terrible 2024 campaign focus.

This new show on MSNBC is going to be something to watch. Psaki is so good at diffusing Republican rhetoric and propaganda!

[[email protected] 🇺🇦 @kestenb]

@IanColdwater Maybe think in terms of peak experiences. I once answered something vaguely similar by describing throwing a perfect strike from center field to out someone stealing home. It *was* kinda technical.

[[email protected] 🇺🇦 @kestenb]

@svpino @svpino found u on mastodon but no posts there. Would u consider using a cross posting service like https://t.co/hNoKlHqWeV?

[[email protected] 🇺🇦 @kestenb]

@__steele For some odd reason I'm almost immune to text. Only radio and the rarest of videos can make me cry. Except when someone says they cant be vulnerable because they're soc2 compliant.

[[email protected] 🇺🇦 @kestenb]

Classic

[[email protected] 🇺🇦 @kestenb]

Hey all. It's been fun but all my friends moved on to https://t.co/W1eRLF9H98 or other mastodons. Hope to see you there. Thanks to all the great bird engineers that made this site possible.

[[email protected] 🇺🇦 @kestenb]

@forrestbrazeal @[email protected]

[[email protected] 🇺🇦 @kestenb]

@Alh4zr3d If it's busybox based, prefixing with busybox brings back most commands. If not, figure out how the container talks to the Internet and leverage that.

[Alex Kendall @alexgkendall]

This year we’ve seen many incredible AI breakthroughs from very large foundation models:

CLIP = image/language
Stable Diffusion = caption2image
GPT-3 = language
Whisper = speech2text
etc

But what does this mean for robotics and autonomous driving?

[[email protected] 🇺🇦 @kestenb]

Attack that uses a láser to blind the lídar (mounted light siren on driverless cars) based on syncing attack láser to lidar timing

[Sara Rampazzi @sara_rampazzi]

Our work on Physical Removal Attacks on LiDARs will appear at @USENIXSecurity! Attackers can use lasers to delete genuine obstacles!
Preprint: https://t.co/hkhH4bKxhx
Web: https://t.co/SfOmFsSh9v
Joint work with Takeshi Sugawara, @MorleyMao1, led by @LonneYc & @hrushikesh_sri

[[email protected] 🇺🇦 @kestenb]

@__steele Everyone is rooting for you. We all enjoy your presence but sometimes a little absence is good for the soul