Stelios

Offensive Security💻 | Systems programmer ⌨ | Low-Level

[Stelios @reversesec]

@dreamsofcode_io Do you mean vibe coding or AI assisted coding?

[Uncle Bob Martin @unclebobmartin]

I’ve been harping on the disciplines and tools for using AI lately. I find them to be a very effective approach. But I don’t want to leave you with the impression that a few simple disciplines and tools is sufficient.

As the AI’s build software, you — the software engineer — need to have a good mental model of what the AI is doing. You need to apply engineering insight to correct it when it takes a path you don’t like. You have to be an active manager in the design and architecture of the system. You have to be able to “see within“ without resorting to exhaustive code reviews. You have to form suspicions about what the AI is doing, and you have to probe and experiment to verify your suspicions.

[Stelios @reversesec]

@levelsio If this helps with your test, I couldn't reply too

[Stelios @reversesec]

@sauravk87 Same thing for C

[Stelios @reversesec]

@0xlelouch_ For complex/big apps, Gin. For anything else stdlib

[Stelios @reversesec]

@stokfredrik What’s your view on business logic vulns, do you think today’s AI is now able to reliably spot those too?

[Miguel Ángel Pastor @miguelinlas3]

CPU Cache-Friendly Data Structures in Go: 10x Speed with Same Algorithm https://t.co/M3DEnCSfq9

[Bryson 🦄 @brysonbort]

Hacking is a mindset
Not tools. 🦄

[Swapna Kumar Panda @swapnakpanda]

"Modern C" - from Manning

This book on "C" Programming is now FREE.

[Stelios @reversesec]

@PreslavMihaylov @ThePrimeagen I disagree. I believe those who want to learn they will learn and the others that they don't want they will just copy the code from whatever resource, doesn't matter if it is AI, stackoverflow or whatever

[Stelios @reversesec]

@yacineMTB I can't c zig

[Stelios @reversesec]

@sonam_murarkar Gin

[Stelios @reversesec]

@thdxr Then why do you need to store credentials if you're not authenticating against a server?

[Stelios @reversesec]

@zack_overflow Then I will give it a try! Thanks, Zack!

[Stelios @reversesec]

Hello all, I want to share that I’ve completed my JA4 fingerprinting project!
This tool extracts TLS Client/Server Hello fields and generates JA4 fingerprints, which you can now use alongside a JA4DB to identify packets based on this database.
https://t.co/AYuFjqwC9Q

#GoLang #CyberSecurity #JA4

[Stelios @reversesec]

@HSVSphere Well I don't know rust but the "task.await" seems that explicitly waits for each task one at a time. So even if by default Tokio is multithreaded, this code is not using parallelism, probably you need a "join"

[Stelios @reversesec]

@HSVSphere So you are saying that js is using by default multiple os threads? And that in these benchmarks you have used a thread pool to offload tasks for rust? I would like to see the code from your benchmarks

[Stelios @reversesec]

@HSVSphere Yes I know, but in your benchmarks do they use parallelism? I guess not