Experimental News Clipping Site

Tag: code

  • The Register: The Feds want developers to stop coding ‘unforgivable’ buffer overflow vulns

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/02/13/fbi_cisa_unforgivable_buffer_overflow/ Source: The Register Title: The Feds want developers to stop coding ‘unforgivable’ buffer overflow vulns Feedly Summary: FBI, CISA harrumph at Microsoft and VMware in call for coders to quit baking avoidable defects into stuff US authorities have labelled buffer overflow vulnerabilities “unforgivable defects”, pointed to the presence of the holes in…

  • Hacker News: Dangerous dependencies in third-party software – the underestimated risk

    —

    by

    Kurt Seifried
    in

    Source URL: https://linux-howto.org/article/dangerous-dependencies-in-third-party-software-the-underestimated-risk Source: Hacker News Title: Dangerous dependencies in third-party software – the underestimated risk Feedly Summary: Comments AI Summary and Description: Yes **Short Summary with Insight:** The provided text offers an extensive exploration of the vulnerabilities associated with software dependencies, particularly emphasizing the risks posed by third-party libraries in the rapidly evolving landscape…

  • Simon Willison’s Weblog: Nomic Embed Text V2: An Open Source, Multilingual, Mixture-of-Experts Embedding Model

    —

    by

    Kurt Seifried
    in

    Source URL: https://simonwillison.net/2025/Feb/12/nomic-embed-text-v2/#atom-everything Source: Simon Willison’s Weblog Title: Nomic Embed Text V2: An Open Source, Multilingual, Mixture-of-Experts Embedding Model Feedly Summary: Nomic Embed Text V2: An Open Source, Multilingual, Mixture-of-Experts Embedding Model Nomic continue to release the most interesting and powerful embedding models. Their latest is Embed Text V2, an Apache 2.0 licensed multi-lingual 1.9GB…

  • Simon Willison’s Weblog: Building a SNAP LLM eval: part 1

    —

    by

    Kurt Seifried
    in

    Source URL: https://simonwillison.net/2025/Feb/12/building-a-snap-llm/#atom-everything Source: Simon Willison’s Weblog Title: Building a SNAP LLM eval: part 1 Feedly Summary: Building a SNAP LLM eval: part 1 Dave Guarino (previously) has been exploring using LLM-driven systems to help people apply for SNAP, the US Supplemental Nutrition Assistance Program (aka food stamps). This is a domain which existing models…

  • Hacker News: Automated Capability Discovery via Foundation Model Self-Exploration

    —

    by

    Kurt Seifried
    in

    Source URL: https://arxiv.org/abs/2502.07577 Source: Hacker News Title: Automated Capability Discovery via Foundation Model Self-Exploration Feedly Summary: Comments AI Summary and Description: Yes Summary: The paper “Automated Capability Discovery via Model Self-Exploration” introduces a new framework (Automated Capability Discovery or ACD) designed to evaluate foundation models’ abilities by allowing one model to propose tasks for another…

  • Hacker News: Syd: An Introduction to Secure Application Sandboxing for Linux [video]

    —

    by

    Kurt Seifried
    in

    Source URL: https://fosdem.org/2025/schedule/event/fosdem-2025-4176-syd-an-introduction-to-secure-application-sandboxing-for-linux/ Source: Hacker News Title: Syd: An Introduction to Secure Application Sandboxing for Linux Feedly Summary: Comments AI Summary and Description: Yes Summary: The text introduces Syd, a GPL-3 licensed application kernel for Linux, designed for securing applications through advanced sandboxing techniques. Its modern architecture and features address critical vulnerabilities and enhance security…

  • Alerts: CISA and FBI Warn of Malicious Cyber Actors Using Buffer Overflow Vulnerabilities to Compromise Software

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.cisa.gov/news-events/alerts/2025/02/12/cisa-and-fbi-warn-malicious-cyber-actors-using-buffer-overflow-vulnerabilities-compromise-software Source: Alerts Title: CISA and FBI Warn of Malicious Cyber Actors Using Buffer Overflow Vulnerabilities to Compromise Software Feedly Summary: CISA and the Federal Bureau of Investigation (FBI) have released a Secure by Design Alert, Eliminating Buffer Overflow Vulnerabilities, as part of their cooperative Secure by Design Alert series—an ongoing series aimed…

  • Hacker News: Delivering Malware Through Abandoned Amazon S3 Buckets

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.schneier.com/blog/archives/2025/02/delivering-malware-through-abandoned-amazon-s3-buckets.html Source: Hacker News Title: Delivering Malware Through Abandoned Amazon S3 Buckets Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses a concerning vulnerability in software supply chain security, specifically targeting abandoned Amazon S3 buckets that could serve as a platform for malware delivery. The research highlights the potential risks…

  • Hacker News: Smuggling arbitrary data through an emoji

    —

    by

    Kurt Seifried
    in

    Source URL: https://paulbutler.org/2025/smuggling-arbitrary-data-through-an-emoji/ Source: Hacker News Title: Smuggling arbitrary data through an emoji Feedly Summary: Comments AI Summary and Description: Yes **Summary:** The text discusses an interesting method of encoding data using Unicode characters, specifically through the application of variation selectors. This approach demonstrates a theoretical ability to embed arbitrary data within standard text representations,…