Experimental News Clipping Site

Tag: hack

  • Rekt: Not So Safe

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.rekt.news/not-so-safe Source: Rekt Title: Not So Safe Feedly Summary: North Korea’s Lazarus Group stole $1.4B from Bybit’s signers by exploiting a simple vulnerability in Safe’s system. A single yaml.load execution bypassed high-end security, turning a supposedly impenetrable system into one of the industry’s biggest disasters. AI Summary and Description: Yes Summary: The text…

  • The Register: Nextcloud puts out fire after data leak panic

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/03/13/nextcloud_data_leak_scare/ Source: The Register Title: Nextcloud puts out fire after data leak panic Feedly Summary: Community calls for off-by-default data sharing setting Open source software biz Nextcloud issued fixes to its software this week after bug hunters raised concerns about data collection.… AI Summary and Description: Yes Summary: Nextcloud has addressed a critical…

  • Hacker News: ‘Uber for nurses’ exposes 86K+ medical records, PII via open S3 bucket

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.websiteplanet.com/news/eshyft-report-breach/ Source: Hacker News Title: ‘Uber for nurses’ exposes 86K+ medical records, PII via open S3 bucket Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses a significant cybersecurity incident involving the exposure of a non-password-protected database belonging to ESHYFT, a healthtech company. The incident raises critical issues about privacy…

  • Embrace The Red: Sneaky Bits: Advanced Data Smuggling Techniques (ASCII Smuggler Updates)

    —

    by

    Kurt Seifried
    in

    Source URL: https://embracethered.com/blog/posts/2025/sneaky-bits-and-ascii-smuggler/ Source: Embrace The Red Title: Sneaky Bits: Advanced Data Smuggling Techniques (ASCII Smuggler Updates) Feedly Summary: You are likely aware of ASCII Smuggling via Unicode Tags. It is unique and fascinating because many LLMs inherently interpret these as instructions when delivered as hidden prompt injection, and LLMs can also emit them. Then,…

  • Hacker News: Constant-Time Code: The Pessimist Case [pdf]

    —

    by

    Kurt Seifried
    in

    Source URL: https://eprint.iacr.org/2025/435.pdf Source: Hacker News Title: Constant-Time Code: The Pessimist Case [pdf] Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses the challenges and pessimistic outlook surrounding the implementation of constant-time coding in cryptographic software, especially in the light of modern compiler optimization techniques and the increasing complexity of CPU architectures.…

  • Hacker News: Show HN: Nuanced – Help AI understand code structure, not just text

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.nuanced.dev/blog/initial-launch Source: Hacker News Title: Show HN: Nuanced – Help AI understand code structure, not just text Feedly Summary: Comments AI Summary and Description: Yes **Summary:** The text introduces Nuanced, an open-source Python library designed to enhance the capabilities of AI coding assistants by providing a structured representation of code dependencies through call…

  • Hacker News: Constant-time coding will soon become infeasible

    —

    by

    Kurt Seifried
    in

    Source URL: https://eprint.iacr.org/2025/435 Source: Hacker News Title: Constant-time coding will soon become infeasible Feedly Summary: Comments AI Summary and Description: Yes Summary: This paper discusses the challenges and shortcomings associated with writing secure cryptographic software that is free from timing-based side-channels. It presents a pessimistic view on the feasibility of constant-time coding, suggesting that failures…

  • Simon Willison’s Weblog: Notes on Google’s Gemma 3

    —

    by

    Kurt Seifried
    in

    Source URL: https://simonwillison.net/2025/Mar/12/gemma-3/ Source: Simon Willison’s Weblog Title: Notes on Google’s Gemma 3 Feedly Summary: Google’s Gemma team released an impressive new model today (under their not-open-source Gemma license). Gemma 3 comes in four sizes – 1B, 4B, 12B, and 27B – and while 1B is text-only the larger three models are all multi-modal for…

  • Simon Willison’s Weblog: Notes on Google’s Gemma 3

    —

    by

    Kurt Seifried
    in

    Source URL: https://simonwillison.net/2025/Mar/12/notes-on-googles-gemma-3/ Source: Simon Willison’s Weblog Title: Notes on Google’s Gemma 3 Feedly Summary: Google’s Gemma team released an impressive new model today (under their not-open-source Gemma license). Gemma 3 comes in four sizes – 1B, 4B, 12B, and 27B – and while 1B is text-only the larger three models are all multi-modal for…