Hacker Newsnew | past | comments | ask | show | jobs | submit | more jijji's commentslogin

why not run valgrind on the web server and wait until it crashes on your POST request and then inspect the logs


A decent server wouldn't crash if a cgi binary crashes.


One, CGI scripts are run as a separate process, so running valgrind on the web server won't get status about the CGI program. Two, it would probably generate a ton of output not related to the CGI program even if it did work. Three, the CGI program wasn't crashing, it was to check for memory errors.


defcon and blackhat are hacker/computer security conferences started by Jeff Moss (aka DT or Dark Tangent) in 1993 and held at the end of July or early August every year in Las Vegas.... The reason you don't bring your phone is it might get hacked


[dead]


Because the attendees are high-value targets who often have elevated permissions inside the firms or governments they work in, and that's worth even more.


On a separate note, Zerodium is dead now. They're in the middle of an active fire sale, but the Zero Day market's bottom fell out now that countries are increasingly moving exploit development in-house or to vendors that can do both zero day acquisition AND exploit deployment (which Zerodium cannot do as an American company).

Also, u/reissbaker's answer is correct.


Skiddies are renowned for their rational thoughts and actions.


For the lulz


Best reason of any!


where is the bug tho... the author is unable to do any exploit because the input variable is correctly sanity checked.... again, where is the "bug" or how is this a bug?


Behold, professional bug bounty hunters.


there sort of is, if you install ollama (https://ollama.com) and then execute: ollama run llama2-uncensored it will install and run the local chat interface for llama2 in an uncensored version which gives a little bit better results with less guardrails. Same with wizardlm-uncensored and wizard-vicuna-uncensored. For reference, the SOTA version with guardrails you could run: ollama run llama3.1:405b


I usually just IP whitelist inbound sshd connections and then drop all other packets


it doesn't even say the CPU speed on their spec sheet....whats the speed of the CPU? how many cores?


That's how you know that they're not proud of the CPU specs.

They went with the Samsung foundry so they could get a bespoke CPU design because Qualcomm doesn't have time for that type of stuff. Turns out that the Samsung ARM cores aren't as performant as the Qualcomm/Apple ARM cores. But at least Google has these Tensor thingies...

[edit] in Dave2D's video about the Pixel 9 Pro XL, https://youtu.be/67hVZOJDFxQ?t=323 , he shows a Geekbench comparison of recent Android CPUs, the new Tensor G4 is still slower in multithread GeekBench than SnapDragon 8 Gen2 & Gen3.


instead of using openAI api, can it use the locally hosted ollama http API?


Yes. It's not really "open" if it depends on a non-libre service. To be legit, they must at least enable this experimentally.


have you thought about writing your own API instead of using the de facto API? it may involve screen scraping but it also will be a lot more reliable and there's no limits, especially when using proxies....

I've written thousands of tools that scrape websites and never used the apis for this reason, you can never trust the API, either because of the reliability, cost, limits imposed, etc... Nobody wants you pulling data from their site anyway, so you're back to scraping anyway, its better to start out there then to have to end up there years later for some other reason...


some reporting [0] is claiming the opposite: 2.75 million votes for Maduro and 6.27 million for his rival, Edmundo Gonzalez.

[0] https://www.reuters.com/world/americas/government-opposition...


love to see the airlines using linux and what kind of problems, if any, they experienced that day


Consider applying for YC's Winter 2026 batch! Applications are open till Nov 10

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: