Retail Under Attack: 6 Learnings from a Retail Customer
1. Retail and E-commerce Are Prone to Credential-based Attacks “Credential-based attacks are evergreen.” When asked what significant security threats are prevalent in the retail and…
Category: Mix
A complete guide to exploiting advanced CSRF vulnerabilities
Cross-site request forgery—or for short CSRF—vulnerabilities are one of the most exploited web security vulnerabilities that result in performing unwanted actions. This client-side vulnerability can…
Try it for yourself: the latest PortSwigger Research from Black Hat USA
Amelia Coen | 23 August 2024 at 07:44 UTC The modern web is constantly developing, with new potential vulnerabilities emerging all the time. Ensuring your…
The Data Wall, Agents, and Planning-Based Evals · Joseph Thacker
I’ve been thinking a lot about the whole “data wall” thing with LLMs lately. It’s the idea that LLMs can’t or won’t improve because we’ve…
My paper to-do strategy | victoria.dev
Coding up a to-do app may be the Hello, World of every framework, but when it comes to actually tracking tasks effectively (knock ’em out…
Git branching for small teams
Here’s a practice I use personally and encourage within my open source projects and any small teams I run for work. I’ve seen major elements…
Post to your static website from your iPhone
I love websites. I love static sites in particular. But I know that sometimes it’s just not practical to write and post only from your…
Takeaways from the Dismissal of the Government’s Case Against the SolarWinds CISO
The case against SolarWinds was filed by the Securities and Exchange Commission (SEC), a government agency that has interpreted its authority broadly to regulate publicly…
Hack My Career: Meet Bertijn Eldering
Bertijn’s story is a great example of how passion, curiosity, and determination can open doors. From navigating the challenges of an internship to landing a…
The 4 Components of Top AI Model Ecosystems
Table of Contents I have been thinking a lot about the competition between OpenAI, Anthropic, Meta, and Google for who has the best pinnacle AI…
The Next Strike Might Be Linux Due to eBPF
On July 19, 2024, a flawed update in CrowdStrike Falcon’s channel file 291 led to a logic error that caused Windows systems to crash, resulting…
The Link Between Free Will and LLM Denial
I think a hidden tendency towards a belief in Libertarian free will is at the root of people’s opinion that LLMs aren’t capable of reasoning.…