Hacker News: dominicq

New comment by dominicq in "Claude Opus 4.8"

dominicq — Thu, 28 May 2026 18:52:30 +0000

I have model fatigue

New comment by dominicq in "GTFOBins"

dominicq — Tue, 28 Apr 2026 07:32:07 +0000

Sounds super 1337 and I hope it's actually possible somehow.

New comment by dominicq in "GTFOBins"

dominicq — Tue, 28 Apr 2026 07:21:16 +0000

The first thing. Invoked processes inherit the permissions of the user who invoked them (unless they have the setuid bit). It's just in case you land access to a computer which has all the standard Unix tools disabled to stop attackers from lateral movement.

New comment by dominicq in "GTFOBins"

dominicq — Tue, 28 Apr 2026 07:18:17 +0000

Huh? How does that work exactly? I've heard of /proc fuckery before but didn't know you could disable aslr with it.

New comment by dominicq in "GTFOBins"

dominicq — Tue, 28 Apr 2026 07:16:56 +0000

You need initial access. This is just a list of tools you can use if you can't spawn a standard interactive shell, for whatever reason.

It doesn't make it easier to "hack" servers, it's just a list of things that you could use once you're already inside.

New comment by dominicq in "Dependency cooldowns turn you into a free-rider"

dominicq — Wed, 15 Apr 2026 05:07:37 +0000

> Fundamental in the dependency cooldown plan is the hope that other people - those who weren't smart enough to configure a cooldown - serve as unpaid, inadvertent beta testers for newly released packages.

This is wrong to an extent.

This plan works by letting software supply chain companies find security issues in new releases. Many security companies have automated scanners for popular and less popular libraries, with manual triggers for those libraries which are not in the top N.

Their incentive is to be the first to publish a blog post about a cool new attack that they discovered and that their solution can prevent.

This post is published by just typing into Obsidian

dominicq — Tue, 14 Apr 2026 18:54:13 +0000

Article URL: https://blog.d11r.eu/obs/

Comments URL: https://news.ycombinator.com/item?id=47769765

Points: 1

# Comments: 0

New comment by dominicq in "Small models also found the vulnerabilities that Mythos found"

dominicq — Sat, 11 Apr 2026 20:04:21 +0000

This would just speed up the discovery -> patch cycle, at least until such time that all the low hanging fruit (=represented in training data) is patched.

Though another possibility would be that since LLMs generate so much code, the LLM vulnerability discovery would just keep chugging along and we'd simply settle for the same amount of potential vulns, same relative vulnerability-exploit-patch dynamics, though higher in absolute numbers.

Small models also found the vulnerabilities that Mythos found

dominicq — Sat, 11 Apr 2026 16:47:28 +0000

Article URL: https://aisle.com/blog/ai-cybersecurity-after-mythos-the-jagged-frontier

Comments URL: https://news.ycombinator.com/item?id=47732020

Points: 1284

# Comments: 341

New comment by dominicq in "EFF is leaving X"

dominicq — Thu, 09 Apr 2026 19:51:57 +0000

I agree with you. It's clear that they're leaving X because "X bad", but they don't want to say it that way. I don't know if X is or isn't bad, but it seems pretty mainstream and a good representation of a lot of society, both US and international, so for an org that apparently cares for the online rights of people, it feels silly to leave a platform where there are - people. (and this is coming from someone who doesn't use X or social media in general)

New comment by dominicq in "Help Keep Thunderbird Alive"

dominicq — Thu, 09 Apr 2026 12:14:26 +0000

I can't get it to save emails that I've corresponded with on the Android app. I always have to find specific emails in the email history, and then "Compose message to". If I try to start a new email and start typing the name, or email address, there's no dropdown, no suggestion. Have you ever had this issue on Android?

New comment by dominicq in "Everything I hate about the Mac"

dominicq — Sun, 05 Apr 2026 18:14:53 +0000

didn't work but thanks for googling that for me

New comment by dominicq in "Iran-linked hackers breach FBI director's personal email"

dominicq — Sat, 28 Mar 2026 12:47:44 +0000

Whatever happened to Gary Cooper?

Vibecoders Can't Build for Longevity

dominicq — Mon, 23 Mar 2026 19:34:51 +0000

Article URL: https://blog.d11r.eu/theory-building/

Comments URL: https://news.ycombinator.com/item?id=47494098

Points: 47

# Comments: 35

Mantras for the Modern Mind

dominicq — Sat, 21 Mar 2026 11:49:10 +0000

Article URL: https://blog.d11r.eu/mantras/

Comments URL: https://news.ycombinator.com/item?id=47466176

Points: 1

# Comments: 0

New comment by dominicq in "Cache Monet"

dominicq — Fri, 13 Feb 2026 12:42:52 +0000

Mmmm, funny shapes go brr

New comment by dominicq in "Discord/Twitch/Snapchat age verification bypass"

dominicq — Thu, 12 Feb 2026 10:35:43 +0000

Telegram, WhatsApp, Signal? I have friends and I don't use Discord or understand why I would want to use it.

New comment by dominicq in "Nanobot: Ultra-Lightweight Alternative to OpenClaw"

dominicq — Thu, 05 Feb 2026 12:10:51 +0000

Yeah, I don't get it either. Deploy a VM that runs an LLM so that I can talk to it via Telegram... I could just talk to it through an app or a web interface. I'm not even trying to be snarky, like what the hell even is the use case?

New comment by dominicq in "Ozempic is changing the foods Americans buy"

dominicq — Mon, 12 Jan 2026 13:17:57 +0000

There are sometimes truly bizarre demands for evidence. I once posted a pure opinion piece -- essentially a moral judgment on what is good and what is bad (in the domain of technical writing) -- and got hit with "source?"

Me.

I am the source.

New comment by dominicq in "Tell HN: Happy New Year"

dominicq — Wed, 31 Dec 2025 14:19:19 +0000

Happy New Year from Zagreb, Croatia!