Hacker News: kswagage

New comment by kswagage in "We have a year to fix security everywhere"

kswagage — Tue, 08 Sep 2026 10:54:52 +0000

No because on the defense side you need multiple layers of approvals to change anything. If not you have an LLM making production changes that can make the posture worse, or take down services, which is also bad.

Once a vulnerability is discovered however if it's in your own software a patch has to be written (without reducing functionality in most cases), tested, and deployed. At every step there will be others arguing about whether this line could do better, my service requires this thing that isn't included. So at every step the patch can be delayed.

And if it is someone else's software you will be lucky if it's open source and you can write a patch yourself. If it's closed source or a vendor you have to completely rely on them and use whatever your account rep can pull.

Attackers have a massive advantage with AI, partially because the defensive side doesn't want to make their side worse by giving a ln LLM admin access to all their data

New comment by kswagage in "Setting up a trusted, self-signed SSL/TLS certificate authority in Linux"

kswagage — Tue, 18 Feb 2025 13:48:53 +0000

See also easy-rsa https://github.com/OpenVPN/easy-rsa

New comment by kswagage in "A Study of Malware Prevention in Linux Distributions"

kswagage — Fri, 22 Nov 2024 01:48:14 +0000

To their credit they do declare their affiliation to Chainguard on the first page of the paper. (It's half the authors of the paper for those who don't want to read)

Ask HN: Can you help remember the name of a project shared on Hacker News?

kswagage — Thu, 22 Dec 2022 02:06:03 +0000

Sometime ago I saw a post on Hacker News about a project and have since forgotten the name of, but I am now realizing it would be very helpful to us.

So what I do know: - It sent searches to multiple sites using your local session cookies - It was open source - I think it started with an E (but am less sure about that as time goes on) - The creator linked a Youtube video presentation of it.

Comments URL: https://news.ycombinator.com/item?id=34088844

Points: 3

# Comments: 2