Hacker News: scrpl

Conversing with Vulnerabilities: AI-Assisted CVE Search

scrpl — Thu, 19 Oct 2023 19:32:14 +0000

Article URL: https://scorpil.com/post/conversing-with-vulnerabilities-ai-cve-search/

Comments URL: https://news.ycombinator.com/item?id=37947562

Points: 9

# Comments: 2

New comment by scrpl in "The novel HTTP/2 'Rapid Reset' DDoS attack"

scrpl — Tue, 10 Oct 2023 15:39:31 +0000

Small, less complex protocols are inherently less likely to be insecure all things being equal, simply due to reduced attack surface.

DNS was created for a different environment, at a time when security wasn't at forefront so it's not a good example of the opposite.

New comment by scrpl in "The novel HTTP/2 'Rapid Reset' DDoS attack"

scrpl — Tue, 10 Oct 2023 14:15:49 +0000

DNS is from 1983, give it some slack

New comment by scrpl in "The novel HTTP/2 'Rapid Reset' DDoS attack"

scrpl — Tue, 10 Oct 2023 13:53:27 +0000

Another reason to keep foundational protocols small. HTTP/2 has been around for more than a decade (including SPDY), and this is a first time this attack type surfaced. I wonder what surprises HTTP/3 and QUIC hide...

New comment by scrpl in "The largest DDoS attack to date, peaking above 398M rps"

scrpl — Tue, 10 Oct 2023 13:37:55 +0000

I‘m sure comcast is terrified that their users won’t be able to read my blog.

New comment by scrpl in "The largest DDoS attack to date, peaking above 398M rps"

scrpl — Tue, 10 Oct 2023 13:35:44 +0000

If the one doing the blocking is not at FAANG it would do nothing of sorts. And FAANG benefit from DDoS by getting people into their walled cloud gardens.

New comment by scrpl in "The largest DDoS attack to date, peaking above 398M rps"

scrpl — Tue, 10 Oct 2023 13:11:56 +0000

Great solution for a world without shared and dynamic ips.

New comment by scrpl in "Extreme parkour with legged robots"

scrpl — Mon, 09 Oct 2023 21:19:04 +0000

Those movements are extremely animal-like, to the point of being unsettling (despite that I want a robot like that for myself)

Understanding Generative AI: Part One – Tokenizer

scrpl — Thu, 05 Oct 2023 16:40:11 +0000

Article URL: https://scorpil.com/post/understanding-generative-ai-part-one-tokenizer/

Comments URL: https://news.ycombinator.com/item?id=37780808

Points: 5

# Comments: 0

New comment by scrpl in "Krita fund has no corporate support"

scrpl — Thu, 05 Oct 2023 12:28:19 +0000

That's because many corporate "donations" are not so much a donation as a way of soft-buying a feature.

It's hard for businesses hyperfocused on short-term gains to understand a long-term value of, for example, supporting an alternative for an industry-dominating Adobe toolkit. But the value is there.

New comment by scrpl in "Severity HIGH security problem to be announced with curl 8.4.0 on Oct 11"

scrpl — Thu, 05 Oct 2023 12:21:53 +0000

And embedded systems (cars and stuff)...

New comment by scrpl in "Krita fund has no corporate support"

scrpl — Thu, 05 Oct 2023 12:19:29 +0000

That's just sad. Open Source support really needs to be normalized in corporate environment. Now it's more of an exception than the rule.

New comment by scrpl in "HTTP/3 adoption is growing rapidly"

scrpl — Thu, 05 Oct 2023 12:16:29 +0000

You don't have control because browser might not support of http3 at all. It's up to browser developers to decide when their support levels are mature enough to use by default. There's no other way of doing it.

New comment by scrpl in "HTTP/3 adoption is growing rapidly"

scrpl — Thu, 05 Oct 2023 12:11:42 +0000

Few years ago I wrote an article on HTTP/3 that was briefly featured on HN as well: https://news.ycombinator.com/item?id=24834767

I can't agree with author about it eating the world though. It seems like only internet giants can afford implementing and supporting protocol this complex, and they're the only ones who will get a measurable benefit from it. It is an upgrade for sure, but an expensive one.

New comment by scrpl in "Running Stable Diffusion XL 1.0 in 298MB of RAM"

scrpl — Tue, 03 Oct 2023 22:52:00 +0000

This is insane! 11 hours or not, I didn't expect SD could ever run on hardware like Pi Zero.

An Overview of AWS Step Functions

scrpl — Mon, 02 Oct 2023 07:53:04 +0000

Article URL: https://scorpil.com/post/overview-of-aws-step-functions/

Comments URL: https://news.ycombinator.com/item?id=37735097

Points: 7

# Comments: 0

Show HN: Estim8 – No-frills planning poker built on Phoenix LiveView

scrpl — Thu, 28 Sep 2023 09:33:05 +0000

Hey HN. Recently me and my team found ourselves in need of a very basic planning poker service. Rather settling on existing solution (which is often either too complex, filled with ads or costly) I took a chance of trying out Phoenix LiveView in a real-world (if basic) scenario.

Since this is my first Elixir project, source code is in need of a cleanup before being open-sourced. However the service itself is available and costs me almost nothing (shout out to fly.io for the free tier), it's essentially just $10/year for the domain.

Hacker News: scrpl

Conversing with Vulnerabilities: AI-Assisted CVE Search

New comment by scrpl in "The novel HTTP/2 'Rapid Reset' DDoS attack"

New comment by scrpl in "The novel HTTP/2 'Rapid Reset' DDoS attack"

New comment by scrpl in "The novel HTTP/2 'Rapid Reset' DDoS attack"

New comment by scrpl in "The largest DDoS attack to date, peaking above 398M rps"

New comment by scrpl in "The largest DDoS attack to date, peaking above 398M rps"

New comment by scrpl in "The largest DDoS attack to date, peaking above 398M rps"

New comment by scrpl in "Extreme parkour with legged robots"

Understanding Generative AI: Part One – Tokenizer

New comment by scrpl in "Krita fund has no corporate support"

New comment by scrpl in "Severity HIGH security problem to be announced with curl 8.4.0 on Oct 11"

New comment by scrpl in "Krita fund has no corporate support"

New comment by scrpl in "HTTP/3 adoption is growing rapidly"

New comment by scrpl in "HTTP/3 adoption is growing rapidly"

New comment by scrpl in "Running Stable Diffusion XL 1.0 in 298MB of RAM"

An Overview of AWS Step Functions

Show HN: Estim8 – No-frills planning poker built on Phoenix LiveView

New comment by scrpl in "Ask HN: Could you share your personal blog here?"