Everdred2dx

Yep, and already has been done.

https://github.com/chiefautism/privacy-parser

I had a ton of fun using Kaitai to write an unpacking script for a video game's proprietary pack file format. Super cool project.

I did NOT have fun trying to use Kaitai to pack the files back together. Not sure if this has improved at all but a year or so ago you had to build dependencies yourself and the process was so cumbersome it ended up being easier to just write imperative code to do it myself.

tiktok influencers seem to love them because they can record strangers without them knowing. so there’s that…

Well limiting to specifically OP's example (M4 Mac), Asahi doesn't support it yet. :(

They mentioned “rebuilding” in EC2. Probably just moved that over to Azure and no longer are bothering with serverless :)

Yep. I've ran into this using Bugsnag for reporting on unhandled exceptions in Python-based lambda functions. The exception handler would get called, but because the library is async by default the HTTP request wouldn't make it out before the runtime was torn down.

I sympathize with OP because debugging this was painful, but I'm sorry to say this is sort of just a "you're holding it wrong" situation.

It's not AI but Ghidra has a cool feature called BSim which does something similar. Each function get's a "feature vector" which now that I think about it has some clear parallels to embeddings.

If you were using a user agent spoofing extension couldn't this be used to guess your "real" UA?

Not to discount your overall point, but you're comparing a 25% increase with a 75% decrease here. Not quite the same thing

Is the benefit of using a language server as opposed to just giving access to the codebase simply a reduction in the amount of tokens used? Or are there other benefits?

It’s early days but check out Tracecat. I’ve been playing with it a bit and love it!

Neat. Thanks!

How would you scan for your api keys on repos outside of your organization? I assumed this was a dev’s personal repo.

How does bedrock eliminate this problem?

Yeah, feels like we’re writing web/API frameworks from scratch again without any of the lessons learned along the way. Just a matter of time though i’m hoping

Is anyone working on a "catalog" of MCP servers? Searching on Github is not exactly the best way to discover these.

I actually have only tried this once but had the opposite experience. Gave it 5 or so related functions from a ps2 game and it correctly inferred they were related to graphics code, properly typing and naming the parameters. I’m sure this sort of thing is extremely hit or miss though

Nice. This was one of the main shortcomings in Falcon that pushed me to switch some projects to FastAPI. That said FastAPI had many other benefits that went far beyond API specs.

How does this siphon the secrets away? It looks like it just dumps them out to stdout and stops there.

How does that work with sharing vaults between devices?

Very interesting application of LLMs. Thanks for sharing!

This was a very insightful comment. Cheers!

As another commenter said, Telegram.

404 media has ran multiple stories on them. Here is one:

https://www.404media.co/inside-the-com-world-war-robberies-b...

I think what OP is suggesting is that this technical barrier artificial as it may have been helped foster community. I feel the same way as them!

One of the most approachable distillations of CS research I've ever read. Thanks!

Guessing that this is the result of years (or decades?) of incremental changes maintaining backwards compatibility.

No, at least not yet. The limitation is not just the power of the underlying FPGA, but also the increasing complexity of the more powerful systems which need to be painstakingly recreated.

I found the technique he used to find secrets using YARA rules to be extremely clever, at least.

Appreciate the historical context. Thanks!

While the claim that Bitlocker is used to encrypt them is true, it’s really not good enough here. The files are unencrypted during a live session, which makes them an easy target for malware.