aiscoming

if it's just the coding agent system prompt and tools, you can cache that

vs code supports local models (bring your own key/model)

you need a model server - ollama/llama.cpp/lm studio

the ums are exactly the sign that you speak much faster than you type, so you need a pause for your thoughts to catch up

you should worry about npm/pypi malware, not memory corruption bugs

could be a different type of data only attack, which doesnt override the boundaries

the vast majority of TPMs today live inside the CPU (fTPM). you can't physically attack them

vibe coders keep saying that now you can have 100x productivity, that you can write a million lines of code in a week and do what would take a team of 10 experienced developers a year.

where are all these million lines vibe coded projects? I don't see them. its all hype

webUIs have giant system prompts built in

APIs have much smaller ones

I get paid to defend AI and MSFT online. quite lucrative business. DM me if you are interested

its pretty obvious you have no idea how bitlocker works, and its various modes - TPM only, TPM+PIN, PIN only

no, to access a bitlocker volume which automatically decrypts

thats an LPE, not an encryption backdoor

the USB stick doesnt decrypt bitlocker, it just gives you root after bitlocker was AUTOMATICALLY decrypted

this claim is in another galaxy, not your average 0-day

how about we wait for proof for such grandiose claims

author could become famous by being the first to proove an actual backdoor in an OS disk encryption

the only way to bypass PIN would be an actual backdoor in Bitlocker. no way around that. an actual backdoor in microsoft encryption was never documented, and there are Snowden documents showing FBI pressing Microsoft into introducing one and Microsoft refusing

so I call bullshit on the PIN bypass

claiming to have a 10 times more impressive PoC but not releasing it "out of goodness of heart" is also quite a stretch

I personally dont mind it, but apple is famous for ruthlesly removing decorative design and trying to make everything a slab of color, and this thin line goes so much against this

the design is so beautiful

they might mean "after you enter the bitlocker PIN you get root access without having a login password on the system" - still just a privilege escalation bug

that horizontal line is hillarious. I can imagine the discussions with the designers "just put the fucking line there, I dont care how it looks, its important to separate the two sets of people"

this exploit works only if you dont use a PIN/password for your Bitlocker and the volume automatically unlocks

so it gives you access to an encrypted volume which automatically unlocks anyway

the only difference is that it immediately gives you root access to the volume instead of having to go through the Windows login procedure - this might be a stolen laptop you dont have an account on

allow me to quote the Ancients, the vi creator himself:

What would you do differently?

JOY: I wish we hadn't used all the keys on the keyboard.

...

JOY: The fundamental problem with vi is that it doesn't have a mouse and therefore you've got all these commands. In some sense, its backwards from the kind of thing you'd get from a mouse-oriented thing.

Its like one of those pinatas - things that have candy inside but has layer after layer of paper mache on top. It doesn't really have a unified concept. I think if I were going to go back - I wouldn't go back, but start over again.

shots fired:

JOY: I can just look at my screen, and when I print it off, it's the same as it looks on the screen. It is formatted, and I'm tired of using vi. I get really bored. There have been many nights when I've fallen asleep at the keyboard trying to make a release. At least now I can fall asleep with a mouse in my hand. I use the Xerox optica mouse instead of the other one because it is color coordinated with my office. Did you notice? I prefer the white mouse to the black mouse. You've got to have some fun, right?

http://xahlee.info/comp/interview_with_bill_joy.html

this is how Microsoft wins the war against general computing

you must not join it, refuse to lockdown your computer

if typography is critical for you, nothing has better support for it than the web platform

vi was never progressive, it was "the Ancients knew it better, the present sucks, these kids have terrible taste, return to the one true Past"

I love the redefinition of "native desktop app" - a web app which uses the system web-view instead of bundling Chrome.

steve yegee was saying this in december, that he had multiple people at companies with heavy AI usage telling him that git cant handle 1000+ commits per hour that these companies are producing now, that the agent can't push because between the push command initiation and its finish another push happened

you can't get infected through the package manager if your language doesn't have a package manager :) turns out C and C++ were playing 4D chess all along

tell us about your disk encryption setup. and do you use secureboot?

why would you edit them away? they are a signal that you are an "AI first" company

Your carefully laid-out 600px email

thats the first mistake right there - dont treat email like a PDF

Apple Mail turns dates into calendar links. Write “Sale ends May 5” in your campaign and iOS Mail wraps “May 5” in a tappable suggestion that opens a create-event sheet. The override styling is bright blue with an underline, ignoring whatever colors you set.

the lack of self-awareness is quite something to behold