![\"That](\"https://cdn.micro.blog/photos/1000x/https%3A%2F%2Fmedia.infosec.exchange%2Finfosec.exchange%2Fmedia_attachments%2Ffiles%2F116%2F420%2F643%2F597%2F474%2F281%2Foriginal%2Fac1712de0e934da7.jpg\")
If it's the account I think it may be, the account either no longer exists, or is at least hidden from public view.
@davey_cakes @emilymbender
I've long expected that this will happen - but not yet and not like this.
At the moment, the upper limit on how long a commute by car can be is the human bladder. With driverless cars, that upper limit can be made to go away.
Maybe Mr Why is just very bad at typing.
@thomasfuchs
Hiring is always a bit hit and miss. Turns out, sometimes even when you miss, you hit.
@fesshole
Few people have been proven as right as everyone who said \"if you outsource your brain to a computer you won't be able know when it's just spewing bullshit\". @anon_opin
","url":"https://infosec.exchange/users/BenAveling/statuses/116396245633904548","date_published":"2026-04-13T07:35:59+00:00","author":{"name":"Ben Aveling","url":"https://infosec.exchange/@BenAveling","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Fasset.circumstances.run%2Fcache%2Faccounts%2Favatars%2F109%2F318%2F597%2F410%2F712%2F988%2Foriginal%2Ffc89ffd5884ab589.png","_microblog":{"username":"BenAveling@infosec.exchange"}},"_microblog":{"date_relative":"2026-04-13 07:35","date_timestamp":1776065759,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":true,"is_linkpost":false,"is_mention":true}},{"id":"87975318","content_html":"It'd be potentially interesting if the flow were:
1. Coverity finds a vulnerability, plus a load of false positives.
2. Anthropic spends money on human effort to triage the output of step 1.
3 Anthropic burns a load of compute to regurgitate the output from step 2.
4. Security vulnerability reports!
Sadly, I don't trust any of those steps. A lot of the time, the answer to 'is this a vulnerability' is 'well, it depends...'.
","url":"https://infosec.exchange/users/BenAveling/statuses/116380307747002263","date_published":"2026-04-10T12:02:46+00:00","author":{"name":"Ben Aveling","url":"https://infosec.exchange/@BenAveling","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Fasset.circumstances.run%2Fcache%2Faccounts%2Favatars%2F109%2F318%2F597%2F410%2F712%2F988%2Foriginal%2Ffc89ffd5884ab589.png","_microblog":{"username":"BenAveling@infosec.exchange"}},"_microblog":{"date_relative":"2026-04-10 12:02","date_timestamp":1775822566,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":true,"is_linkpost":false,"is_mention":true}},{"id":"87609517","content_html":"Some vulnerabilities can't be exploited in ways that lead to attacker success, e.g. the next/previous line of defense is sound, but they're still vulnerabilities in that they allow one or more lines of defense to be bypassed.
I'd also ask:
- do bugs usually get patched?
- is this definition supposed to cover social-engineering or insider threats?
- is this definition supposed to cover volumetric DOS?
DNS outbound tends to be allowed even when other protocols are not. If you run your own DNS server you can use DNS to tunnel any traffic you want. @sabik @arichtman @k3ym0
","url":"https://infosec.exchange/users/BenAveling/statuses/116303733049045961","date_published":"2026-03-27T23:28:49+00:00","author":{"name":"Ben Aveling","url":"https://infosec.exchange/@BenAveling","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Fasset.circumstances.run%2Fcache%2Faccounts%2Favatars%2F109%2F318%2F597%2F410%2F712%2F988%2Foriginal%2Ffc89ffd5884ab589.png","_microblog":{"username":"BenAveling@infosec.exchange"}},"_microblog":{"date_relative":"2026-03-27 23:28","date_timestamp":1774654129,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":true,"is_linkpost":false,"is_mention":true}},{"id":"86735766","content_html":"I see a lot of people replying to this post who are confident that they would not have clicked on that pdf.
@nixCraft
> Doubling the performance of something like an 8086 was easy
This feels unfair. At the time, I don't think it was seen as easy. And at every point, there was always a sense that Moore's Law is about to fail, because known techniques were understood to be viable for the next few years, but beyond that, something new was going to be needed. And then, we always found something new. And we probably can again, except, as you've pointed out, it's getting harder and harder to find any useful use for extra power.
","url":"https://infosec.exchange/users/BenAveling/statuses/116274203057332232","date_published":"2026-03-22T18:18:57+00:00","author":{"name":"Ben Aveling","url":"https://infosec.exchange/@BenAveling","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Fasset.circumstances.run%2Fcache%2Faccounts%2Favatars%2F109%2F318%2F597%2F410%2F712%2F988%2Foriginal%2Ffc89ffd5884ab589.png","_microblog":{"username":"BenAveling@infosec.exchange"}},"_microblog":{"date_relative":"2026-03-22 18:18","date_timestamp":1774203537,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":true,"is_linkpost":false,"is_mention":true}},{"id":"85938244","content_html":"Oh LLM output always looks good, as long you don't understand what it's talking, then it looks great.
Very beautiful, very plausible.
But if you actually understand whatever it is that the LLM is talking about, then it rapidly becomes obvious that it's just spewing all the right words in a random order.
@Tekchip @Gargron
Translations are like husbands. There are beautiful translations and there are faithful translations but the beautiful ones are not faithful and the faithful ones are not beautiful.
@Gargron
As programmers, we’re used to getting things ‘sort of working’ being hard, and getting from there to ‘mostly reliable’ is, if not easy, then no harder. You just fix the edge cases, working from important down.
LLMs are the other way around. Getting to sort of working is trivially easy, going to ‘mostly reliable’ is impossible. Every edge case you fix undoes some random part what you thought you had working.
@davidgerard @katrinatransfem
Companies would like software designed, structures engineered and medicine and legal and artistic services provided without the cost and bother of having to employ people.
who @thomasfuchs
If you can be bothered there’s another solution that works better the more witnesses there are “why don’t you load up that bar and show us how it’s done”
@falcennial
I’d say possibly both but definitely at least the first one. @campuscodi
","url":"https://infosec.exchange/users/BenAveling/statuses/116190640633382809","date_published":"2026-03-08T00:07:56+00:00","author":{"name":"Ben Aveling","url":"https://infosec.exchange/@BenAveling","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Fasset.circumstances.run%2Fcache%2Faccounts%2Favatars%2F109%2F318%2F597%2F410%2F712%2F988%2Foriginal%2Ffc89ffd5884ab589.png","_microblog":{"username":"BenAveling@infosec.exchange"}},"_microblog":{"date_relative":"2026-03-08 00:07","date_timestamp":1772928476,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":true,"is_linkpost":false,"is_mention":true}},{"id":"85447675","content_html":"Technically not a forest. Possibly not a mushroom either. @ai6yr
![\"The](\"https://cdn.micro.blog/photos/1000x/https%3A%2F%2Fmedia.infosec.exchange%2Finfosec.exchange%2Fmedia_attachments%2Ffiles%2F116%2F167%2F843%2F609%2F760%2F888%2Foriginal%2F23c15bb4139a471f.jpeg\")
@krypt3ia Both?
","url":"https://infosec.exchange/users/BenAveling/statuses/116148087672860469","date_published":"2026-02-28T11:46:09+00:00","author":{"name":"Ben Aveling","url":"https://infosec.exchange/@BenAveling","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Fasset.circumstances.run%2Fcache%2Faccounts%2Favatars%2F109%2F318%2F597%2F410%2F712%2F988%2Foriginal%2Ffc89ffd5884ab589.png","_microblog":{"username":"BenAveling@infosec.exchange"}},"_microblog":{"date_relative":"2026-02-28 11:46","date_timestamp":1772279169,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":true,"is_linkpost":false,"is_mention":true}},{"id":"85038506","content_html":"It's like a control panel and a pew-pew map had a baby.
@citrusui
After big num years in corporate, I’ve seen a lot of things that make sense, but only once you have a missing piece of information. I have no idea what is happening here and I don’t know what I’m missing. @hacks4pancakes
","url":"https://infosec.exchange/users/BenAveling/statuses/116133261275953276","date_published":"2026-02-25T20:55:36+00:00","author":{"name":"Ben Aveling","url":"https://infosec.exchange/@BenAveling","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Fasset.circumstances.run%2Fcache%2Faccounts%2Favatars%2F109%2F318%2F597%2F410%2F712%2F988%2Foriginal%2Ffc89ffd5884ab589.png","_microblog":{"username":"BenAveling@infosec.exchange"}},"_microblog":{"date_relative":"2026-02-25 20:55","date_timestamp":1772052936,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":true,"is_linkpost":false,"is_mention":true}},{"id":"84874696","content_html":"And that, my friend, is why dog gave us subtooting.
@wcbdata
I couldn't even name most of the characters in there. Perhaps that makes it more interesting.
@nuthatch @carnage4life
Boring yet compelling. It’s weird. Ultra processed junk food for the brain. @carnage4life @nuthatch
","url":"https://infosec.exchange/users/BenAveling/statuses/116078931544268008","date_published":"2026-02-16T06:38:51+00:00","author":{"name":"Ben Aveling","url":"https://infosec.exchange/@BenAveling","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Fasset.circumstances.run%2Fcache%2Faccounts%2Favatars%2F109%2F318%2F597%2F410%2F712%2F988%2Foriginal%2Ffc89ffd5884ab589.png","_microblog":{"username":"BenAveling@infosec.exchange"}},"_microblog":{"date_relative":"2026-02-16 06:38","date_timestamp":1771223931,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":true,"is_linkpost":false,"is_mention":true}},{"id":"84344787","content_html":"You’re assuming I don’t expect to do the same thing again. @skeletor
","url":"https://infosec.exchange/users/BenAveling/statuses/116077482714740525","date_published":"2026-02-16T00:30:23+00:00","author":{"name":"Ben Aveling","url":"https://infosec.exchange/@BenAveling","avatar":"https://cdn.micro.blog/photos/96/https%3A%2F%2Fasset.circumstances.run%2Fcache%2Faccounts%2Favatars%2F109%2F318%2F597%2F410%2F712%2F988%2Foriginal%2Ffc89ffd5884ab589.png","_microblog":{"username":"BenAveling@infosec.exchange"}},"_microblog":{"date_relative":"2026-02-16 00:30","date_timestamp":1771201823,"is_favorite":false,"is_bookmark":false,"is_deletable":false,"is_conversation":true,"is_linkpost":false,"is_mention":true}}]}