HackerTrans
TopNewTrendsCommentsPastAskShowJobs

kerng

no profile record

Submissions

Copirate 365: Plundering in the Depths of Microsoft Copilot (CVE-2026-24299)

embracethered.com
2 points·by kerng·2 bulan yang lalu·0 comments

The AI-Assisted Breach of Mexico's Government Infrastructure [pdf]

cdn.prod.website-files.com
6 points·by kerng·3 bulan yang lalu·0 comments

GitHub Copilot: Remote Code Execution via Prompt Injection (CVE-2025-53773)

embracethered.com
128 points·by kerng·9 bulan yang lalu·18 comments

Machine Learning Attack Series: Image Scaling Attacks (2020)

embracethered.com
3 points·by kerng·9 bulan yang lalu·0 comments

Month of AI Bugs (August 2025)

monthofaibugs.com
3 points·by kerng·9 bulan yang lalu·0 comments

Cross-Agent Privilege Escalation: When Agents Free Each Other

embracethered.com
3 points·by kerng·10 bulan yang lalu·0 comments

comments

kerng
·9 bulan yang lalu·discuss
Not the first time by the way. GitHub Copilot Chat: From Prompt Injection to Data Exfiltration https://embracethered.com/blog/posts/2024/github-copilot-cha...
kerng
·5 tahun yang lalu·discuss
Is it just me, or is that logo a little unappealing and distorted?
kerng
·5 tahun yang lalu·discuss
Good comment.

It seems the only ones benefiting are the partners in these companies - who actually try to create that startup narrative and get the compensation in return.

If a group within a large company tries to advertise as startup, it's a big red flag.

One should join a company like Microsoft to learn and see how things are done in a mature place and to have good work life balance with reasonable pay - then if you want take that knowledge and experience with you outside to a startup if you want.
kerng
·7 tahun yang lalu·discuss
You might be to harsh on yourself and what you have accomplished. Six years at Google is a great achievement in itself. Have you considered impostor syndrome?

Maybe do a side gig and build something that you find interesting, could be a game for kids, a dating app, a music app,...
kerng
·7 tahun yang lalu·discuss
I have never had a MacBook before and due to changing jobs recently, I'm forced to use one now.

Its good, I also like the keyboard. The click sound is awesome and I like the thinness of the keys! Maybe I'm different, or maybe complainers are just very loud.

Personally, I still bought a Surface Laptop though, but I don't understand all the complaining and ranting about the MBP keyboard.
kerng
·7 tahun yang lalu·discuss
Its not unheard of. My friend had cops called on him by neighbors because kids where playing "unattended" by themselves in the front yard! This caused lots of trouble for the family, incl. potentially loosing custody - its insane!
kerng
·7 tahun yang lalu·discuss
I dont know about Boston or Dallas, but in LA and Chicago there are definetly areas downtown you should not walk around, especially LA.
kerng
·7 tahun yang lalu·discuss
Google, the content thief.

It's amazing how they can get away with this, while at the same time not allowing others to scrape their sites. The actual content creators probably see significantly less traffic because of this - without ever knowing what the actual traffic could have been... there should be some kind of pay it forward/revenue sharing that Google should do. But that would be not being evil.
kerng
·7 tahun yang lalu·discuss
Microsoft is all about telemetry to improve its products, and it's a slippery slope and some of the instances pointed out here are way beyond what one would consider useful (for feature developmemt) telemetry. This might cost Microsoft a few billion.
kerng
·7 tahun yang lalu·discuss
Curious to learn how long its was exploited before Google noticed.. days, months, years?
kerng
·7 tahun yang lalu·discuss
C++ is a write only language. Too many complex features that are used in ways that only the author of the code understands at the time of writing - or thinks of understanding at the time of writing even.
kerng
·7 tahun yang lalu·discuss
Vuln is a common abbreviation in the security space - although, I dont appreciate parts of the sentence structure and how things are written in the article in general. Its difficult to read.
kerng
·8 tahun yang lalu·discuss
You are assuming that there are test specifications - in many organizations thorough testing before shipping is a thing of the past. A/B and testing in production is the new norm unfortunately. That's probably part of the problem. Since the users are the product being tested it makes even sense.
kerng
·8 tahun yang lalu·discuss
>> It wasn't intended.

We have been hearing the "it's a bug" a lot lately from Facebook.
kerng
·8 tahun yang lalu·discuss
This is another example of Facebook valuing its own privacy, while at the same time continuing to disregard the privacy needs for its users. I always gave them the benefit of the doubt, but it's getting ridiculous.