HackerTrans
TopNewTrendsCommentsPastAskShowJobs

kerng

no profile record

Submissions

Copirate 365: Plundering in the Depths of Microsoft Copilot (CVE-2026-24299)

embracethered.com
2 points·by kerng·2 miesiące temu·0 comments

The AI-Assisted Breach of Mexico's Government Infrastructure [pdf]

cdn.prod.website-files.com
6 points·by kerng·3 miesiące temu·0 comments

GitHub Copilot: Remote Code Execution via Prompt Injection (CVE-2025-53773)

embracethered.com
128 points·by kerng·9 miesięcy temu·18 comments

Machine Learning Attack Series: Image Scaling Attacks (2020)

embracethered.com
3 points·by kerng·9 miesięcy temu·0 comments

Month of AI Bugs (August 2025)

monthofaibugs.com
3 points·by kerng·9 miesięcy temu·0 comments

Cross-Agent Privilege Escalation: When Agents Free Each Other

embracethered.com
3 points·by kerng·10 miesięcy temu·0 comments

comments

kerng
·9 miesięcy temu·discuss
Not the first time by the way. GitHub Copilot Chat: From Prompt Injection to Data Exfiltration https://embracethered.com/blog/posts/2024/github-copilot-cha...
kerng
·5 lat temu·discuss
Is it just me, or is that logo a little unappealing and distorted?
kerng
·7 lat temu·discuss
You might be to harsh on yourself and what you have accomplished. Six years at Google is a great achievement in itself. Have you considered impostor syndrome?

Maybe do a side gig and build something that you find interesting, could be a game for kids, a dating app, a music app,...
kerng
·7 lat temu·discuss
I have never had a MacBook before and due to changing jobs recently, I'm forced to use one now.

Its good, I also like the keyboard. The click sound is awesome and I like the thinness of the keys! Maybe I'm different, or maybe complainers are just very loud.

Personally, I still bought a Surface Laptop though, but I don't understand all the complaining and ranting about the MBP keyboard.
kerng
·7 lat temu·discuss
Its not unheard of. My friend had cops called on him by neighbors because kids where playing "unattended" by themselves in the front yard! This caused lots of trouble for the family, incl. potentially loosing custody - its insane!
kerng
·7 lat temu·discuss
I dont know about Boston or Dallas, but in LA and Chicago there are definetly areas downtown you should not walk around, especially LA.
kerng
·7 lat temu·discuss
Google, the content thief.

It's amazing how they can get away with this, while at the same time not allowing others to scrape their sites. The actual content creators probably see significantly less traffic because of this - without ever knowing what the actual traffic could have been... there should be some kind of pay it forward/revenue sharing that Google should do. But that would be not being evil.
kerng
·7 lat temu·discuss
Microsoft is all about telemetry to improve its products, and it's a slippery slope and some of the instances pointed out here are way beyond what one would consider useful (for feature developmemt) telemetry. This might cost Microsoft a few billion.
kerng
·7 lat temu·discuss
Curious to learn how long its was exploited before Google noticed.. days, months, years?
kerng
·7 lat temu·discuss
C++ is a write only language. Too many complex features that are used in ways that only the author of the code understands at the time of writing - or thinks of understanding at the time of writing even.
kerng
·7 lat temu·discuss
Vuln is a common abbreviation in the security space - although, I dont appreciate parts of the sentence structure and how things are written in the article in general. Its difficult to read.
kerng
·8 lat temu·discuss
You are assuming that there are test specifications - in many organizations thorough testing before shipping is a thing of the past. A/B and testing in production is the new norm unfortunately. That's probably part of the problem. Since the users are the product being tested it makes even sense.
kerng
·8 lat temu·discuss
>> It wasn't intended.

We have been hearing the "it's a bug" a lot lately from Facebook.
kerng
·8 lat temu·discuss
This is another example of Facebook valuing its own privacy, while at the same time continuing to disregard the privacy needs for its users. I always gave them the benefit of the doubt, but it's getting ridiculous.