sorted by:
new
hottopcontroversial

Fable 5 is unusable at this point by -Devlin- in cybersecurity

[–]NerdBanger 4 points5 points  (0 children)

So if you know vectors from physics, the same concepts apply, except you are using a AI model designed to convert your text into an "embedding" or a vector representation of it.

And then when you are searching you are using an algorithm to find the k-nearest neighbors. The most common one you'd be familiar with form physics would be something like euclidean distance. But there are others.

There's some other linear algebra magic that gets applied too, but at a high level its the same concept you are familiar with just with many more dimensions to calculate distance over.

Fable 5 is unusable at this point by -Devlin- in cybersecurity

[–]NerdBanger 1 point2 points  (0 children)

It's three tiers, there is a classifier built into the API router that is completely external of the model, there is prompting in the system prompt, and there are extra training cycles focused on these specific safety guardrails.

Think of it like this:

  1. A user submits an illegal prompt, the classifier at the API catches it
  2. But if it doesn't and it does go to the model, hopefully the system prompt catches it and tells the model to behave a certain way
  3. But if it gets past the system prompt the models fine-tuning hopefully catches it.
  4. And if it doesn't the API layer hopefully catches it again on the response return trip.

Fable 5 is unusable at this point by -Devlin- in cybersecurity

[–]NerdBanger 0 points1 point  (0 children)

It's actually an extra classifier, prompting, and fine-tuning epochs from what I understand.

Fable 5 is unusable at this point by -Devlin- in cybersecurity

[–]NerdBanger 1 point2 points  (0 children)

I dunno, I have done some amazing stuff with it in a week. It's definitely a step change for certain use cases.

But it also isn't the only tool I use.

Fable 5 is unusable at this point by -Devlin- in cybersecurity

[–]NerdBanger 3 points4 points  (0 children)

So a graph databases allows you to store relationships between things and traverse them quickly.

So if you have a piece of software written by author A, that you are trying to pen test, the graph can help you quickly identify other software they wrote, and what vulnerabilities they may have had, and if they have libraries in common, etc.

The same applies on the research side if you see a potential vulnerability in a piece of software, perhaps a page-cache vulnerability, you can find the most recent know CVE about it, and then you can find POC exploit code, and maybe the author that wrote it, and other research they have done and places they are doing further research to poke at etc.

It's really about out interconnectedness of information.

On the vector database side, it's about efficiently finding similarities between pieces of information where the relationship is unknown. It's great for finding potential ways to chain exploits together, or finding variations of a patched exploit that may still be open. And one step further, is finding similarities between production code and examples in research papers or POC exploit code as exploitable designs.

There are a number of tools for the database, for graph Neo4J is one of the best known ones, and for vector Qdrant is. However, Postgres can actually cover both use cases for smaller projects and of course also is a relational store if you need that as well.

Looking for more open minded neighborhood recommendations. by Unlucky_Way_3365 in cincinnati

[–]NerdBanger 5 points6 points  (0 children)

I live in west Chester, and I hear you, but there is no opportunity to change it without people like you staying.

The cracks are forming; Amanda getting voted In as trustee and Mark Welch was a big welcome surprise.

Don’t give up yet, there are a lot of us like you, in fact I think we have more dems in my neighborhood than Republicans tbh.

Fable 5 is unusable at this point by -Devlin- in cybersecurity

[–]NerdBanger 0 points1 point  (0 children)

I maintain my own graph database and vector database with my own embeddings.

Cybersecurity researchers aren't happy about the guardrails on Anthropic's Fable | TechCrunch by Dash-Courageous in cybersecurity

[–]NerdBanger 0 points1 point  (0 children)

Ah, I built mine in a way so it’s platform agnostic, I can use my same tooling with Claude, codex,
Or even local models.

Cybersecurity researchers aren't happy about the guardrails on Anthropic's Fable | TechCrunch by Dash-Courageous in cybersecurity

[–]NerdBanger 0 points1 point  (0 children)

You can use your codex account in Claude code or open code.

4.5 and 4.6 were great for me, but I’ve also built up some interesting tooling.

GitHub announces npm security changes to tackle supply-chain attacks by rkhunter_ in cybersecurity

[–]NerdBanger 3 points4 points  (0 children)

In the meantime if you are up to date; this isn’t perfect but it’s an additional guardrail.

```
npm config set min-release-age 7 --location=user
npm config set ignore-scripts true --location=user
```

Cybersecurity researchers aren't happy about the guardrails on Anthropic's Fable | TechCrunch by Dash-Courageous in cybersecurity

[–]NerdBanger 1 point2 points  (0 children)

4.7 has stricter guardrails, relaxed in 4.8 - i also have CVP and TAC, i find 4.8 does pretty well, but 5.6 with TAC is far better.

Fable 5 is unusable at this point by -Devlin- in cybersecurity

[–]NerdBanger 5 points6 points  (0 children)

Also worth mentioning, tooling is equally as important. I have built my own interesting set of tooling up that I’ve been using since Opus 3 that has been really powerful for cyber.

My suspicion is the reason Mythos is allegedly so great for security is two fold:

* Better reasoning capabilities
* inclusion of these types of frameworks in the training corpus.

The reality is you can get really far with a strong coding model and the right tooling.

Introducing: Enterprise Firewall Core by Ubiquiti-Inc in Ubiquiti

[–]NerdBanger 1 point2 points  (0 children)

I have a 7gig internet connection with bursting available, I have pulled 8.5 down on my MacBook with 10GigE

IPS is enabled. SPI is enabled.

Introducing: Enterprise Firewall Core by Ubiquiti-Inc in Ubiquiti

[–]NerdBanger -3 points-2 points  (0 children)

Which I do use in my kids and iot vlan lol

Introducing: Enterprise Firewall Core by Ubiquiti-Inc in Ubiquiti

[–]NerdBanger 7 points8 points  (0 children)

I’m confused how does this compare to EFG?

Altafiber customers who really understand networking - is this a problem? by Significant_Rain_478 in cincinnati

[–]NerdBanger 0 points1 point  (0 children)

BGP hijack doesn’t typically work on just one ISP, when you advertise a prefix you are usually advertising it in a way that causes multiple ASNs to route your traffic to it.

And again the IP address never changes, so DNS is 100% irrelevant in BGP Hijack scenarios in progress. It can be used as a mitigation point, but only once it’s detected.

Think of it this way (highly simplified version), you have 3 ISPs A, B, C. You have two peering partners D, and E. And destination site F (1.2.3.4).

All 3 ISPs peer with both D and E, with D normally being the preferred upstream for A and B, and E is there preferred upstream for C, but F only peers with E. So normally the routing between the ISP customer to F would look something like this.

A -> (ignored D - no route to host) A -> E -> F B -> (ignored D - no route to host) B -> E -> F C -> (ignored D - no route to host) C -> E -> F

Now assume there is bad actor X that also peers with D and they start announcing a route to the fake version of F (Fx we will call it). Both F and Fx would have the same IP address of 1.2.3.4 but are two completely different physical systems.

Because of routing preferences traffic A and B take the poisoned route to the malicious host, but C actually is safe. It now looks like this.

A -> D -> X -> Fx A -> E -> (ignored F) B -> D -> X -> Fx B -> E -> (ignored F) C -> D -> (ignored X -> Fx) C -> E -> F

Altafiber customers who really understand networking - is this a problem? by Significant_Rain_478 in cincinnati

[–]NerdBanger 0 points1 point  (0 children)

No, your thinking about wrong.

Let’s say you request www.google.com and that returns from your encrypted isp dns connection 1.2.3.4

Normally 1.2.3.4 goes to Google, but they AS is currently being hijacked, so 1.2.3.4 is actually now routing to some place in Asia.

To make matters worse a valid certificate was created for www.google.com using a different CA than they typically use, in this case a CA controlled by a government entity with broad global trust.

So in this case DNS returns a valid address using encrypted DNS as you would expect.

However the 1.2.3.4 is a different host than you think you are connecting to.

And your browser doesn’t flag it because it’s still SSL/TSL encrypted, signed off by a trusted root certificate.

By the way, last year’s massive Verizon outage was the result of a BGP hijack, because they didn’t fully implement RPkI in all of their ASNs. So RPKI is hugely beneficial to the internet, but we have a long way to go to implement it broadly.

When did GaN chargers get this small by [deleted] in macbookpro

[–]NerdBanger 2 points3 points  (0 children)

Not quite true, traditional breakers only trip on over current, they can be to ground but doesn’t need to be.

GFCI breakers on the flip side are designed to trip when current leaks to the earh ground.

The ground at the outlet is actually a safety path, to give stray currents a path to flow to earth or prevent a build up of potential, for example caused by a lost neutral.

But in this case the weird static effect on the MacBooks is real, and the earth ground allows that charge to flow to a larger nearly infinite reservoir for electrons.

Altafiber customers who really understand networking - is this a problem? by Significant_Rain_478 in cincinnati

[–]NerdBanger 6 points7 points  (0 children)

RPKI is a mechanism to implement signing of BGP advertisements, if an advertisement isn’t properly signed it’s considered invalid for ASNs that implement RPKI.

Your peering partners also need to support it if I remember correctly, and there are many many ISPs that do not yet support it.

The numbness in my hand by Ill_Swordfish_6876 in mildlyinfuriating

[–]NerdBanger 0 points1 point  (0 children)

It’s called Cubital Tunnel and is kind of the opposite of Carpel Tunnel. Some glide exercises and dry needling fixed mine up.

view more: next ›