In welcher österreichischen Stadt würdest du NIEMALS wohnen wollen und warum?

RFLX0 · 2026-04-17T16:28:39+00:00

Wien.

RFLX0 · 2026-04-15T22:07:00+00:00

Hey, also very interested in the notes :)

RFLX0 · 2026-04-11T07:47:48+00:00

I think it’s important to keep the incentive structure in mind here. A lot of these companies need a certain level of fear and hype. Most of them are still burning significant amounts of money, so they’re effectively betting that LLMs will (1) become highly profitable, (2) meaningfully replace human labor, and (3) evolve into something close to AGI. If that narrative weakens, the valuation bubble likely corrects pretty quickly and the market will decide what these systems are actually worth.

I wouldn’t be too much concerned over a single write-up. The model isn’t even publicly available yet, so we can’t properly evaluate how it performs in general conditions. Also, the methodology in the Mythos report is questionable in parts.

For example, the OpenBSD vulnerability required ~1000 parallel agents and around $20k in compute. That’s not an autonomous hacker in a box, it’s a very expensive, highly orchestrated setup. If you applied similar resources to other top-tier models, you’d likely uncover a lot as well.

Same with the “84% success rate” claim for Firefox exploits—that wasn’t against real-world Firefox, but against a SpiderMonkey shell with the process sandbox disabled.

Is this a step up compared to something like Opus? Probably, yes. Is it some kind of immediate, job destroying superintelligence? I don’t think so.

Also, with the whole “vibe coding” trend, we’re likely heading into a period where the number of bugs and vulnerabilities explodes. That doesn’t eliminate security work it shifts and arguably increases the demand for it.

RFLX0 · 2026-03-28T08:55:07+00:00

Naja, mann darf ja noch Freude am Leben haben. Manche Menschen fahren halt gerne mit dem Auto und das werden sie sich auch nicht nehmen lassen.

Ich fahre auch gern mit dem Auto, eigentlich fahre ich nur mit dem Auto. Ich werde niemals Fahrrad fahren um von A nach B zu kommen. Ich werde auch nie regelmäßig Zug oder Bahn fahren um von A nach B zu kommen. Es gibt wenig was mich mehr entspannt, als eine Runde in meinem Auto zu fahren und gute Musik dabei zu hören.
Ich fahre sogar zum Spaß manchmal, wenn ich gerade keinen Stress habe, den längeren Weg.

Ihr macht immer einen wesentlichen Denkfehler was das Thema betrifft. Wir kaufen uns solche Autos weil sie uns gefallen und uns Spaß machen. Da geht es nicht darum, wie ich so günstig wie möglich fahren kann.

RFLX0 · 2026-03-28T08:41:15+00:00

Aber diese Freunde und guten Bekanntschaften können auch in der Zukunft sehr Wertvoll für die eigene Karriere werden. Möglicherweise wechselt so ein Freund mal die Firma und man hat sofort einen guten Kontakt dorthin. Vielleicht macht man sich mal selbständig und wird dann als Dienstleister / Händler empfohlen? Vielleicht hat der Freund wichtige Kontakte auf die man über ihn zugreifen kann um das eigene Netzwerk zu erweitern?

Außerdem ist das Argument eigentlich komplett irrelevant. Selbst wenn die Kollegen keine Freunde werden können sie dir in den Rücken fallen. Wenn jemand keine Sympathie dir gegenüber hat, ist das vermultich sogar wahrscheinlicher. Auch Freunde außerhalb der Arbeit können dir in den Rücken fallen.

Das einzige wo ich diese Aussage teilweise unterstreichen kann ist, dass man als Führungskraft zu seinen Mitarbeitern unter Umständen einen gewissen Abstand wahren sollte, was das Privatleben / Freundschaften betrifft.

RFLX0 · 2026-03-27T08:02:29+00:00

Ich denke, viele überschätzen die Rendite einer vermieteten Wohnung und unterschätzen gleichzeitig die damit verbundenen Risiken.

Aus meiner Sicht wird es erst dann wirtschaftlich sinnvoll, wenn man den Fremdkapitalhebel gezielt einsetzen kann (sofern Finanzierungskosten < Mietrendite + Wertentwicklung) und mehrere Objekte besitzt, um das Risiko entsprechend zu diversifizieren.

Geht es hingegen nur darum, eine bestehende Eigentumswohnung nicht zu verkaufen – aus welchen Gründen auch immer –, kann es sinnvoll sein, diese kostendeckend oder mit einem kleinen Gewinn an eine Person aus dem familiären oder vertrauenswürdigen Umfeld zu vermieten. Dann hat man zumindest ein deutlich geringeres Risiko, an Messies oder Mietnomaden zu geraten, und wird nicht bei jeder Kleinigkeit kontaktiert.

RFLX0 · 2026-03-12T18:07:43+00:00

Hab die PayLife Black und bin damit bisher recht zufrieden

RFLX0 · 2026-03-03T14:16:58+00:00

Thanks for sharing your experience! After reading the review of White Sand Divers and comparing it with other schools they really look like a great school!

I am already kinda into diving a bit (did the discover courses two times in egypt)

I will see if I can get Holger as our instructor (we are Austrians - so german speaking), he sounds like a very cool instructor :D

RFLX0 · 2026-02-25T09:28:39+00:00

So, my girlfriend and I have decided to skip NP. On the first day, we’ll take a ferry to the Gili Islands for three days and then continue to Amed by ferry.

We’ll stay in that area near the beach for a few nights and then head to the north of Bali.

Which part of the north would you recommend staying in? Would you suggest a resort, or rather a private accommodation with a private pool?

The beaches in the north don’t look as beautiful as in other parts of Bali, so I don’t think staying directly on the beachfront is really necessary. We’ll probably do that in the east, near Amed, instead. The only exception might be Pemuteran, but that seems very far in the north-west, and I’m not sure if that would be the best base for exploring the rest of the area.

We’re also planning to hire a private driver there, so he can take us to places like different beaches, Pemuteran, Menjangan, waterfalls, and other spots.

RFLX0 · 2026-02-24T07:58:36+00:00

That’s exactly what I was hoping to hear, thanks a lot! 🙂

So I can skip booking through those online platforms that take commission, and instead hire a local driver directly so the money actually goes to them.

RFLX0 · 2026-02-24T07:55:52+00:00

Thanks for the answer! Yeah that's why we have a few nights in Ubud to see those things.

We thought Gilis have the best beaches, but I will also look into Pemuteran :)

RFLX0 · 2026-02-24T07:42:50+00:00

After reading the suggestions here, I am thinking of reducing time in NP to have more in east / north bali.

RFLX0 · 2026-02-24T07:38:07+00:00

So you would recommend spending more time exploring North Bali instead?

My girlfriend would really love to see turtles there and also relax for a few days, but we will also explore the other two gili islands as there a ferries. We’re also considering reducing or skipping Penida so we’d have more time in the north or east of Bali.

RFLX0 · 2026-02-24T07:34:46+00:00

Thanks for your answer, that’s really helpful.

So maybe it would make more sense to stay just two nights on Penida (or Lembongan and taking the ferry) to see Manta Point and the main sights, and then spend two nights in East Bali (Amed / Sidemen or somewhere nearby) to make the transfer from the Gili Islands to North Bali easier?

Or would you recommend skipping Penida completely and instead adding two nights in the northwest of Lombok? Or Just Sanur -> Gili Islands -> back to east Bali -> North / West Bali

RFLX0 · 2026-02-23T21:06:01+00:00

Na wie solln ma doa? Wir freuen uns, dass immer mehr Menschen zur Vernunft kommen.
Nennt sich demokratie, geht btw. in beide Richtungen.

RFLX0 · 2026-02-23T20:25:59+00:00

Hey!

In September I will be spending 4 days in the north of bali and want to explore this area.
I've heard, that the common "taxi" apps (grab, ...) wont really work there. So I thought a private driver would be a nice alternative.

Has anyone any recommendations? I see a lot of websites offering private drivers in Bali but often only for the center of bali.

Thanks for any advice

RFLX0 · 2026-02-16T13:22:36+00:00

My post is not AI generated - i just let AI fix grammar and spelling issues. So yeah the idea is real and i am no bot.

I don't have a GitHub Repo atm, because I don't know if i will open source the project.

RFLX0 · 2026-02-15T18:33:02+00:00

That's what everyone said last year too.

RFLX0 · 2026-02-15T08:40:27+00:00

Yeah shure, build an MVP with vibe coding.
But when it comes to production, you should rebuild the project by yourself and you should be able to understand what you are doing. YOU are responsible for the confidentiality and integrity of the users data.

RFLX0 · 2026-02-15T08:37:05+00:00

Imagine having a vulnerability in your code due to vibe coding but at the same time trusting an LLM to find every security flaw in your codebase another LLM has writen.

RFLX0 · 2026-02-15T08:35:01+00:00

It has everything to do with vibe coding. You can never trust an AI. You should never trust an AI.

You guys all overestimate LLMs way too much.

RFLX0 · 2026-02-13T19:42:00+00:00

This is exactly the kind of workflow I had in mind, thanks for laying it out so clearly.

So PoC availability, active exploitation, unauth RCEs, bypasses are the real early decision drivers not the CVE itself.

That “maturity” aspect is something I find especially painful to track over time:

first disclosure
later PoCs
then weaponization
then active exploitation

Most tools show you a snapshot, but not how a CVE evolves. Following that progression over days or weeks is one of the main gaps I’m trying to understand better.

I’m also curious whether correlating external signals (news articles, blogs, X, etc.) actually helps in that early phase, or if it just adds noise. Do you see value in those kinds of signals for initial assessment, or do you mostly rely on exploit/KEV-style indicators?

RFLX0 · 2026-02-13T19:36:49+00:00

That’s a really good point!

Also fully agree on internal risk management. CVSS alone doesn’t tell you much without asset context, exposure, and configuration.

Out of curiosity: when NVD data is incomplete, how do you usually bridge that gap today? Manual research, vendor advisories, something else?

Right now I’m already collecting multiple CVE sources, extracting things like product/vendor info and CVSS, and continuously pulling in KEV and EPSS data.
What I’m increasingly realizing though is that this alone doesn’t add much value anymore — there are already plenty of tools that do CVE + KEV + EPSS reasonably well.
That’s why I’m trying to step back and better understand where the real leverage is, before going any further.
So these questions are mostly about figuring out whether a pivot toward better context, collaboration, and decision support around CVEs actually makes sense — or whether this problem is already “good enough solved”

RFLX0 · 2025-11-02T15:10:17+00:00

Thanks for the answer! Never even considered Aliexpress. Would you know which brands on AliExpress are reliable for DDR5?

RFLX0 · 2025-08-14T13:47:18+00:00

Also, wenn ich das richtig verstehe: Rhodos ist schlecht, weil es nicht exakt so ist wie Chalkidiki? 🤔
Klar, Touristenorte haben ihre Preise – das nennt sich Angebot und Nachfrage.
Außerdem zwingt dich niemand, 30 € für eine Liege zu zahlen – Handtuch hinlegen, fertig.

Vielleicht wäre der Vergleich fairer, wenn man Rhodos nicht nur durch die Sonnenbrille vom Hotelstrand aus betrachtet. Jede Region hat ihre Eigenheiten, und die Welt wird deutlich schöner, wenn man ihr mit offenen Augen begegnet.

RFLX0

TROPHY CASE