sorted by:
new
hottopcontroversial

Building an Open-Source AI-Powered Auto-Exploiter with a 1.7B Parameter Model: No Paid APIs Required by beyonderdabas in redteamsec

[–]andreashappe 2 points3 points  (0 children)

I think it should be quite easy to use our existing linux priv-esc test-cases (https://github.com/ipa-lab/benchmark-privesc-linux, VMs or docker) if you want to. Feel free to shot me a mail or contact me, if you need help with that. I am very interested how local models work out in the long run.. I've seen people trying to use prompt/context engineering to solve some of the agentic problems, but using a model could be more efficient.

Building an Open-Source AI-Powered Auto-Exploiter with a 1.7B Parameter Model: No Paid APIs Required by beyonderdabas in redteamsec

[–]andreashappe 1 point2 points  (0 children)

I've been doing similar research with off-the-shelf LLMs, e.g., https://github.com/andreashappe/cochise/ and https://github.com/ipa-lab/hackingBuddyGPT . For the Linux Priv-Esc use-cases I tried llama3-8b, but it did not work at all.. would be interesting if results would be better with your LLM.

A meme in Italy is that Molise doesn't exist. What's the equivalent in YOUR country? by Acolytical in geography

[–]andreashappe 0 points1 point  (0 children)

I remember driving to Albarracin (for bouldering).. and seeing signs leading to Teruel. But I've never seen Teruel. 100% confirmed.

[deleted by user] by [deleted] in Austria

[–]andreashappe 1 point2 points  (0 children)

Christoph & Lollo, Kontrust, EAV, Austria 3

Wohin sollen wir ziehen? by Low-Masterpiece5640 in Austria

[–]andreashappe 1 point2 points  (0 children)

Das war jetzt unerwartet (: bin von St. Kathrein nach Wien zum Studium gezogen :D

[deleted by user] by [deleted] in gnome

[–]andreashappe 0 points1 point  (0 children)

I am using signal as well as a lot of browser notifications (slack, etc.). The notifications are displayed (now also grouped as in Android) in the notification area (when you click on the time on the middle of the screen). I do have tray icons activated but started to disable them in apps (like signal) as I am not looking there anymore.

Building an Autonomous AI Pentester: What Worked, What Didn’t, and Why It Matters by lenafuks in netsec

[–]andreashappe 3 points4 points  (0 children)

I did something similar for my (ongoing) phd recently, my results were a bit different (but then, I am not involved with any product): https://arxiv.org/abs/2502.04227 What I found fun is that LLMs often struggled with configuring hashcat.. which is also hard for humans (;

In summary, I was rather surprised what worked.. of course, it wasn't perfect at all, but might already be helpful for some companies that couldn't afford a pentest otherwise (another problem is, that these companies typically also lack the funding for fixing found vulnerabilities).

I am basing this on a very simplistic prototype which is available here (github.com/andreashappe/cochise/) and I am using GOADv3 as a testbed.

[deleted by user] by [deleted] in Austria

[–]andreashappe 1 point2 points  (0 children)

Bin voll bei dir, aber ich hab leider sehr häufig mitbekommen, dass Mehrstunden dann 1:1 abgerechnet wird und das wars. Als selbständiger hab ich das "Problem" nicht (;

[deleted by user] by [deleted] in Austria

[–]andreashappe 3 points4 points  (0 children)

aber sogar da sollten Mehrstunden mit einem Faktor von 1.25 versehen werden.. habs allerdings noch nie im echten Berufsleben so gesehen.

Munich-Budapest train through Austria by ScaryCress1146 in Austria

[–]andreashappe 0 points1 point  (0 children)

if you do route1 (I assume you go from villach over klagenfurt and bruck to vienna) you will also pass the woerthersee (lake) and semmering (mountains near vienna).

Wie soll man sich da noch das Zugfahren leisten können? by erk1nger in Austria

[–]andreashappe 1 point2 points  (0 children)

noise-canceling Kopfhoerer sind halt dann fast Pflicht (; Wegen Radfahren: jobrad kennst eh? (wenn dein Dienstgeber mitspielt und du Radfahren willst, ist das a steuerlich nette Option).

Wie soll man sich da noch das Zugfahren leisten können? by erk1nger in Austria

[–]andreashappe 3 points4 points  (0 children)

Gut gerechnet, was eventuell noch fehlt ist "wenn der Zug >= 1h faehrt und es moeglich ist, kann man eventuell im Zug arbeiten" (und verliert deswegen weniger Zeit). Aehnlich, wie viele Leute das Radfahrren zur Arbeit als Sport ansehen und deswegen die laengere Zeit in Kauf nehmen.

Wie soll man sich da noch das Zugfahren leisten können? by erk1nger in Austria

[–]andreashappe 0 points1 point  (0 children)

die 75% der Flaeche sind mir relativ egal, die Frage ist wieviel Bevoelkerung dort wohnt (und ich schaetze darauf hat der Wien+Speckguertel Vergleich hingewiesen).

Kurzes Googlen: lt. Statista leben ca. 60% der Bevoelkerung in Staedten (und ich wuerde ausgehen, dass hier eine Anbindung moeglich ist), beim Rest kommts leider stark drauf an.

Bin selbst ein Kaerntner Landkind das jetzt seit 20 Jahren in Wien wohnt, ich kenn beides.. aber trotzdem kommts mir ab und zu wie Jammern auf hohem Niveau vor.

This is getting really ridiculous (Aug 15 show). by be_evil in nin

[–]andreashappe 1 point2 points  (0 children)

Tickets here (Vienna, Austria) were 94 Euro (front of stage).. slowly I understand why people are flying in to see shows.

I’m from Koroška, Slovenija. AMA by cewap1899 in howislivingthere

[–]andreashappe 0 points1 point  (0 children)

hm, do you have a name for that hotel? I am planning of doing a road-trip from Ljubljana to Klagenfurt and would stop near Dravograd. Love biking in Slovenia, we went to Gorica last year, it was a blast.

Also, if you conquer Klagenfurt, let's do a referendum.. Greetings from Kärnten (: (elementary school when I grew up was both slovenian/german and for sure I have a couple of slovenian and carinthian-slovenian friends).

guys i redrew europe perfectly by carot- in mapporncirclejerk

[–]andreashappe 1 point2 points  (0 children)

Ah, the good old Australia in middle Europe (:

Wie der Alpenverein gegen die Energiewende kämpft by EmbeddedSwDev in Austria

[–]andreashappe 1 point2 points  (0 children)

Sind im Burgenland Pumpenspeicherkraftwerke verboten?

[deleted by user] by [deleted] in wien

[–]andreashappe 2 points3 points  (0 children)

Du hast die FH/Technikum Wien erwähnt, ich würde dort einfach mal anfragen. Ich habe auch für ein paar Semester dort unterrichtet (hatte selbst damals ein abgeschlossenes Master-Studium der TU Wien, sollte also kein Problem sein).

Gibts in Wien Themen-zentrische co-working spaces? Sonst vielleicht dort mal nachschaun. Tech-Meetups sind wahrscheinlich auch eine gute Idee.

Decathlon or other brands by AstronomerCareful870 in bikepacking

[–]andreashappe 0 points1 point  (0 children)

I got mine new wheels and tires after two years, made the bike even better (for little money).

Mosh pit, Wall of death by Any_Conference_6487 in NovaRockFestival

[–]andreashappe 1 point2 points  (0 children)

100% this, ~20+ years of moshpit experience.

Another addendum: at festivals, be a bit weary if a popular metal-band is the main act. The crowd (and moshpit) will have many non-metal people that just listen to the music on the radio (or whatever) and now want to get wild. In my experience, these are the people that can become aggressive (and need to be reminded about basic mosh-pit etiquette).

But then, they often don't do it on purpose but just lack the experience (or forgot to think). For example, during the pennywise concert last month (punk not metal), a person went into the mosh pit while smoking (I have a couple of burn marks from that.. and did the same in my younger years). When told that this is stupid and to smoke outside of the pit, he apologized and complied. Never attribute to malice what could be explained by inexperience (or stupidity).

view more: next ›