pookie retweeted
We hit a massive milestone for the company over the holidays, we’re at a point where we can dogfood it and use it to secure the access to the repositories that we build it in.
pookie retweeted
Got around to writing up a bug from earlier this year, remote code execution in @warpdotdev. Enjoy!
0day.gg/blog/warp-terminal-r…
pookie retweeted
One of the last red team ops we ran was called floss boss and was meant to be a returning actor from a previous op, molar bear. We got branded dental hygiene kits made as propaganda to spread the lessons learned.
pookie retweeted
After 6 years our offensive security team is shutting down and today is my last day at Yahoo. It’s been a great ride and couldn’t have asked for a better team to work with.
pookie retweeted
Sigstore is aimed to ensure privacy & scalability, integrates technologies for seamless signing, verification, & provenance checks. 🔏 Explore how Yahoo utilizes #Sigstore alongside Athenz as an internal Certificate Authority for container image security: openssf.org/case-studies/202…
pookie retweeted
🔑Pushing new container images at scale is hard. Verifying those images' authenticity is harder.
Read how Yahoo uses an open-source project — Sigstore — to sign tens of thousands of images a day transparently! 🔑yahooinc.com/paranoids/scali…
MFW someone is talking in slack while PTO or sick youtube.com/watch?v=WNmCm4oy…
Wild to see this company still cringe posting their "hip" ads when every other advertiser is pulling off the platform because of elno's support of antisemitic conspiracies.
xitter.cf/vicariusltd/status/171…
pookie retweeted
Introducing our newest game: Quizzle! 🎉
Can you guess today's word in fewer than 20 questions?
Play now 👇
quizzle.game/
pookie retweeted
💯 Smaller models, tuned and configured to reason, coupled with RAG and knowledge graphs, will absolutely eat a lot of white collar jobs. Maybe not in the next 6 months, but it’s inevitable.
That’s why it’s so important that the open source / open LLM community start *now* on standards for data governance, provenance, and licensing. We have the biggest opportunity for democratizing and resetting the scales of economic equity, since the rise of consumer internet and seminal open source like Linux and GCC.
You thought that you can go to sleep now??
Orca 2 Just dropped.
Paper: arxiv.org/pdf/2311.11045.pdf
Results:
Orca 2 13B beats LLaMA-Chat-70B
TL;DR:
Training smaller model to reason by using multiple techniques:
step-by-step, recall then generate, recall-reason-generate, direct answer
And determining the most effective solution strategy for each task.
pookie retweeted
I've been a pretty vocal skeptic of AI and it's importance but recently started playing a bit with attacking LLMs after some nerd sniping from a co-worker. Did a few CTFs to learn some of the basics and decided I wanted to try it out for real. 1/n
pookie retweeted
jojo characters: "anyone in this crowd could be the enemy stand users."
the enemy stand users:
You can generate the entire navy seal copypasta with this demo
xitter.cf/yvrjsharma/status/1721…
Developers can now generate human-quality speech from text via the text-to-speech API released by OpenAI earlier today.
@Gradio Demo -huggingface.co/spaces/ysharm…
Explore all the available voices and models from OpenAI in this demo.
pookie retweeted
Our Platform Security team is looking for a new sr. security engineer. Come work with us! Role is remote. linkedin.com/jobs/view/37553… (workday is down right now) ouryahoo.wd5.myworkdayjobs.c… Happy to provide referrals to anyone I know
pookie retweeted
Lot's of discussion about security keys disrupting the attacks against Okta. I don't have enough information to make a claim about that. They definitely are effective against phishing but it's not clear whether phishing was used. 1/n