TIL: if you lost your 2fa (e.g. new phone) for gitlab and don't have recovery codes but your ssh keys still work you can generate new ones via SSH: ssh git@gitlab.com 2fa_recovery_codes
Remote
wirepair
@wirepair@mastodon.social
mastodon 4.8.0-nightly.2026-10-06Principal Vulnerability Research Engineer - Vulnerability Research @ GitLab. Does GameDev at Night some times. In Japan for the foreseeable future.
0 Followers
0 Following
50 Posts
Joined April 04, 2017
Went to a lovely forest and waterfall today in Nagano.
just because the bubble will pop, doesn't mean LLMs will go away 🤷
Kid got into the googly eye stash.
I'm building a custom sandbox to prevent LLMs from doing various things and I just found a funny sandbox escape even if you only allow api.anthropic.com as your only egress host:
https://gitlab.com/-/snippets/6011856
Honestly anti llm folks really are like vegans. Annoying as shit but you kinda can’t argue with them on any moral grounds.
How did no one get fired for the OpenAI hack? Like… is negligence no longer a thing? Just like truth and consequences?
Got into a staring contest with this guy. They were like 3m away. (They won).
RE: https://mastodon.social/@thejapantimes/116873236462320567
Japan is not ready for AI script kiddies. This place is toast.
RE: @metacurity@infosec.exchange
Crazy, because probably 80% can be vibe coded in a week. I’m starting to suspect most appsec companies are ultimately doomed. You are 1 good engineer who knows appsec from having your stack replaced with a custom solution.
holy crapola https://nikolays.github.io/PGSimCity/
Replying to
@scottley@infosec.exchange i mean you'd still need the user/pass _and_ ssh key, so it's still _technically_ 2fa :>
Replying to
@tychotithonus@infosec.exchange @danluu@mastodon.social oh this is new.. thanks for the link!
hu, TIL: they deprecated noseyparker, and created https://github.com/praetorian-inc/titus ? cc @bradlarsen@infosec.exchange
i look forward to AI finding an 0day and providing a patch that contains a backdoor for a supply chain attack.
I think in simple terms, the reason LLMs have sucked the joy out of my side projects is I now have access to a machine I can delegate work to. Problem is I don't enjoy delegating work. But I also don't enjoy doing shit that can easily be done using a tool. So I just don't do anything now :shrug:.
I think in my professional career I’ve missed maybe 2-3 meetings, and been late for less than 20.
RE: @thejapantimes@mastodon.social
Keep that fucking shit OUT OF HERE
24c in Nagano and I’m loving it. Not having to use AC is such a relief.
4am (fuck jetlag) and it's already 19 degrees, this summer is gonna suuuuuuck
RE: https://mastodon.social/@danielcornell/116963813168908488
*laughs in late stage capitalism*
Quoting
So if today's hype cycle is to be believed, some OpenAI model hacked Hugging Face
Cool. Cool
I'm just curious - which OpenAI execs are going to have their lives ruined and go to jail for this?
Asking for Aaron Swartz
Open quoted postas if being exhausted isn't bad enough, i hate how jetlag really fucks with your stomach. Feel so bloated and sick and gross :(
man i am burned tf out. AI really has sucked the joy out of all my side projects. Now I don't know what to do with myself.
Replying to
@gsuberland@chaos.social i never understood people who steal social media jokes, it's so cringe
https://newsletter.pragmaticengineer.com/p/the-pulse-forward-deployed-engineering omg it’s the gig economy for devs. Do all the work get none of the stock benefits. Amazing.
Replying to
Replying to
@0xabad1dea@infosec.exchange lovely dogs, my high school art teacher had one that used to sit in our class
i guess it's my time to shine like a linkedin lunatic and go for a walk at 4am!
Guess it’s summer for realz now
Oh shit kara did a BOG set. Noice https://youtu.be/U__wgciqgGQ?si=-tkMsK2ADoqyeNdt
Replying to
@elizabethtasker@mastodon.online is it a clinic that does 人間ドック? Companies usually schedule everyone together (at least my last one did)
No matter how shitty I feel, I never regret showing up to the gym.
i'm in one of those 'not sure what i want to play' moods. hate it.
lol
Replying to
@jernej__s@infosec.exchange @scottley@infosec.exchange one could argue just the ssh key is 'technically' a second factor :>, you still need proper username + password.
Replying to
@bradlarsen@infosec.exchange ahh, and oof that's going to be a losing battle, none of those companies are gonna be around in a few years 😅
When a set perfectly matches your mood https://youtu.be/Otu1kpUjtv0?si=ITBS58e637CWJE3l
I’ve been struggling to find a techno track for 25 years and I just gave a vague description to Claude to find it. It has a few promising hits, excited to listen to them when I get home from my walk. Finding obscure shit is def one of the very very few things I like about llms. Ok maybe it’s like the only thing.
Replying to
@xabean@infosec.exchange i missed something, what happened?? your hearing just disappeared?!
fuuuuuckkk jetlag... skippin' gym today, can't be fucked.