Hammerer, picker, strummer and concatenator of strings.

Joined August 2023
Bypassing #EU #AgeVerification using their own infrastructure. I've ported the Android app logic to a Chrome extension - stripping out the pesky step of handing over biometric data which they can leak... and pass verification instantly. Step 1: Install the extension Step 2: Register an identity (just once) Step 3: Continue using the web as normal The extension detects the QR code, generates a cryptographically identical payload and tells the verifier I'm over 18, which it "fully trusts". This isn't a bug... it's a fundamental design flaw they can't solve without irrevocably tying a key to you personally; which then allows tracking/monitoring. Of course, I could skip the enrolment process entirely and hard-code the credentials into the extension... and the verifier would never know.
Hacking the #EU #AgeVerification app in under 2 minutes. During setup, the app asks you to create a PIN. After entry, the app *encrypts* it and saves it in the shared_prefs directory. 1. It shouldn't be encrypted at all - that's a really poor design. 2. It's not cryptographically tied to the vault which contains the identity data. So, an attacker can simply remove the PinEnc/PinIV values from the shared_prefs file and restart the app. After choosing a different PIN, the app presents credentials created under the old profile and let's the attacker present them as valid. Other issues: 1. Rate limiting is an incrementing number in the same config file. Just reset it to 0 and keep trying. 2. "UseBiometricAuth" is a boolean, also in the same file. Set it to false and it just skips that step. Seriously @vonderleyen - this product will be the catalyst for an enormous breach at some point. It's just a matter of time.
262
2,836
407
11,650
1,183,046
Paul Reilly retweeted
🚨do you understand what just happened with Claude.. Anthropic quietly cut Claude's thinking depth by 67%.. didn't announce it.. didn't explain it.. an AMD AI Director had to dig through session logs just to prove it happened. median reasoning dropped from ~2,200 to ~600 characters.. API calls went up 80x.. meaning Claude thinks less, fails more, retries more. and YOU burn more tokens paying for those retries. they added a header that hides Claude's thinking from your logs. so when the model analyzed itself it found blank pages. and concluded it had stopped thinking.. you're paying $200/month for a model that can't read its own diary.. the thinking didn't disappear.. it just became invisible.. and Anthropic said nothing until the numbers went public
AMD Senior AI Director confirms Claude has been nerfed. She analyzed Claude's session logs from Janurary to March: > median thinking dropped from ~2,200 to ~600 chars > API requests went up 80x from Feb to Mar. less thinking and failed attempts meaning more retries, burning more tokens, and spending more on tokens > reads-per-edit dropped from 6.6x → 2.0x. model stops researching code before touching it. > model tried to bail out or ask "should i continue" 173 times in 17 days (0 times before March 8). > self-contradiction in reasoning ("oh wait, actually...") tripled. > conventions like CLAUDE.md get ignored because there's less thinking budget to cross-check edits > 5pm and 7pm PST are the worst hours, late night is significantly better. this means the thinking allocation is most likely GPU-load-sensitive.
164
276
67
2,898
565,906
Boost Blueprint 015: Boost.Interprocess. A comprehensive toolkit for shared memory and synchronization. It enables multiple processes to share data segments and structures with minimal latency, bypassing the overhead of networking stacks Apologies for the eye test :) Level up your C++ architecture. Follow @Boost_Libraries for the #BoostBlueprint series #cpp
2
1
19
1,189
A flexible concrete mat designed to protect riverbanks and hillsides from erosion.
73
540
34
3,610
433,338
Paul Reilly retweeted
"Angel" #GLSL for(float i,z,d,j;i++<5e1;o+=(sin(z+vec4(2,3,4,0))+1.1)/d){vec3 p=z*normalize(FC.rgb*2.-r.xyy);p.z+=6.;p.xz*=mat2(cos(p.y*.5+vec4(0,33,11,0)));for(j=1.;j<9.;j/=.8)p+=cos((p.yzx-t*vec3(3,1,0))*j)/j;z+=d=.01+abs(length(p.xz)-.5)/9.;}o=tanh(o/1e3);
13
63
2
733
15,741
We created a library that allows you to programatically generate flamegraphs in your program. More info here: johnnysswlab.com/fiya-flameg…
Are you familiar with flamegraphs? Flamegraphs are great way to visualize where your program is spending time or other resources. Here is a screenshot of flamegraph taken from ffmpeg converting a movie from one type to another.
6
24
1,767