Watch This Space: A security research blog.

The Interwebs
Joined August 2024
Include

Only show posts containing:

Exclude

Hide posts containing:

Time range
-
Minimum likes
Replying to @twolays
To be fair, people have been calling this place Xitter for longer than the satirical clone has existed.
3
105
Replying to @N104AP
A near-decade-old story that seems to be making the rounds again: forbes.com/sites/leemathews/… Has nothing to do with the new AI era except that it looks like it's being shared by AI-ish accounts.
1
34
Replying to @theevilbit
A few notes: 1. Most of my write-ups are missing. Granted, the one that is there is on the official CVE record, so maybe that's how Claude found it. My profile info is also a bit barren. 2. Going "back" in my browser leaves the site instead of navigating to the previous section.
1
2
218
Quite interesting. Less catastrophic, but would definitely draw more ire towards Apple.
1
1
66
Replying to @never_released
This would be fucking catastrophic, in my opinion. Way too far. I think Apple needs to provide a granular alternative to FDA, not simply make it harder to approve.
1
3
232
Replying to @theo
I'm of two minds on this. I absolutely understand the security reasons why Apple does what they do, and I find it commendable. Unfortunately, they're also fighting an uphill battle against dev environments with less local attack mitigations.
3
147
Replying to @patrickwardle
Damn, pretty cool!
1
167
Replying to @blacktop__
Pretty cool! Did extraction get faster too?
214
Replying to @S1r1u5_
Damn. Excited to see it!
1
806
Replying to @blacktop__
Damn. It was good while it lasted.
21
5,705
Replying to @blacktop__
Fascinating stuff, especially given process execution is already so locked down on iOS.
1
6
1,820
Replying to @wtsdev @birch_js
That being said, AppleScript is built on top of the Apple events API, and I think JXA is too. And I don't that API's "exit" command returns success state. Not to mention that it's app-to-app directly. It's likely infeasible for an app to report itself as successfully quit. /end
66
Replying to @birch_js
So, I know a lot about AppleScript internals. It targets an app by name and resolve that name to a specific instance, entirely outside of user control, so I don't think it supports multi-instance well at all. Not sure about JXA, but event-listening might be a language feature. /1
1
1
77
Replying to @birch_js
Read the OSA section of that Wikipedia article. Both AppleScript and JXA use the Open Scripting Architecture. Same interface. Not a direct binding, to my understanding. I don't think there's anything that JXA can do that AppleScript can't (save for specific language features).
1
26
Replying to @birch_js
Isn't JXA just AppeScript, but with JavaScript instead (i.e. they both use the same communication protocol / commands)?
1
90
Replying to @yo_yo_yo_jbo
Yeah, I agree it is different. I believe that credit should be given to the appropriate party here.
40
Replying to @yo_yo_yo_jbo
Maybe it's just me, but I genuinely don't see this as some major revelation. Maybe it's because I saw all the early chatter about privacy concerns of businesses pasting their closed-source code into ChatGPT. And/or maybe I'm just aware that electronic privacy is vanishingly rare.
1
139
Misleading wording, in my opinion. This wasn't the judge making a final ruling but the DoJ filing a brief in support of OpenAI. The case still continues, from my understainding.
SITUATION DETECTED: The US government has sided with OpenAI against the New York Times. The DoJ says training an LLM on copyrighted works does not violate copyright law, and that treating it as infringement would hurt US science, prosperity, and national security.
364