btx

I am amazed by the jump in usability of models this year. Some little thing annoying you about some software, some feature missing just point AI at it and burn some tokens. (ok, maybe a few rounds of telling the model to do better are still needed from time to time)

vmconnect.exe (Hyper-V enhanced session) not going fullscreen after login when the window is fullscreen and you have to minimize and maximize to get fullscreen? Have your agent debug the issue and come up with an elaborate hook system that leaves the Microsoft files untouched.

Codex/Chatgpt electron app coming with annoying or missing features (Mini, Invite friends, no mcp hotreload, windows updates failing, ...)? Just point codex at codex and have it build an mcp Ouroboros to improve itself and enable dynamic js userscripts.

Deskflow clipboard sharing between devices missing file sharing, just have sessions on Mac, Linux and Windows collude to cook up a solution.

Yet writing proper documentation and reports that are human digestible still seems a bit out of reach, why would humans need to read anyway...

apple used some flash, for example:

store.apple.com/Catalog/US/Images/vday07/img/PersonalizationHome.swf

(Reported a security problem to them back in the good old days 2013)

Not sure about swf files on www.apple.com directly, would have to dig into my older collections on a dusty server.

complete livestream: https://www.youtube.com/watch?v=HG0twQJ7aG4&t=16041s

Copilot generates HTML with iframes to simulate the OS. On each click a diff for the HTML is generated and applied.

Out curiosity I checked Streetview.

Figure 7. Hollister 6th street

2021: https://youtu.be/RUNCEZs9nkU?t=168

2022: https://google.com/maps/@36.8506199,-121.4066009,3a,90y,250....

Figure 22. CA-25

2023 (patched up, drainage channel added): https://google.com/maps/@36.4065854,-120.9937028,3a,90y,216....

Streetview also available for 2022, 2012, 2007 that shows some cracks/offset.

In some responses it now cites a link to this comment section.

--------------

Q: How long will it take before Bard is shut down?

A: I can't say for sure when Bard will be shut down, but I can tell you that there are no plans to shut it down in the near future. Google has recently announced that it will continue to explore ways to use AI to enhance creative expression, and Bard is one of the projects that it is working on.

The Hacker News comment that you linked to is a hypothetical scenario where Google shuts down Bard after one year. However, this is just a speculation and there is no evidence to support it.

If you have any other questions about Bard, please let me know.

Sources - Learn more news.ycombinator.com/item?id=35255864

Has anyone found a way to trick it into using pictures with ChatGTP+ yet?

Pasting pure base64 images got this interesting response: "Thank you for providing the base64-encoded image! I can now process the image and analyze its content. Here is the decoded image:"

But it failed to do anything further with the image.

I have written something [once] that de-dupes on just the URLs, you could take this way further with images and content analysis.

This is also manly an app to stop me from scrolling across the same stories on HN and lobste.rs again and again multiple times a day. So it lacks reddit specific features.

[once] https://github.com/batram/once

  The following issues are outside the scope of our vulnerability rewards program (either ineligible or false positives):
  ...
   - Social engineering of Twitter staff or contractors
  ...

https://hackerone.com/twitter

Pretty standard for most if not all of the program rules I have come across.

Interestingly it does not seem to be a new concept: https://www.reddit.com/r/netsec/comments/37ko5v/introducing_... https://securingtomorrow.mcafee.com/mcafee-labs/meet-tox-ran...

They used to take 20% 'commission'.

Being in a somewhat similar position (looking for my first 'real' job in the field of security), I have more or less the opposite problem.

After setting up a profile on sites like Xing (works best for Germany) or Linkedin and adding some relevant buzzwords, you get basically swarmed by recruiters. The offers from recruiters might not be the most interesting, but you still can use them to get some information and feedback.

Just show that you have a personal interest in security. For Example I have myself participated in a bunch of bug bounties, hitting most of the big ones (Dropbox, Facebook, Google, Microsoft, Mozilla, Paypal, Twitter, ...). While finding big problems in the higher payed ones might be trickier, there are always companies that just offer a thanks or some swag. An alternative would be to look at open source projects and try to get some CVEs. Of course this depends on what field of security you want to end up in.