HNHacker News
TopNewBestAskShowJobs

dhruvagoyal

16 karma · joined February 1, 2021

ceo @ bugbase security. ai & security research. osce3 + oscp certified. aoe4 + palworld enjoyer
submissionscomments
dhruvagoyal··on Why is this fingerprinting script creating bioweapons?
Absolutely incredible catch and find. Looking ahead this seems like what most companies will have to use to truly avoid ai bot crawling.

It's also an insane risk imo, this basically means that I could be banned by openai/anthropic for accidentally crawling this website which might be the ultimate cyberattack - truly dystopian

dhruvagoyal··on Swedish government offices to ban ChatGPT and Claude
> The use of AI services without a contract can have "consequences for our information security"

Totally logical and smart take. Any govt (or for that matter, anyone) not doing this is just giving all their data to these providers for free.

dhruvagoyal··on How to do ambitious things with AI (parent friendly)
I wrote this for all our non-technical friends, colleagues, family. It's a simple, step-by-step guide to getting real work done with a $20 ChatGPT or Claude subscription.
dhruvagoyal··on How does Fable 5.1 hide messages in images?
This does seem trivial and there are far more interesting ways to do image steganography that models could use (i've seen so many after years of doing CTFs). What would be really interesting is if we see models encode hidden messages in very normal looking output (image/text/audio) that humans cannot figure out but only another model can
dhruvagoyal··on eMudhra to exit global SSL/TLS certificate business
y'all underestimate your wives, i simply explained how PKI works in simple terms (alice/bob, public key, private key) and explained that they chose 4 as a private key instead of something complicated, she got it.
dhruvagoyal··on There isn't an easy exploit for this PHP vulnerability
"Script kiddies (and script adults, who have also switched their brains off)" not something i expected to hear ever but it's so real
dhruvagoyal··on Security advisory: Critical remote code execution vulnerabilities, update now
I find it really interesting how no one has been able to produce a POC after the blogs hit the public. Something key was probably omitted from the disclosure to prevent exactly this.
dhruvagoyal··on PHP 8.2.35
there is clearly some drama w.r.t. who takes credit here, 3 companies credited for a single flaw is super odd.
dhruvagoyal··on Loop Engineering: Optimizing Code Generation and Verification
it's full of slop, even if there is something you were hoping to convey, it's lost in 8,000+ words. In this LLM world, less is more.