infosex.exchange <3

You are probably looking for the infosec.exchange Mastodon instance

This host is mostly for my random stuff, and in little part acts like a well-intentioned placeholder for the typosquatted domain.

Discoverability and Archiving

Currently I'm using this host for saving the items from my own feeds to the Wayback Machine and provide in-links for search engines. I hate that I have to do this, but the non-sense ideology of Mastodon pretty much ruined the search feature for Fediverse as a whole, and this wasn't changed by the fact that they owned their mistake and implemented search eventually.

Yes, I (or anyone else) could do similar things with other peoples published feeds, regardless of the tantrum. No, you can't defederate this, because the process doesn't rely on an instance.

Gluttony Section for Search Engines

[RSS] [Quarkslab] Internship Offers for the 2026-2027 Season

http://blog.quarkslab.com/internship-offers-for-the-2026-2027-season.html
this post | permalink
[RSS] Calif iPhone jailbreak demos

https://blog.calif.io/p/iphone

"Everything will be released in due time"
this post | permalink
[RSS] Big Fish: Exploiting a 37-Year-Old Kernel Bug in OpenBSD

https://calif.io/research/big-fish
this post | permalink
[RSS] Deep-Dive into Android Binder UaF (CVE-2023-20938) using Time-Travel Debugging

https://www.eshard.com/blog/kernel-uaf-1-trigger
this post | permalink
[RSS] Dumping Encrypted Viltrox Lens Firmware - two times

https://blog.29b.net/dispatches/viltrox_re/
this post | permalink
[RSS] One Parser, Two Bugs, Many Routers: Exploiting Broadcom WiFi Across eCos and Linux

https://quentinkaiser.be/security/2026/10/16/one-parser-two-bugs/
this post | permalink
The only good AdTech is Adhesive Tech.
this post | permalink
@Linkshaender

Sorry, there is a lot to argue with here, so let me give you an extreme, but hopefully illustrative example:

Our spec is to add two finite integers. There is a non-zero chance, that the LLM will implement this by calculating square roots and applying a ton of hacks and so it does.

Humans are not able to touch the code since every bit of it is unreasonable and literally drives them crazy. Having an LLM do a change makes things worse.

Still all of your tests pass, since that's the success criteria for the LLM (btw how do you know what to test for in this case?). Some inputs (you don't know which) would DoS your system or give inaccurate results, but no one complained the last 6 months.

Would you be a happy PO of this system?

@gadi
this post | permalink
@Linkshaender @gadi if you don't care how the code looks you don't care about the long term maintainability of the codebase and having the right model of your domain. Linus argues that you *can* get these things right while using LLMs, and I agree. I also see that with LLMs it's very easy to accidentally impose massive debt on yourself by skipping the thinking required to bridge the gap between natural and formal languages.
this post | permalink
@rqm no idea it was just waiting for the lights to change then went on
this post | permalink
Next Page