LunaSec (@lunasec@infosec.exchange) (@LunaSecIO) header
LunaSec (@lunasec@infosec.exchange) (@LunaSecIO) profile picture

LunaSec (@[email protected])

@LunaSecIO

Want to network with other InfoSec professionals? Come join our community on Discord! https://xitter.gq/t.co/NfFVJREjqo

 Seattle
lunasec.io/
Joined July 2021
  • Tweets227
  • Following174
  • Followers2.7K
16Media
Photo by LunaSec (@lunasec@infosec.exchange) (@LunaSecIO)Photo by LunaSec (@lunasec@infosec.exchange) (@LunaSecIO)Photo by LunaSec (@lunasec@infosec.exchange) (@LunaSecIO)Photo by LunaSec (@lunasec@infosec.exchange) (@LunaSecIO)Photo by LunaSec (@lunasec@infosec.exchange) (@LunaSecIO)Photo by LunaSec (@lunasec@infosec.exchange) (@LunaSecIO)Photo by LunaSec (@lunasec@infosec.exchange) (@LunaSecIO)Photo by LunaSec (@lunasec@infosec.exchange) (@LunaSecIO)
Vector DB intro w/ sample code and links to a few popular ones with free plans - lunabrain.com/blog/riding-th…
3
6
1,486
I’m an instant pass on any startup that just wraps OpenAI. Zero differentiation over time. Building your solution / app on your own models that you control, train and tune yourself? Good.
80
39
16
457
148,115
There's a new Open Source LLM model called "Cerebras-GPT" that hit the internet yesterday. I was curious how it compared in performance to #ChatGPT and #LLaMA so I wrote an article that compares them. If you haven't heard of this yet, it's worth a read! lunasec.io/docs/blog/cerebra…
1
2
1
431
From a DM, just in case anyone else needs to hear this.
Image from John Carmack (@ID_AA_Carmack)
311
3,507
743
19,281
3,406,547
Super helpful list of ChatGPT alternatives with a focus on the licensing stuff github.com/nichtdax/awesome-…
GitHub - nichtdax/awesome-totally-open-chatgpt: A list of totally open alternatives to ChatGPT

GitHub - nichtdax/awesome-totally-open-chatgpt: A list of totally open alternatives to ChatGPT

A list of totally open alternatives to ChatGPT. Contribute to nichtdax/awesome-totally-open-chatgpt development by creating an account on GitHub.

github.com
1
337
We could add this functionality into the dependency helper bot we've been building on GitHub. Please leave your thoughts in the comments below! (And if you'd like to try it out.)
Jeremy Smith (@jeremysmithco) profile pictureJeremy Smith
@jeremysmithco15 Feb 2023
When I'm upgrading dependencies, here's when I tend to pump the brakes and look more closely: - Major version change - Release notes mention breaking changes - No release notes - Last release was more than a year ago - Maintainer has changed - Tons of files have changed
1
1
1
722
A "truthy" lie will run 2x round the world faster than a boring truth. The sad fact that a high effort piece from @alexrkonrad and @kenrickcai got overrun by lazy bullshit shows pulling the biggest possible number out of your ass while keeping a straight face is all you need.
Image from swyx (@swyx)
Image from swyx (@swyx)
Image from swyx (@swyx)
4
4
2
42
12,075
So... @YCombinator has invested in 100+ COSS startups since 2008 (80%+ of those over the last 2 years alone!). If this were abstracted out as a distinct fund, it would do extremely well... like a 100X fund, I think, and that's not an exaggeration. 😁 ycombinator.com/companies?qu…

The YC Startup Directory | Y Combinator

A list of companies YC has funded across many verticals including hardware, edtech, biotech, healthcare, developer tools, consumer and enterprise, to name a few.

ycombinator.com
1
3
1
11
1,916
WOW… Nearly 10% of ALL games published on @Steam are built with @godotengine. 🔥 📈 🤖
Image from JJ (@JosephJacks_)
1
7
64
4,695
>blog post hits HN >check comments >friend already defending post from comment snark
2
2
32
5,638
Your grandma asks you what an XSS is, what do you answer? 👵
65
18
5
216
99,065
"Cross-Site Request Forgery in OWASP CSRFGuard" got to love the irony CVE-2021-28490
1
5
626
Image from chris (@breadchris)
2
1
2
If you're struggling for months to patch CVEs in your production apps, I could use your help to learn what the problems you're facing are and how you might imagine fixing the process. It'd incredibly helpful for the OSS project I'm building. Intros also appreciated. Thanks! 🫶
1
3
Text4Shell: A Vulnerability in Java library Apache Commons Text (CVE-2022-42889, Act4Shell) | LunaSec lunasec.io/docs/blog/text4sh… via @LunaSecIO
4
2
CVE-2022-26766: the CoreTrust bug "For years, macOS allowed any root certificate when checking code signatures, making code signing completely useless." // bug discovered by @LinusHenze // writeup by @zhuowei worthdoingbadly.com/coretrus…
Image from raptor (@0xdea)
12
418
70
1,275
We're out at #RMISC22 giving our talk at 9:15am in Room 503
Image from Free Wortley (@freeqaz@infosec.exchange) (@freeqaz)
1
1
6
I grew up in the golden age of SQL injections but GPT3 injections just hit different 🤣
Image from Amjad Masad (@amasad)
Image from Amjad Masad (@amasad)
Image from Amjad Masad (@amasad)
Image from Amjad Masad (@amasad)
56
2,580
259
15,104
Client:"Only test what's listed In scope"....
Image from Tom🌶\(^-^)/🌶 (@TomLawrenceTech)
16
293
21
1,654
Replying to @virtualblackfox
That's the exact idea behind what we're trying to build -- to provide visibility into the dependency chain in order to silence the noise. Package Present != Exploitable Vuln Finding a CVE isn't the hard part. Understanding it + patching is. Less noise = Less alert fatigue
1
1
Load more