Sam Curry on Bug Bounty Careers, Slack Knowledge Exfil, The Work Lie – Go Well being Professional

SECURITY | AI | MEANING :: Unsupervised Studying is a stream of authentic concepts, story evaluation, tooling, and psychological fashions designed to assist people lead profitable and significant lives in a world filled with AI.

TOC

NOTES

Okay, tons of content material this week—tremendous excited for this episode!

  • Going all-text this time—callback to old-school

  • Upcoming Talking: Snyk’s convention in October, Cyberstorm in Switzerland in October, BlackHat in Rihyad in November

  • The one AI device try to be making an attempt out from the final couple of weeks is CursorAI. Plenty of persons are switching to it from Copilot. The massive function appears to be an editor that understands your full codebase.

MY WORK

My new essay on why layoffs, hiring, the job market, and work normally simply sucks proper now. Certainly one of my high 20 essays ever. READ IT

The brand new approach I clarify AI—and particularly LLMs—to individuals. READ IT

SECURITY

CrowdStrike’s 2024 Menace Searching Report reveals that North Korean operatives, posing as job candidates, have infiltrated over 100 U.S.-based firms in sectors like aerospace, protection, retail, and tech. Not a lot protection of Blue Friday. MORE

State-linked Chinese language entities are utilizing cloud providers from Amazon and its rivals to entry superior U.S. chips and AI capabilities they can not get in any other case. MORE

Cisco has patched a number of vulnerabilities, together with a high-severity bug (CVE-2024-20375) in its Unified Communications Supervisor merchandise. This flaw, reported by the NSA, impacts SIP name processing and could be exploited remotely to trigger a denial-of-service situation. MORE

Is International Software program Operating in Your Surroundings? 

  • Details about executables, scripts, and libraries.

  • Recordsdata which have been accessed, modified, or deleted.

  • All community exercise, together with supply and vacation spot IP addresses, port numbers, customers, and processes.

  • Determine and stop put in software program from speaking with entities in Russia, China, or different risk actors.

Two U.S. lawmakers are urging the Commerce Division to analyze cybersecurity dangers related to TP-Hyperlink routers, citing vulnerabilities and potential information sharing with the Chinese language authorities. MORE

Quarkslab discovered a serious backdoor in RFID playing cards made by Shanghai Fudan Microelectronics, certainly one of China’s high chip producers. This backdoor permits for the immediate cloning of contactless sensible playing cards used globally to open workplace doorways and lodge rooms. MORE

The AI Threat Repository now lists over 700 potential dangers that superior AI techniques may pose, making it essentially the most complete supply for understanding AI-related points. MORE

13 Cybersecurity Instruments. One Platform. Constructed for IT Groups

There are literally thousands of cybersecurity level options. Lots of them are good—however managing greater than a dozen instruments, disparate stories, invoices, trainings, and so forth. is difficult for small IT groups.

Researchers discovered a technique to exfiltrate information from Slack’s AI by utilizing oblique immediate injection. MORE

The U.S. Navy is rolling out Starlink on its warships to offer high-speed, dependable web connections, considerably enhancing operational capabilities and crew morale. MORE

AI / TECH

Anthropic has revealed the system prompts for its newest AI fashions, together with Claude 3 Opus, Claude 3.5 Sonnet, and Claude 3.5 Haiku. MORE

AGIBOT—a Chinese language firm—simply unveiled a fleet of 5 superior humanoid robots to compete instantly with Tesla’s Optimus bot. These fashions, together with the flagship Yuanzheng A2, are designed for duties starting from family chores to industrial operations and can begin transport by the top of 2024. I’ll be ready for an American choice. MORE

I’m anti-Chinese language-imports for each robotaxis and humanoid robots. The market is just too large, China strikes too quick, and we have to give American firms (Elon) time to compete.

I don’t like this take. I don’t like slowing stress from the surface, and if it have been India, or Eire I’d be comfortable with making use of that stress. However not China. They’re too clearly a malicious actor to permit them to dominate these new markets.

Talking of that, Tesla is hiring individuals to coach its Optimus humanoid robotic by carrying movement seize fits and mimicking actions it is going to carry out. The job, listed as “Knowledge Assortment Operator,” pays as much as $48 per hour and entails strolling for over seven hours a day whereas carrying as much as 30 kilos and carrying a VR headset. MORE

Waymo is trying to launch a subscription service known as “Waymo Teen” that may enable youngsters to hail robotaxis solo, with costs starting from $150 to $250 per 30 days for as much as 16 rides. MORE

An AI scientist developed by the College of British Columbia, Oxford, and Sakana AI is creating its personal machine studying experiments and working them autonomously. That is the place most innovation will come from AI. Not simply in implementing duties, however in doing new analysis. I talked about it right here. MORE

Victor Miller, a mayoral candidate in Wyoming’s capital metropolis, has vowed to let his custom-made ChatGPT named Vic (Digital Built-in Citizen) assist run the native authorities if elected. MORE

I’m engaged on tips on how to articulate a political platform for any stage of workplace utilizing Substrate.

You mainly outline precisely what you wish to do, and it branches out with all of the Issues, Methods, KPIs, and so forth., all in a single platform file that folks’s AIs can consider and examine to their very own beliefs and targets.

I feel that is the place management is heading. Clear descriptions of imaginative and prescient, technique, and consequence measurement.

Sean Ammirati, a professor at Carnegie Mellon, seen an enormous up-leveling of progress in his entrepreneurship class this 12 months because of generative AI instruments like ChatGPT, GitHub Copilot, and FlowiseAI. College students used these instruments for advertising and marketing, coding, product growth, and recruiting early clients, leading to enterprise capitalists flocking to the campus. MORE

That is what I’ve been speaking about with AI Augmentation. If you happen to have been competing with a 95/100 individual earlier than, as a result of they went to CMU—properly, now you’re competing with a 130/100 as a result of they went to CMU AND they use AI for every little thing.

  • I learn higher articles due to AI

  • Due to this fact I get higher concepts due to AI

  • Due to this fact I construct higher stuff due to AI

  • And many others.

  • And I do that all quicker than was attainable earlier than

Improve or lose. These are your choices.

GM is reducing over 1,000 software program engineers to streamline its software program and providers group. Streamlining by reducing out 1,000 devs? The way in which I learn that is “Begin from scratch and solely rent A’s any more.” See: all of my different posts about firms solely wanting Killer Cult Members any more. MORE

Meta is utilizing AI to streamline system reliability investigations with a brand new root trigger evaluation system. This method combines heuristic-based retrieval and huge language mannequin (LLM)-based rating, attaining 42% accuracy in figuring out root causes on the investigation’s begin. MORE

AI firms are shifting focus from creating god-like AI to constructing sensible merchandise. Gasp! This isn’t a bubble-pop; it’s simply pure maturity of a factor that got here out 13 minutes in the past. Individuals are nonetheless figuring these items out, and it’s nonetheless day 1 when it comes to AI capabilities. MORE

Canada is slapping a 100% import tariff on China-made electrical automobiles beginning October 1, following related strikes by the US and EU. MORE

Former Google CEO Eric Schmidt predicts speedy developments in AI, with the potential to create important apps like TikTok rivals in minutes throughout the subsequent few years. MORE

Anthropic Claude 3.5 can now create iCalendar information from photographs, and Greg’s Ramblings exhibits how you should utilize this function to generate calendar entries simply by snapping a photograph of a schedule or occasion flyer. MORE

AWS CEO Adam Selipsky predicts that throughout the subsequent 24 months, most builders won’t be coding anymore resulting from AI developments. He emphasizes that the true ability will shift in the direction of innovation and understanding buyer wants quite than writing code. MORE

Chinese language firms have ramped up their imports of chip manufacturing tools, spending practically $26 billion within the first seven months of the 12 months. They should equip 18 new fabs anticipated to begin operations in 2024 and are critically anxious about export controls. MORE

HUMANS

Cisco is shedding 7% of its workforce, which is round 5,900 workers, because it pivots in the direction of AI and cybersecurity. The corporate is investing $1 billion in tech startups like Cohere, Mistral, and Scale, and has partnered with Nvidia to develop AI infrastructure. MORE

McKinsey’s new examine reveals that enterprise leaders are lacking the mark on why workers are quitting. They are saying firms are specializing in transactional perks like compensation and suppleness, however workers are literally in search of that means, belonging, holistic care, and appreciation at work. Couldn’t have been higher timed with this week’s Work essay. MORE

Twenty-four mind samples collected in early 2024 measured on common about 0.5% plastic by weight. MORE

Gallup has launched its 2023 International Feelings report, which measures the world’s emotional temperature by the Optimistic Expertise Index and Damaging Expertise Index. The info comes from surveys carried out in 142 international locations, utilizing a mixture of phone, face-to-face, and a few net surveys, with about 1,000 respondents per nation. MORE

Exceedingly cool analysis and information and visualizations! MORE

Nonsmokers who prevented the solar had a life expectancy just like people who smoke who received essentially the most solar, based on a examine of practically 30,000 Swedish girls over 20 years. The analysis means that avoiding the solar is as dangerous as smoking. That is the kind of factor that wants far more analysis, however rattling. Extra solar for me, regardless. It’s an enormous increase for me within the morning. MORE

Stanford researchers have discovered that blocking the kynurenine pathway within the mind can reverse the metabolic disruptions brought on by Alzheimer’s illness, enhancing cognitive capabilities in mice. I’m beginning to really feel like we’re about to make huge progress on each Alzheimer’s and Most cancers, and it’s making me wish to put money into 2-3 of the highest drug firms. MORE

Utilizing air purifiers in two Helsinki daycare facilities lowered youngsters’ sick days by about 30%, based on preliminary findings from the E3 Pandemic Response examine. The analysis, led by Enni Sanmark from HUS Helsinki College Hospital, goals to see if air purification also can lower down on abdomen illnesses. MORE

College of Missouri scientists have developed a liquid-based answer that removes over 98% of nanoplastics from water. It makes use of pure, water-repelling solvents to soak up plastic particles, which might then be simply separated and eliminated. I count on to see a variety of related merchandise quickly. I really feel like microplastics may be the brand new well being scare. Unsure if that’s justified or not. Can’t await the Huberman episode. MORE

Eli Lilly’s weight reduction drug tirzepatide, present in Zepbound and Mounjaro, lowered the chance of growing Sort 2 diabetes by 94% in overweight or chubby adults with prediabetes, based on a long-term examine. Dayum. 94%. MORE

Apple Podcasts is shedding floor to YouTube and Spotify, with a current examine displaying YouTube now leads in podcast consumption at 31%, adopted by Spotify at 21%, and Apple Podcasts trailing at 12%. MORE

IDEAS

DISCOVERY

ffufai makes use of ffuf and AI to search out extra net hacking targets, by Joseph Thacker. MORE

gofuzz.py recursively appears at JavaScript information and finds endpoints that may be examined. MORE

analyze_interviewer_techniques is a brand new Cloth sample that may seize the ‘je ne se quoi’ of a given interviewer. I’ve been utilizing it on Dwarkesh and Tyler Cowen. MORE

harness is a fast device I put collectively to check the efficacy of 1 immediate vs. one other. It runs each towards an enter after which scores the output utilizing a 3rd, goal immediate that charges how properly they adopted the plot. MORE

State and time are the identical factor — Hillel Wayne explores the idea that state and time are interchangeable. MORE

Don’t power your self to turn out to be a bug bounty hunter, by Sam Curry. MORE

67 years of outdated Radio Shack catalogs have been scanned and are actually obtainable on-line. MORE

mdrss is a Go-based device that converts markdown information to RSS feeds. You possibly can write articles in an area folder, and it robotically codecs them into an RSS-compliant XML file, dealing with publication dates and classes. MORE

No “Hi there”, No “Fast Name”, and No Conferences With out an Agenda — This weblog publish highlights frequent distant work errors like beginning conversations with “Hello” and ready for a response, asking for “fast calls” with out context, and scheduling conferences with out agendas.  MORE

Roger Penrose’s guide “The Emperor’s New Thoughts” explores the connection between the human thoughts and computer systems, arguing that human consciousness can’t be replicated by machines. MORE

A Assortment of Free Public APIs That Are Examined Day by day MORE

RECOMMENDATION OF THE WEEK

However extra than simply studying it, take into consideration what it means if I’m proper. Take into consideration what meaning for you and your profession, but in addition all of the younger individuals you realize and care about.

I didn’t discuss it in that piece, however the answer is the transition to a Human 3.0 mindset, which—on this context—means taking the identical abilities that you simply’re good at and that you simply do for another person, and doing that for your self.

Extra assistance is coming from me on how precisely to do this, however begin occupied with it now.

APHORISM OF THE WEEK

To worry love is to worry life, and people who worry life are already three components useless.

Bertrand Russell

Leave a Comment

x