Tjaden Hess
@tjade273
Crafty maths and mathy crafts. Cryptography @TrailOfBits
So excited to share one of my white-whale projects: a fully physics-based, holographic foil shader. Each pixel simulates a ray of light diffracting into a rainbow of waves, which add and subtract to create these incredible patterns. Not a single gradient was used here!
✨ New blog post 👀: We have some very fast AI-generated kernels generated with a simple test-time only search. They are performing close to or in some cases even beating the standard expert-optimized production kernels shipped in PyTorch. (1/6) [🔗 link in final post]
Jose Hermosillo is a US citizen who was detained for more than a week by ICE. The government has insisted that he confessed to illegal entry and that's why they held him for a week. He says that he told them all along he was a US citizen and was pressured to sign a document he…
You can now jailbreak your AMD CPU! 🔥We've just released a full microcode toolchain, with source code and tutorials. bughunters.google.com/blog/542484235…
Winning this will be the only important skill in 2030 manifold.markets/MingCat/will-c…
Beautiful bug - windows normalizes unicode command line args, potentially leading to sanitization bypasses. worst.fit/assets/EU-24-T…
Our talk at #BHEU is done! Hope you all enjoyed it. 😉 A detailed blog is on the way, but in the meantime, check out the pre-alpha website worst.fit for early access and the slides! Huge thanks to @BlackHatEvents and my awesome co-presenter @_splitline_! 🐈
reminder that the bcrypt hash function ignores input above a certain length! so if you do bcrypt(username || password) for some reason, a sufficiently long username will make it accept any password. to fix this you can sha256 the input first.
Okta allowing login bypass for any usernames with 52+ characters is insane Official Security Advisory: trust.okta.com/security-advis…
🆕 𝚜𝚊𝚏𝚎𝚑𝚝𝚝𝚙𝚡: a new open-source library from the Gradio team 🆕 This library is a product of our collaboration with @TrailOfBits and allows you to make asynchronous GET requests while avoiding Server Side Request Forgery. A 🧵 on why this is important!
The new Claude 3.5 Sonnet is the first frontier AI model to offer computer use in public beta. While groundbreaking, computer use is still experimental—at times error-prone. We're releasing it early for feedback from developers.