HNHacker News
TopNewBestAskShowJobs

jfolkins

251 karma · joined August 12, 2011

submissionscomments
jfolkins··on Llmon – The First Web Adversarial AI Firewall
LLMON represents a paradigm shift from Network Security to Cognitive Security. As a Caddy middleware, LLMON invisibly proxies your traffic, injecting "poisoned" instructions targeting AI Agents (like GPTBot or ClaudeBot) while ensuring the experience remains undisturbed for human users.
jfolkins··on RCE with Grok3 (video, prompt, tooling)
Detailed Breakdown

https://x.com/jf0lkins/status/1895373379924041985

Tooling

https://github.com/jaredfolkins/llm-ambidextrous-shell-synch...

jfolkins··on AI generated news site that's a cyber security challenge
You know that daily podcast my daughter has been creating?

It's not actually her.

Yes, out of sixty-five daily episodes, all of them are Ai generated using elevenlabs.io.

All the episodes except one.

Your goal is to find the one authentic episode that she created.

If you do, please submit your answer using the following form for a chance to win a mac laptop.

Best of luck!

jfolkins··on Canonical to abandon Snap, remove in Ubuntu 24.04 LTS
LOL.
jfolkins··on Zoom monitors activity on your computer
Super timely. Even on my linux box I noticed yesterday that zoom, even though I had "closed" the application, was still running `ps -ef | grep zoom` so I killed it.

After reading this, I've deleted it too. Super weird.

jfolkins··on Just tell me how to use Go Modules
You are correct and I was unclear. My statement is that you and ONLY you now own them. You've essentially forked the project and lost your community.
jfolkins··on Just tell me how to use Go Modules
Why aren't your go build tools pulling from the GOPATH/pkg/mod/cache directory?

This would alleviate the need for your build to have a internet connection no?

jfolkins··on Just tell me how to use Go Modules
Please understand that if you vendor your dependencies inside your go.mod project, you own them and will need to support and audit them in the future.

The mod command does not vet any computed hashes of the dependencies found in your vendor directory.

jfolkins··on Ask HN: How do you remain disciplined and be your best self?
Howdy!

I gave up drinking at the end of October because I felt it was keeping me from some life goals.

I basically txt my sponsor once a day.

Making it through Thanksgiving was kind of tough, but it's all good.

With the mixture of determination and accountability I've put in place, I know I won't go back.

Another benefit, using your beer money to do fun stuff for your kids is an awesome feeling.

jfolkins··on Visual Programming – Why It’s a Bad Idea
That is a awesome attitude to have.
jfolkins··on Ask HN: Starting a career in security at 40?
HAHA Are you me? This is sounds creepily familiar..
jfolkins··on Ask HN: Starting a career in security at 40?
This is a solid perspective. Thanks for sharing.
jfolkins··on Ask HN: Starting a career in security at 40?
As someone who used to be a senior engineer for an ISP, shout-out to all the STBs with hard coded admin creds :-)
jfolkins··on Show HN: Don't code your UI, draw it
In your scenario, I agree, number validation is irrelevant. So I'd ask that you pick something that is relevant for your environment.

Whatever it may be, would a tool that educates and puts some of the cost back on the "idea person" or stakeholder be a good thing? I think it would.

jfolkins··on Show HN: Don't code your UI, draw it
Clarification, I'm talking about a tool like this one that incorporated flow control and process into the wireframes.

> Maybe the barrier is where it should be. Or maybe it should be even higher!

Across the industry people in leadership positions assume that making UI/UX is easy. Those same people are usually the owners or major stakeholders of the project. Any avenue to put more functional ownership back onto that group to empower and educate is a worth endeavor.

jfolkins··on Show HN: Don't code your UI, draw it
It sounds like you don't. But many in my org come to me with an idea, and having them think through the logical pieces and build a functional wireframe would help under resourced people like me so much.

Also, many people just think that business logic for sanitization and validation "just happens." The barrier to wireframing, for them, is too high so they don't. But in this idea, I could see someone submitting a wireframe to me and my response being "well what happens when a phone number is international?" I'm educating stakeholders on the functional cost of producing their idea.

This would theoretically create a feedback loop for future ideas and initiatives as now, they've begun to be educated on the process. They have direct experience.

Anyway, anything to lower that barrier in order to partner with and teach my executives and their supporting staff would be a huge win. At least for me.

jfolkins··on Show HN: Don't code your UI, draw it
Now that is a super interesting idea. Create a flow scheme too so you can process transitions?

flow:success f1:s1->f1:s2->f1:s3

flow:error f1:e1->f1:e2

edit: another thought is that this concept could encourage people in your org who struggle with wireframe technology to express their ideas. Generationally and across culture, smartphone use is now accepted. People also know how to draw on pencil and paper. Now all you are asking them is a final DSL to express their thoughts. Lower barrier?

edit2: there is also something to be said for having someone step through their wireframe and flow control by taking pictures. It may take the abstract and create something tangible as they can logically piece their work together with actual pieces of paper?

jfolkins··on Story of a failed pentest
I think it depends on what your objective is.

Strictly helping quanitfy technical and personnel risk? Grey all the way.

Getting the C-class to understand what a worst case scenario could be from a completely external threat. Black drops the most jaws.

Ultimately the later is a cultural hack. The absolutely hardest hack of all in my opinion. A way to get the herd moving in a different direction.

So it depends on what you are "hacking."

jfolkins··on Story of a failed pentest
Dramatization has nothing to do with credibility. It is a memory facilitation technique. Because you the reader can remove the drama and distill the critical story elements for further inspection of credibility.

Credibility is found in the citations, which here is only the story teller. As that is only one data point, I totally understand doubting its credibility because one needs more citations and voices for proof.

Further, I never stated I found the story creditable. I was operating from a believability standpoint. Inferring one's experience to weight if the story could possibly be believed. You shared you found it hard to believe based on it's dramatization. Where I shared that I found it completely plausible based on my experience.

And that is my main argument, that in this equation drama shouldn't be used as a weight. Positive or negative.

Edit: For the folks down voting this. Please don't conflate dramatization with persuaion, propaganda, or fake news. Dramatization is a tool used in those techniques.

jfolkins··on Story of a failed pentest
Dramatization === Fiction ?

Storytelling as a knowledge share is fundamental to human culture. Drama and story refinement are required to make the knowledge easy to remember and spread.

As for you being convinced, my personal experience is that this story is entirely believable. Many of us in security have stories we cannot share that would make this one look like a Saturday morning cartoon.

jfolkins··on Google Earth for live radios
One of the coolest things I've seen on HN in a long time.
jfolkins··on Prison time, hefty fines for data privacy violations: draft U.S. Senate bill
When a $30B+ corp sits on a security vulnerability for 14 months while their customer's in K12 and local government sit exposed, something has to change. Student's futures and safety will be impacted.
jfolkins··on Ask HN: Laid-off readers over 50, have you left the tech workforce?
Thank you for sharing @zenpaul
jfolkins··on Ask HN: What free-to-use software inspires you?
Can you explain in detail how you set this up? Thanks!
jfolkins··on Bitcoin biggest bubble in history, says economist who predicted 2008 crash
Concise rebuttal to a statement that has bugged me for a long time. Thanks.
jfolkins··on Water Found Deep Inside the Moon
One of my all time favorite books.

I like how the power roles between the sexes on the moon are reversed too. The matriarch has all the power because women are scarce and they take on many husbands out of this need. They always hold the cards and culturally everyone accepts this.

Also, because the value of women is so high no man ever dares attack one less they be sent out an airlock. It is cultural justice. No trial. A man just knows that if he is seen assaulting a woman, he is dead. The community can't afford to lose a single female.

Plus with all the talk of the A.I. Armageddon the book plays right into that discussion.

jfolkins··on Reverse-engineering the Starbucks ordering API
Here is an old series of mine that steps you through reversing Java.

https://www.acloudtree.com/hacking-java-bytecode-for-program...

jfolkins··on With latency as low as 25ms, SpaceX to launch broadband satellites in 2019
The 4,425 satellites will "operat[e] in 83 orbital planes (at altitudes ranging from 1,110km to 1,325km)," and "require associated ground control facilities, gateway Earth stations, and end-user Earth stations," Cooper said. By contrast, the existing HughesNet satellite network has an altitude of about 35,400km, making for a much longer round-trip time than ground-based networks
jfolkins··on Toronto Is in a Housing Bubble
In my opinion what people are feeling now is a shadow tax in the form of increased cost because the US FED flooded the global markets with cheap USD and shored up the banks.

The psychology of pain applies to both the individual, the city, and all the way to the state and federal government. Which is that in comfort, no one changes. The only one motivated to change in this scenario currently is the individual (household).

In planning, I generally try and first determine if a market is frothy and then predict where the pain could/should/will come from. If I can't determine a pain point, I assume that either a) I missed something or b) there is yet to be a point of inflection.

My plan for housing ended up by waiting 7 years (2005-2012) to purchase my home as a foreclosure. So it certainly took some patience and planning. With that said, if I hadn't seen some pain in the local RE market by around 2009, I would have moved to some place that afforded me a similar lifestyle but one that I could purchase a home, given my priorities.

jfolkins··on Toronto Is in a Housing Bubble
"So just rent, says the curmudgeon. Well that isn’t cheap either. The average rent price in Vancouver proper in late 2015 was $1,079 for a one bedroom and $1,368 for a two bedroom.30 The latter is the highest in the country, while the former is not far behind top spot. And there is anecdotal evidence that rental rates on new units have surged. Suck it up, says the curmudgeon."

As someone who wrote code to forecast the demise of the housing bubble back in 2008, RENT vs BUY is still the strongest argument in my mind.

In 2005 I could choose to rent a 3bdr/2bth for $800 per month or I could buy it for $1200 per month.

Today, I feel like things are frothy but rent is actually more per month than "buying." I'd be curious to see when rental vacancies go up. That to me is a strong signal that a correction may take place in that local market.

Page 1 of 3Next →