ColdwaterQ (@[email protected])

My friends said I was crazy for taking extra math classes for fun ... they were right ... until now

Made a small pdf, with one page repeated a ton of times to test resource exhaustion against pdf parsers. It's not fancy, but I couldn't find something that did it already, so I quickly made something that did. Any other cool PDF parser attacks? gist.github.com/coldwaterq/ff0…

@AmazonHelp Luckily nothing was damaged this time. All outdoor things that were fine wet. So that contact us link doesn't provide a way to contact anyone because I don't have a return to make?

@ColdwaterQ Thank you for those details. We're very sorry if anything was damaged; and can be replaced or refunded here: amzn.to/NAReturns. We'd like to take a closer look into this with you in the meantime here: amzn.to/NAContactUs. -Rose

@amazon there doesn't appear to be a way to report this since everything has been water proof so far. Your driver keeps leaving deliveries in the water on top of a barrel because they don't have time to walk to the front door. Can you fix whatever unrealistic metrics they try for

@charles_bickel @Haxo1ot1 This is what I do and when I stopped treating that as a requirement and instead did something mindless some nights, I got back into enjoying the learning which is what brought me into security in the first place.

@Haxo1ot1 I tend to get on later after everyone is in bed as well. Been wearing me down over time though. Also, I really like your moniker

Infosec folks with young kids... How do you keep up in the technical realm? I can barely find time to break away and study. If I ever do get some time to myself, I'm exhausted and just want to veg.

@AmazonHelp Above the tracking number on mobile it shows "Delivery by Amazon" right next to this image.

@ColdwaterQ We're sorry to hear about the issue you're experiencing. To clarify, who was the carrier assigned to the order? You can check this here: amzn.to/NAYourOrders. -Michael

Not sure if I'll use Mastadon any more than I've used twitter, but @coldwaterq" target="_blank" rel="nofollow noopener">defcon.social/@coldwaterq

@thedarktangent @defcon Yep that seemed to be it, went through twitter.com/search?q=defco… and found a link that still worked. Thanks

@thedarktangent @defcon Just double checked in my browser, it 302s to defcon.social, probably just all used up before I could click it. 🤷

@narsilou Bonus points, it's not stupidly insecure like torch.load, so thank you

Just found a way to speed up loading times on GPU to be faster than `torch.load`. On the big `bloom-176B` model, load times went from 45s to 18s. Caution: it's very bleedy edge, but should speedup most load times on GPU. github.com/huggingface/sa…

@commanderwiggy @bearypink_ Deep down all AI is, is an application of calculus to identify complex patterns. So why is this math to complex to be considered art. Photoshop uses math to draw a circle so why couldn't I say I did it myself when using AI. The humans commit plagiarism, not the tool they use.

@ColdwaterQ @bearypink_ Mainly the second one. Something like what you're doing is just fine. (As long as you're not trying to submit it anywhere and pass it off as art you did yourself.)

Stop submitting AI art to the critical role gallery they do not approve of it the pieces end up getting removed and all you’re doing is making a hard time for the person putting the gallery together

Defcon youtube videos seem to be mostly live. This is the talk I presented, if anyone has any questions feel free to hit me up on here. youtu.be/lECEXFtVjig

@LucSGeorges I hadn't, thanks for the ping and for adding those.

@ColdwaterQ don't know if you've seen this tweet, I've added other file extensions to the scanner !

We now scan all types of pickles on the hub 🥒 This was a joint effort with @MatthieuMaitre1 from @Microsoft, our scanner uses picklescan==0.0.3 ! github.com/mmaitre314/pic…

@LitMoose And that's a difference between red teaming and pentesting. Pentests are scoped engagements. Red team ops are typically scoped to the company, maybe the org, and have a group of decision makers to make go/no go calls.

@0xTib3rius Irl, far to few web devs know what the same origin policy is, so cors is far more of a trigger than a favorite. Yeah it's an easy button, but that just means more time reporting instead of finding a fun exploit.

What is a web app penetration tester's favorite beer? CORS. ... I'll see myself out.

@Chelsea_Fagan Lol, meteor should have been metro. But if there is a meteor shower get outside to see it.

@Chelsea_Fagan If your outside a major meteor area. Grab a blanket, go outside, lay in the grass if you got it, and stare at the stars. Far more interesting sky than during the day, and you don't have to wait until midnight on clear winter nights.

it's officially october which means getting dark at 4:30 season is about to have its boot on our neck. please give me your tips for not breaking down mentally that don't involve those stupid sun lamps