Aggregator

大模型时代，我估计大模型追在意的还是大模型“幻觉”问题，但是前面（2024.9.17）看到一个研究的结论是："数学上证明，幻觉是不可避免地，也是不可能消除的"。https://arxiv.org/ab

万圣节欧洲不少国家都放假，正好拼一个长周末。代码也不想写了，躁动的心又忍不住去旅游。 本来订了个 NightJet 卧铺，打算美滋滋一觉睡到维也纳。快出发了才收到通知，这几天奥地利境内铁路维护，车次无法保障。你们 DB 的日常，不是延误就是取消。 临时改成飞机成本太高了，价格比捡漏回国的机票还贵。一狠心对自己下毒手订了个 FlixBus。这款铁臀专属跨国大巴可以极低票价穿梭多个国家，体验自然是酸爽。同样坐十个小时不能躺，跨国飞机好歹还可以起来活动一下。 坐到斯洛文尼亚境内，半夜突然被叫醒查证件。突然心里一惊大事不好，护照忘带了。虽然有合法居留，还是被罚款了。警察叫我最好赶紧取消行程掉头回去。 您猜怎么着…Flixbus 的东欧司机也不管我死活，直接把我扔在高速旁边一个鸟不拉屎的加油站，连睡大街的机会都给我剥夺了。这时候还起了晨雾，一股寂静岭的画风。 还好好心的加油站员工会英文，试着帮我找了一下出租车，但今天假日无人接单。然后她们告诉我去装一个 Wizi 应用。瞎猫碰死耗子的心态居然叫到了车，先赶紧折回 Ljubljana 再想办法回去。 忘带证件这是自作孽不可活，不过以后不太敢贪小便宜坐大巴了…

万圣节欧洲不少国家都放假，正好拼一个长周末。代码也不想写了，躁动的心又忍不住去旅游。 本来订了个 NightJet 卧铺，打算美滋滋一觉睡到维也纳。快出发了才收到通知，这几天奥地利境内铁路维护，车次无法保障。你们 DB 的日常，不是延误就是取消。 临时改成飞机成本太高了，价格比捡漏回国的机票还贵。一狠心对自己下毒手订了个 FlixBus。这款铁臀专属跨国大巴可以极低票价穿梭多个国家，体验自然是酸爽。同样坐十个小时不能躺，跨国飞机好歹还可以起来活动一下。 坐到斯洛文尼亚境内，半夜突然被叫醒查证件。突然心里一惊大事不好，护照忘带了。虽然有合法居留，还是被罚款了。警察叫我最好赶紧取消行程掉头回去。 您猜怎么着…Flixbus 的东欧司机也不管我死活，直接把我扔在高速旁边一个鸟不拉屎的加油站，连睡大街的机会都给我剥夺了。这时候还起了晨雾，一股寂静岭的画风。 还好好心的加油站员工会英文，试着帮我找了一下出租车，但今天假日无人接单。然后她们告诉我去装一个 Wizi 应用。瞎猫碰死耗子的心态居然叫到了车，先赶紧折回 Ljubljana 再想办法回去。 忘带证件这是自作孽不可活，不过以后不太敢贪小便宜坐大巴了…

万圣节欧洲不少国家都放假，正好拼一个长周末。代码也不想写了，躁动的心又忍不住去旅游。 本来订了个 NightJet 卧铺，打算美滋滋一觉睡到维也纳。快出发了才收到通知，这几天奥地利境内铁路维护，车次无法保障。你们 DB 的日常，不是延误就是取消。 临时改成飞机成本太高了，价格比捡漏回国的机票还贵。一狠心对自己下毒手订了个 FlixBus。这款铁臀专属跨国大巴可以极低票价穿梭多个国家，体验自然是酸爽。同样坐十个小时不能躺，跨国飞机好歹还可以起来活动一下。 坐到斯洛文尼亚境内，半夜突然被叫醒查证件。突然心里一惊大事不好，护照忘带了。虽然有合法居留，还是被罚款了。警察叫我最好赶紧取消行程掉头回去。 您猜怎么着…Flixbus 的东欧司机也不管我死活，直接把我扔在高速旁边一个鸟不拉屎的加油站，连睡大街的机会都给我剥夺了。这时候还起了晨雾，一股寂静岭的画风。 还好好心的加油站员工会英文，试着帮我找了一下出租车，但今天假日无人接单。然后她们告诉我去装一个 Wizi 应用。瞎猫碰死耗子的心态居然叫到了车，先赶紧折回 Ljubljana 再想办法回去。 忘带证件这是自作孽不可活，不过以后不太敢贪小便宜坐大巴了…

万圣节欧洲不少国家都放假，正好拼一个长周末。代码也不想写了，躁动的心又忍不住去旅游。 本来订了个 NightJet 卧铺，打算美滋滋一觉睡到维也纳。快出发了才收到通知，这几天奥地利境内铁路维护，车次无法保障。你们 DB 的日常，不是延误就是取消。 临时改成飞机成本太高了，价格比捡漏回国的机票还贵。一狠心对自己下毒手订了个 FlixBus。这款铁臀专属跨国大巴可以极低票价穿梭多个国家，体验自然是酸爽。同样坐十个小时不能躺，跨国飞机好歹还可以起来活动一下。 坐到斯洛文尼亚境内，半夜突然被叫醒查证件。突然心里一惊大事不好，护照忘带了。虽然有合法居留，还是被罚款了。警察叫我最好赶紧取消行程掉头回去。 您猜怎么着…Flixbus 的东欧司机也不管我死活，直接把我扔在高速旁边一个鸟不拉屎的加油站，连睡大街的机会都给我剥夺了。这时候还起了晨雾，一股寂静岭的画风。 还好好心的加油站员工会英文，试着帮我找了一下出租车，但今天假日无人接单。然后她们告诉我去装一个 Wizi 应用。瞎猫碰死耗子的心态居然叫到了车，先赶紧折回 Ljubljana 再想办法回去。 忘带证件这是自作孽不可活，不过以后不太敢贪小便宜坐大巴了…

万圣节欧洲不少国家都放假，正好拼一个长周末。代码也不想写了，躁动的心又忍不住去旅游。 本来订了个 NightJet 卧铺，打算美滋滋一觉睡到维也纳。快出发了才收到通知，这几天奥地利境内铁路维护，车次无法保障。你们 DB 的日常，不是延误就是取消。 临时改成飞机成本太高了，价格比捡漏回国的机票还贵。一狠心对自己下毒手订了个 FlixBus。这款铁臀专属跨国大巴可以极低票价穿梭多个国家，体验自然是酸爽。同样坐十个小时不能躺，跨国飞机好歹还可以起来活动一下。 坐到斯洛文尼亚境内，半夜突然被叫醒查证件。突然心里一惊大事不好，护照忘带了。虽然有合法居留，还是被罚款了。警察叫我最好赶紧取消行程掉头回去。 您猜怎么着…Flixbus 的东欧司机也不管我死活，直接把我扔在高速旁边一个鸟不拉屎的加油站，连睡大街的机会都给我剥夺了。这时候还起了晨雾，一股寂静岭的画风。 还好好心的加油站员工会英文，试着帮我找了一下出租车，但今天假日无人接单。然后她们告诉我去装一个 Wizi 应用。瞎猫碰死耗子的心态居然叫到了车，先赶紧折回 Ljubljana 再想办法回去。 忘带证件这是自作孽不可活，不过以后不太敢贪小便宜坐大巴了…

OpenPaX is an open-source kernel patch that mitigates common memory safety errors, re-hardening systems against application-level memory safety attacks using a simple Linux kernel patch. It’s available under the same GPLv2 license terms as the Linux kernel. “We are pleased to be able to bring this to the industry at large and as an integrated offering for our customers with Edera Protect,” said Ariadne Conill, distinguished engineer at Edera and maintainer of Alpine Linux. “Until … More →

The post OpenPaX: Open-source kernel patch that mitigates memory safety errors appeared first on Help Net Security.

A CVSS score 7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Amol Dosanjh of Trend Micro' was reported to the affected vendor on: 2024-11-01, 96 days ago. The vendor is given until 2025-03-01 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

In the October 2024 survey we received responses from 1,131,068,688 sites across 271,7

Although most organizations use emails with built-in security features that filter out suspicious messages, criminals always find a way to bypass these systems. With the development of AI technology, phishing is becoming increasingly difficult to recognize, allowing them to circumvent security measures. While most attempts do not succeed, it only takes one to cause significant damage to a company’s operations. Mick Leach, Field CISO at Abnormal Security, discusses why the automotive industry is the new … More →

The post Threat actors are stepping up their tactics to bypass email protections appeared first on Help Net Security.

A vulnerability, which was classified as problematic, was found in lunary-ai lunary up to 1.4.9. This affects the function extractFirstName of the file /v1/users/send-verification of the component API. The manipulation leads to failure to sanitize special elements into a different plane (special element injection). This vulnerability is uniquely identified as CVE-2024-7472. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in gaizhenbiao ChuanhuChatGPT up to 20240410. This issue affects some unknown processing of the component Setting Handler. The manipulation leads to file inclusion. The identification of this vulnerability is CVE-2024-5823. The attack may be initiated remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability, which was classified as critical, was found in langchain-ai langchainjs up to 0.3.0. Affected is the function GraphCypherQAChain. The manipulation leads to sql injection. This vulnerability is traded as CVE-2024-7042. An attack has to be approached locally. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in gaizhenbiao ChuanhuChatGPT up to 20240628. It has been declared as problematic. This vulnerability affects unknown code of the component Private Chat Handler. The manipulation leads to data access operations outside of expected data manager component. This vulnerability was named CVE-2024-8143. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

UnitedHealth Group, which this month confirmed that the sensitive personal information of more t

The FBI and other agencies accused Iranian cyber actors of targeting the 2024 Summer Olympics, incl

error code: 1106

Here's an overview of the various breaches that have been consolidated into this Have I Been

Here’s a look at the most interesting products from the past month, featuring releases from: Action1, Balbix, BreachLock, Commvault, Dashlane, Data Theorem, Edgio, ExtraHop, Fastly, Frontegg, GitGuardian, IBM, Ivanti, Jumio, Kusari, Legit Security, Metomic, Nametag, Neon, Nucleus Security, Okta, Qualys, Rubrik, SAFE Security, Sectigo, Securiti, Veeam Software, and XM Cyber. Qualys Enterprise TruRisk Management unifies asset inventory and risk factors Qualys launched the Risk Operations Center (ROC) with Enterprise TruRisk Management (ETM). The solution enables … More →

The post Infosec products of the month: October 2024 appeared first on Help Net Security.