Top
Best
New

Posted by hazebooth 6 hours ago

Why is this fingerprinting script creating bioweapons?(nullpt.rs)
618 points | 138 commentspage 3
lifeisloving 4 hours ago|
Use a poison fountain. llms probably wont see your javascript.

I host one here

killai.now/poison/about Killai.now/propaganda/about Killai.now/archive

Last one is what it looks like with Miasma

driverdan 2 hours ago|
I tried fetching https://killai.now/archive using Claude chat to see how it would handle it but you've blocked them. If you want to poison you probably shouldn't block.
lifeisloving 1 hour ago||
Well I was primarly targeting those that ignore robots.txt and claude is either being a good boy or cloudflare is enforcing my robots.txt, I need to check that. Thanks for letting me know though.
sparse-Matrix 3 hours ago||
absolutely fascinating.
saidnooneever 4 hours ago||
love this can already see some junior analysts screamin bloody murder and then a senior letting out a big sigh from a knackered expressionless face not much later because all their fancy new AI tools started to vomit all over their SOC when a user touched such an endpoint :').
makdee 2 hours ago||
Nice
nathanpankon 3 hours ago||
Yeah a tad disappointing signals, but always good to read a nullpt.rs

Very cool techniques on the antillm side though!

MisterMunchkin 4 hours ago||
Given the recent hacking based on browser fingerprint, we really need browser developers to shut this shit down. Why are you even able to silently run all of these commands on my computer and report back to the mothership?
Cakez0r 3 minutes ago||
Some browsers do have anti fingerprinting (e.g. Brave)
miki123211 3 hours ago|||
Because these capabilities are dual-use.

You want canvas to work for web games and design / drawing sites. Yet. minuscule differences in how canvas is implemented let other sites fingerprint you. The only way to fix this would be to have each browser be based on the exact same codebase and web engine, and do you really want that?

direwolf20 3 hours ago||
Or disable pixel readback but there are good reasons you can read pixels back
drnick1 1 hour ago||
The configuration of browsers isn't defensive enough, that is the problem. It's also absurd that most popular websites don't work at all nowadays without Javascript.
saidnooneever 4 hours ago|||
you can disable extensions and run noscript. that should take care of most attack vectors that people roll. there are some CVE which dont use it but those are more rare and usually quite 'expensive' as they require an actual exploit rather than just some code.
Terr_ 4 hours ago|||
The problem is that big companies with lots of money demand the situation continue so that they can make more money.
akersten 3 hours ago||
> we really need browser developers to shut this shit down. Why are you even able to silently run all of these commands on my computer

???

This is a very strange understanding of the purpose of a browser you've installed on your computer does. It requests resources from other places and displays & runs those resources on your computer. Where else would they run? Or are you saying you don't actually want your browser to do what you've instructed it to do ("navigate to example.com and run it").

Or you only want to run certain pieces of what's delivered? (You have the power, and should exercise it, to do so, with ad blockers, script blockers, etc.)

perching_aix 2 hours ago||
this guardrail tripping thing is cute, but a simple identifier substitution and comment stripping should defeat it completely. probably a good practice to do that anyhow.

wouldn't be the first time manipulation like this was used, just that earlier the targets were humans (misleading them about functionality or country of origin). except for humans, the overhead induced, even with renaming, was significant. not so much for models, they don't give a fuck.

XorNot 2 hours ago||
Why are bioweapons the only thing tech bros worry about, when some bags of nails, fertilizer and diesel in a sedan will defeat any security measure they care to build for themselves quite reliably?
lanstin 30 minutes ago|
Because if you read a lot of 20th c sci fi, you can easily imagine using the current DNA printing technology and virus databases to design something that would kill in the billions of people (e.g. The White Plague: https://www.goodreads.com/en/book/show/93448.The_White_Plagu... )

And they all seem to have been fans of 20th c sci fi (albeit sometimes with profoundly poor comprehension).

SWZconcept 1 hour ago||
[flagged]
move6729 2 hours ago|
[flagged]
More comments...