To anyone using a paid LLM other than ChatGPT, or to anyone who has to many graphics card and can run very clever LLMs: I am hacking around on a firewall thingy called Qubes-Snitch, which works similar to OpenSnitch or Little Snitch, but specifically for Qubes. It is not ready yet, and it is not wo…

Free Claude Haiku 4.5 from Duck.ai https://paste.debian.net/downloadh/03c4e999 Grok free https://paste.debian.net/downloadh/726b0991

@KitsuneNoBaka , I don’t know why but I tried to open this from a number of browsers and IPs now and it always gives me “502 Bad Gateway”… paste.debian.net works for me otherwise, its quite weird. Can you plaste it as text? I’m not sure how you created it, here is one I just created Debian Pastezone …

Don’t know - first works as plain text, second only as hidden Haiku-4.5 free (output was truncated) https://paste.debian.net/plainh/7ad84eca Grok free https://paste.debian.net/hidden/12264c05

Second-pass full audit with nearly zero effort from me: ▶ MiniMax M3 High-level repository summary after source of truth revocation, preparing for adversarial analysis, various potential attack vectors listed at the bottom of the response (manually flagged for exploratory audit/review): ▶ MiniMax M3 …

@FranklyFlawless @KitsuneNoBaka thank you very much! There are a good number of false positives / AI not fully understanding the code. My favorite was “rule updates dont flush conntrack” - before resolving a domain or any kind of traffic (tcp/443 to 1.2.3.4) is allowed or rejected, it has never be…

@kuhbs I’ll preface this with the usual warning: while I have been known to perform security infrastructure audits, I am not qualified to perform code audits. As such, what I’m posting in the attached file has not been verified by me or any human being and is just the AI’s output, unchanged. Here’…

Thanks a bunch @Atrate ! :slight_smile: t found a small thing or two, and a bunch of false positives, codebase and README-AUDIT.md is updated.

Okay, I did another full-on audit against both MiniMax M3 and Claude Opus 4.8, here is the consolidated report: ▶ GLM 5.2 This is just cleanup work, so address them first and I can start critically thinking about adversarial analysis on other layers next.

I am going to f-ing ban utf8 in ANY bloody DNS now. Screw this. I feel sorry for CN / RU users at this point, but no. I am not even starting to play this game. Use ascii in domains or get blocked (notify-send to user, log, reject). I have been an admin for 20 years now (in the west) and I have nev…

Well DNS is already a nightmare to deal with, but if I had to evaluate incoming connections, I would also validate digital certificates, timestamps, root certificates, TLS metadata, and other middleman supply chain layers beyond IP addresses and domain names.

Qubes OS Forum

Please let your fancy AIs scan my Qubes-Snitch code to find bugs

User Support General

show post in topic

Home
Categories
Guidelines
Terms of Service
Privacy Policy

Powered by Discourse, best viewed with JavaScript enabled