2026-05-04T01:46:13Z https://yabu.me Linus Gasser https://yabu.me/npub10u98z0s4rhgpgytwj846gpydpx5are6cqpnprdg2wttlz662g27qgr77nw https://social.epfl.ch/system/accounts/avatars/113/978/356/167/091/028/original/56cc3136056846ec.png https://social.epfl.ch/system/accounts/avatars/113/978/356/167/091/028/original/56cc3136056846ec.png https://yabu.me/nevent1qqs8zjrtf2cr6gj0j64uhxwm8w9xh8q8jjk405m80dttxuyv3kdgzfqzypls5uf7z5waq9q3d6g7hfqy35y6n508tqqxvyd4pfed0uttffptckqmvx5 In reply to <a href='/nevent1qqsq22s60svhhs37uja9mhjd4vuafz6m06hfezfm6ejvgphdu4epkcsstxt3v'>nevent1q…xt3v</a><br/>_________________________<br/><br/>Very nice figure - first I was confused, but then it made sense :) 2026-03-05T16:23:54Z https://yabu.me/nevent1qqszxq27tk9eyrfdfzcny8prte4q32590kfz77qv8xjvxyh4lp3fhvqzypls5uf7z5waq9q3d6g7hfqy35y6n508tqqxvyd4pfed0uttffptcm3l2nf In reply to <a href='/nevent1qqs288e8uy853c0almga3whjn20h86d3ctx99rwxlhlyx5l3pq056rc7p77al'>nevent1q…77al</a><br/>_________________________<br/><br/>I just asked Claude what it thinks about our half-project report:<br/><br/>&gt; Please play the role of an evaluator in the Innosuisse grant system. Write what you think when reading the report: are you convinced the project is on a good track? Do you agree that the project should be continued? What are dark spots where you think you would need more information in order to decide on a go/no-go?<br/><br/>It&#39;s answer was very direct and very critical :) But really useful. 2026-01-07T11:59:50Z https://yabu.me/nevent1qqsrjemll86glfc9qlkjhprjwmpvwdtdqk3j2yx44kv4pjqgx784vqczypls5uf7z5waq9q3d6g7hfqy35y6n508tqqxvyd4pfed0uttffptcwzdz8d In reply to <a href='/nevent1qqsp49angqghhqhs6c68nmsehe2jez8wcr6jm3tkvmdh599hxx4fucccx0pqq'>nevent1q…0pqq</a><br/>_________________________<br/><br/>you probably already saw this, but just in case...<br/><br/>Are they aware of your poc for a PKI? 2025-12-19T20:36:49Z https://yabu.me/nevent1qqstvclwd6p7dy5yttculkxrfycwx50fgsaaf8puepc4apg3fm40g9szypls5uf7z5waq9q3d6g7hfqy35y6n508tqqxvyd4pfed0uttffptcrh6n8t In reply to <a href='/nevent1qqsq289c9hcf077wqg992wfg587cupg5amztm92cqhzchc50eeatfmskqtsjn'>nevent1q…tsjn</a><br/>_________________________<br/><br/>I wanted to point out that the &#34;exposure to untrusted content&#34; is sometimes difficult to be separated from the &#34;ability to exfiltrate&#34;.<br/><br/>So if you think &#34;oh, there is no exfiltration possible, I &#39;just&#39; fetch untrusted content&#34;, this fetching can actually already exfiltrate the content! 2025-06-20T07:01:22Z https://yabu.me/nevent1qqsratjv3qamuy6qv4hwuy0uht2xfheavkkcuu6nvte97vdj5gcm9yczypls5uf7z5waq9q3d6g7hfqy35y6n508tqqxvyd4pfed0uttffptcd6eljg In reply to <a href='/nevent1qqsyd07nmk9fhzzasefpyxmw5kzcufecq42gx6l8gqx8utwuflqfzcg7wke2h'>nevent1q…ke2h</a><br/>_________________________<br/><br/>Great article. You could summarize it by saying the &#34;lethal duality&#34;, as &#34;exposure to untrusted content&#34; most often means &#34;ability to externally communicate&#34;. Even if it is only by sending out a GET request to fetch the data. But that is enough to also leak your private data... 2025-06-17T13:22:24Z https://yabu.me/nevent1qqsv848lkuk6c930ekuagg799r7z4wa8d8xjuht9e5g0ccy404fvp8czypls5uf7z5waq9q3d6g7hfqy35y6n508tqqxvyd4pfed0uttffptc6sna7w In reply to <a href='/nevent1qqs90weqwkcqnp5ks69py2dt8hvn00g9gcau7973rrgshsaylemu99sfdjckw'>nevent1q…jckw</a><br/>_________________________<br/><br/>Please prove me wrong :) <br/><br/>I even signed up to Cursor for 1 month but used all tokens in a couple of hours with very disappointing results. My goal was to write a backend/frontend app for a novel idea, but it didn&#39;t even created compilable code... 2025-05-01T14:45:29Z https://yabu.me/nevent1qqs90weqwkcqnp5ks69py2dt8hvn00g9gcau7973rrgshsaylemu99szypls5uf7z5waq9q3d6g7hfqy35y6n508tqqxvyd4pfed0uttffptcs0zjmu In reply to <a href='/nevent1qqsplfyter3yzv3gququ5qp7ex00np96tf78pyl3aej2h5fr3y8dmec2l703k'>nevent1q…703k</a><br/>_________________________<br/><br/>Do you really believe vibe-coding is possible without programming knowledge? I tried most of them in March, and the result was quite depressing: if I didn&#39;t know my way around npm, rust, whatever, I couldn&#39;t have done anything.<br/><br/>Of course it&#39;s very nice to have these things generate some template code. But once the complexity reaches a certain threshold, LLMs seem so lost.<br/><br/>Let&#39;s hope that threshold rises, but currently I cannot fathom using them without programming knowledge. 2025-05-01T14:44:01Z https://yabu.me/nevent1qqsyyhh4hwjy4fkdj735kjc6yv6sfg6fv90puwhnpyr09znhfte22uszypls5uf7z5waq9q3d6g7hfqy35y6n508tqqxvyd4pfed0uttffptcga044e In reply to <a href='/nevent1qqsdzs2v6ad5q2mfk7rglfgll0qkucj6d4kazwy92nsuta8jlp5u3msq7l7jp'>nevent1q…l7jp</a><br/>_________________________<br/><br/>I was wondering how this compares year-to-year. But in fact this _is_ year-to-year, according to the article. In there they also discuss the possible effect of Easter, but then they compare US travellers with international travellers.<br/><br/>Verdict: US travel as before, international travel is down...<br/> <img src="https://social.epfl.ch/system/media_attachments/files/114/301/057/069/348/321/original/3d98c6a6222195e2.png"> <br/> 2025-04-08T07:02:00Z