kamila

kamila

@iczelia.net

programmer, mathematician, 22yo girl. https://iczelia.net/. https://github.com/iczelia

745 followers121 following789 posts

I can't believe that OpenAI has paid off MITRE, CISA, ENISA, NIST, the CVE Board & Foundation, and all 502 CNAs, just to artificially inflate the number of CVEs this year so gullible idiots will think their stochastic parrots can do serious security research.

There will be a point when reviewing a paper, scanning references, rudimentary analysis, positioning of a paper within a network will cost at most $1 in tokens. For ~$500m you can "fix" academia. Name and shame every author clique, every paper with basic mistakes in it, hallucinated citations, etc.

kamila reposted

The details are now public, as of two hours ago. bugzilla.mozilla.org/show_bug.cgi... The secret P-384 keys for these intermediate CAs are all zeros except the last 8 bits. All not-updated software can be MITM'ed now. IOT boxes that can't or don't update are now trivially MITM'able forever.

bugzilla.mozilla.org2083449 - Private key compromise of eMudhra Intermediate CertificatesNEW (nobody) in CA Program - CA Certificate Compliance. Last updated 2026-10-20.
Russ Cox@swtch.com

If you make HTTPS requests or have other TLS clients and care about MITM attacks, you need to update today. If you run Go: go get go@1.27.3 If you run Homebrew: brew update brew install ca-certificates If you run Linux, maybe stay off the internet for now.

kamila reposted

The point of formal methods isn't to convince the theorem prover that your proof is correct; it's to convince *other human beings* that you are solving the right problem and that your solution to that problem is correct If nobody understands what you are proving or why then the rest does not matter

..."The attackers had gained access [...], in August, and quietly deployed their Ebury 1.8.3 payload (an OpenSSH backdoor and credential stealer for Linux)." Grim! There seem to be not only large and brazen networks of people who maliciously control double-digit % of Tor exit nodes.

I have been asked by a colleague from UWayne to ask around: They are looking for someone competent (paid!) willing to work on a corrected data transport library in C, similar to quic-fec, using one of my tools (xpar) as a baseline.

kamila reposted

the ability to play vimgolf is the sign of a gentleman. the ability to play vimgolf well is a sign of a wasted life.

kamila reposted

the bechdel test for an open source community is: two women in positions of formal authority discuss something other than moderating a man's behavior

I wish that train companies in Europe were good at the type of railing that would get me quicker between places, instead of the type that makes me regret going on a trip.

Thoughts on recent NIST post-quantum crypto attacks: Crypto people will bend over backwards instead of adopting Classical McEliece. It has Bernstein's blessing, it has been unbroken for decades, but the copium about long keys is artificially blocking its adoption. It's all bad.

kamila reposted

Amazing paper by Crick et al., in which they postulate that there are 20 common amino acids because the maximum size of a "comma-free code" on triples of ACTG is 20. I get to cite it because it turns out these codes give rise to optimal sampling (minimizer) schemes :D www.pnas.org/doi/10.1073/...

pnas.orgPNASProceedings of the National Academy of Sciences (PNAS), a peer reviewed journal of the National Academy of Sciences (NAS) - an authoritative source of high-impact, original research that broadly spans...

My website is currently caving in under the galore of LLM bots. I receive 250 million junk requests a day, that's about 3000 requests per second. I am about to get very, very upset.

I think that the worst part about LLMs is that people, who otherwise have no idea about the specific field that i work in, start arguing with me like a meat proxy and wasting my time.

I am thrilled to announce that our most recent paper has been rejected from the best journal in the field thanks to low effort, small context window, and completely nonsensical AI slop of Reviewer #2.

kamila reposted

any messaging app that asks me to restart my app to update every single time i use it is a very unserious app

i have been working for a few weeks on vorbis and opus recompression (to pretty big success, -10% on many files at a negligible time investment). i will be able to release it hopefully later this week.

i accidentally found a date today again (was found by a date??)

kamila@iczelia.net

i accidentally found another job today again

kamila reposted

you go to a date for "human connection", i go because i see a new potential investment opportunity i always open by pitching my AI startup and giving her my linkedin. being high worth means finding other high worth individuals. the lock-in never stops. i am currently single and $200K in debt

kamila reposted

they coulda trained opus 5 to learn that typescript 7 is stable now because it simply refuses to believe oxlint with type checking enabled only takes 28ms to run

one-click Denial of Service bug in Firefox ESR (download+open a RSS feed); it keeps opening new tabs ad infinitum, destroying your session and forcing you to `kill -9` the process.

The fact that your computer boots (i.e., you see the login screen after pressing the power button) is nothing but a mere coincidence.