Bear Huddleston 💻🐻
@bearhuddleston.dev
Cybersecurity Software Engineer | Threat Detection & Response Expert
Crafting secure, scalable software tools for TDR.
Love to innovate to fight the bad guys.
Opinions are my own.
Crafting secure, scalable software tools for TDR.
Love to innovate to fight the bad guys.
Opinions are my own.
Reposted by Bear Huddleston 💻🐻
Gemini has a new embedding model out called gemini-embedding-exp-03-07 - I've added support for that in llm-gemini 0.14, notes here simonwillison.net/2025/Mar/7/g...
State-of-the-art text embedding via the Gemini API
Gemini just released their new text embedding model, with the snappy name `gemini-embedding-exp-03-07`. It supports 8,000 input tokens - up from 3,000 - and outputs vectors that are a lot …
simonwillison.net
March 7, 2025 at 11:23 PM
Gemini has a new embedding model out called gemini-embedding-exp-03-07 - I've added support for that in llm-gemini 0.14, notes here simonwillison.net/2025/Mar/7/g...
RAWR! I want to share that I've incorporated #AI #agent into my threat detection tool for #GitHub enhancing its analytical capabilities with an extra layer of analysis. What's exciting is the continuous improvement. I will refine it with personalized feedback loops for reporting suspicious accounts.
March 2, 2025 at 9:11 PM
RAWR! I want to share that I've incorporated #AI #agent into my threat detection tool for #GitHub enhancing its analytical capabilities with an extra layer of analysis. What's exciting is the continuous improvement. I will refine it with personalized feedback loops for reporting suspicious accounts.
Reposted by Bear Huddleston 💻🐻
I upgraded my llm-anthropic plugin to use the new API feature where you can pass URLs to images and PDFs, and in testing it got a great result from Claude 3.7 Sonnet against this 1900 newspaper scan from the Library of Congress
simonwillison.net/2025/Mar/1/l...
simonwillison.net/2025/Mar/1/l...
March 1, 2025 at 1:28 AM
I upgraded my llm-anthropic plugin to use the new API feature where you can pass URLs to images and PDFs, and in testing it got a great result from Claude 3.7 Sonnet against this 1900 newspaper scan from the Library of Congress
simonwillison.net/2025/Mar/1/l...
simonwillison.net/2025/Mar/1/l...
I just got off work and wanted to see what the watchdog has been barking at. It found a really bizarre campaign on #GitHub. Seems benign at the moment but this reminds me of #scammers testing boundaries before sending a mass #phishing campaign in the #email world.
github.com/BearHuddlest...
github.com/BearHuddlest...
February 19, 2025 at 10:11 PM
I just got off work and wanted to see what the watchdog has been barking at. It found a really bizarre campaign on #GitHub. Seems benign at the moment but this reminds me of #scammers testing boundaries before sending a mass #phishing campaign in the #email world.
github.com/BearHuddlest...
github.com/BearHuddlest...
I've been working on my GitHubWatchdog tool some more by reviewing the results. Then a thought came to me. Why don't I make a "Threat Research" AI agent that can analyze my findings, highlight them, and provide ideas for future heuristic methods. This is really exciting for me! Wanted to share.
February 15, 2025 at 10:40 PM
I've been working on my GitHubWatchdog tool some more by reviewing the results. Then a thought came to me. Why don't I make a "Threat Research" AI agent that can analyze my findings, highlight them, and provide ideas for future heuristic methods. This is really exciting for me! Wanted to share.
After observing the watchdog tool barking at suspicious users on #GitHub for a few days, I noticed ALL malicious repository I've discovered has a disk usage of 2 to 3 kilobytes. I'm writing up a new heuristic method to use this to my advantage.
February 15, 2025 at 2:02 AM
After observing the watchdog tool barking at suspicious users on #GitHub for a few days, I noticed ALL malicious repository I've discovered has a disk usage of 2 to 3 kilobytes. I'm writing up a new heuristic method to use this to my advantage.
For fun, I've created a tool, GitHub Watchdog, that'll bark at suspicious users on GitHub. I'm slowly adding more heuristic methods to scan for malicious repos. I'm seeing results. All true positive! Very interesting disk_usage... Possible new behavior pattern?
February 13, 2025 at 9:49 PM
For fun, I've created a tool, GitHub Watchdog, that'll bark at suspicious users on GitHub. I'm slowly adding more heuristic methods to scan for malicious repos. I'm seeing results. All true positive! Very interesting disk_usage... Possible new behavior pattern?
Reposted by Bear Huddleston 💻🐻
February 11, 2025 at 6:52 PM
I've discovered an intriguing approach to overcoming most captcha challenges by utilizing agent chaining models. This innovative technique combines essential components such as a vision model, reasoning model, and web API. It opens the way for advanced web scraping.
February 9, 2025 at 7:15 PM
I've discovered an intriguing approach to overcoming most captcha challenges by utilizing agent chaining models. This innovative technique combines essential components such as a vision model, reasoning model, and web API. It opens the way for advanced web scraping.
@github.com The past three days, I've found over 3000 malicious stargazers staring 120+ repositories hosting malwares on the platform. I would love the mass report these but there is no option. Who can I reach out about this?
February 6, 2025 at 1:53 PM
@github.com The past three days, I've found over 3000 malicious stargazers staring 120+ repositories hosting malwares on the platform. I would love the mass report these but there is no option. Who can I reach out about this?
Reposted by Bear Huddleston 💻🐻
🎉 Go 1.24 Release Candidate 3 is released!
🔐 Security: Includes security fixes for the go tool and the crypto/elliptic package.
🏖 Run it in dev! Run it in prod! File bugs! go.dev/issue/new
🗣 Announcement: groups.google.com/g/golang-ann...
🚚 Download: go.dev/dl/#go1.24rc3
🔐 Security: Includes security fixes for the go tool and the crypto/elliptic package.
🏖 Run it in dev! Run it in prod! File bugs! go.dev/issue/new
🗣 Announcement: groups.google.com/g/golang-ann...
🚚 Download: go.dev/dl/#go1.24rc3
February 5, 2025 at 9:16 PM
🎉 Go 1.24 Release Candidate 3 is released!
🔐 Security: Includes security fixes for the go tool and the crypto/elliptic package.
🏖 Run it in dev! Run it in prod! File bugs! go.dev/issue/new
🗣 Announcement: groups.google.com/g/golang-ann...
🚚 Download: go.dev/dl/#go1.24rc3
🔐 Security: Includes security fixes for the go tool and the crypto/elliptic package.
🏖 Run it in dev! Run it in prod! File bugs! go.dev/issue/new
🗣 Announcement: groups.google.com/g/golang-ann...
🚚 Download: go.dev/dl/#go1.24rc3
I'm building a Go web scraper to detect suspicious website patterns. Thinking about phishing, malware, & scams. Challenges: rate limits, JS execution, & legality. Anyone tackled this before? Thoughts on effectiveness? 🤔 #GoLang #WebScraping #CyberSecurity #Infosec
February 5, 2025 at 8:45 PM
I'm building a Go web scraper to detect suspicious website patterns. Thinking about phishing, malware, & scams. Challenges: rate limits, JS execution, & legality. Anyone tackled this before? Thoughts on effectiveness? 🤔 #GoLang #WebScraping #CyberSecurity #Infosec
I've found various types of suspicious #GitHub accounts thanks to a tool I created. Some new fake #Stargazers, some possibly #hijacked users, others hosting #malware, and even freshly minted #bots.
February 5, 2025 at 12:52 AM
I've found various types of suspicious #GitHub accounts thanks to a tool I created. Some new fake #Stargazers, some possibly #hijacked users, others hosting #malware, and even freshly minted #bots.
I was able to develop a tool to detect the Stargazer Goblins on GitHub. Just reported as many the GitHub API rate limit allowed. #GitHub
February 3, 2025 at 4:29 AM
I was able to develop a tool to detect the Stargazer Goblins on GitHub. Just reported as many the GitHub API rate limit allowed. #GitHub
Just created a new GitHub account. Time to start working on my first public project.
February 2, 2025 at 6:43 PM
Just created a new GitHub account. Time to start working on my first public project.
calling it a night, got pretty far building my personal go web server
February 2, 2025 at 6:23 AM
calling it a night, got pretty far building my personal go web server
After experimenting with DeepSeek-R1 and GPT o3-mini, hands-on experience is now a significant differentiator in AI research. Developing expertise through projects & code helps bridge the gap between theory & practical applications. #AIresearch #SoftwareDevelopment
February 2, 2025 at 12:44 AM
After experimenting with DeepSeek-R1 and GPT o3-mini, hands-on experience is now a significant differentiator in AI research. Developing expertise through projects & code helps bridge the gap between theory & practical applications. #AIresearch #SoftwareDevelopment
I'm excited about this. I can't wait to get my hands on it and create some agentic AI for my personal workshop.
NVIDIA Puts Grace Blackwell on Every Desk and at Every AI Developer’s Fingertips
CES—NVIDIA today unveiled NVIDIA® Project DIGITS, a personal AI supercomputer that provides AI researchers, data scientists and students worldwide with access to the power of the NVIDIA Grace ...
nvidianews.nvidia.com
January 11, 2025 at 9:31 PM
I'm excited about this. I can't wait to get my hands on it and create some agentic AI for my personal workshop.
Just started developing my own web hosting service in Go. Let's see how this project fares throughout 2025.
January 3, 2025 at 9:55 PM
Just started developing my own web hosting service in Go. Let's see how this project fares throughout 2025.
A shot in the dark, anyone hiring a full stack developer?
December 14, 2024 at 5:32 AM
A shot in the dark, anyone hiring a full stack developer?
Reposted by Bear Huddleston 💻🐻
Christmas Play - Gator Days
December 11, 2024 at 6:46 PM
Christmas Play - Gator Days
Go REST API, thinking of creating multiple endpoints to do singular operations. This would allow granular POSTS for the clients to utilize. Hm... I could add params for even more granularity...
December 3, 2024 at 11:02 PM
Go REST API, thinking of creating multiple endpoints to do singular operations. This would allow granular POSTS for the clients to utilize. Hm... I could add params for even more granularity...
No coding today. On PTO.
December 2, 2024 at 11:18 PM
No coding today. On PTO.
Kind of wild that the Llama 3.2 1B and 3B models can support up to 128k content with such small footprint.
December 1, 2024 at 8:29 PM
Kind of wild that the Llama 3.2 1B and 3B models can support up to 128k content with such small footprint.