DEV Community

Devanshu Biswas profile picture

Devanshu Biswas

404 bio not found

Nine Regexes Catch 80% of Injection Attempts and Exactly 0% Once Four Latin Letters Are Swapped for Cyrillic Ones

Nine Regexes Catch 80% of Injection Attempts and Exactly 0% Once Four Latin Letters Are Swapped for Cyrillic Ones

Comments
3 min read

Want to connect with Devanshu Biswas?

Create an account to connect with Devanshu Biswas. You can also sign in below to proceed if you already have an account.

Already have an account? Sign in
Not One Cost Ceiling in the Sweep Improves Cost Per Delivered Task, and Seven Make It Worse: 3,918 Cents Against 1,046

Not One Cost Ceiling in the Sweep Improves Cost Per Delivered Task, and Seven Make It Worse: 3,918 Cents Against 1,046

Comments
3 min read
A Signed, Id-Bound Approval Token Still Delivers Nine Unauthorised Emails, Because Yes Is Six Bits and It Carries Three

A Signed, Id-Bound Approval Token Still Delivers Nine Unauthorised Emails, Because Yes Is Six Bits and It Carries Three

Comments
3 min read
Same Corpus, Same Edits, Same Bill: Stale Answers Go 9.1 to 57.3 Per Thousand While the Dashboard Improves

Same Corpus, Same Edits, Same Bill: Stale Answers Go 9.1 to 57.3 Per Thousand While the Dashboard Improves

Comments
3 min read
ECE-15 Agrees With One Bin to 1.9e-16 Before Temperature Scaling, Then Reports a 40% Drop Where the Truth Is 16%

ECE-15 Agrees With One Bin to 1.9e-16 Before Temperature Scaling, Then Reports a 40% Drop Where the Truth Is 16%

Comments
3 min read
Squeezing the Scores Moves the Measurable Ceiling From 0.5914 to 0.9480 and the True One Not at All, to 2.2e-16

Squeezing the Scores Moves the Measurable Ceiling From 0.5914 to 0.9480 and the True One Not at All, to 2.2e-16

Comments
3 min read
One Unchanged W/"abc" Returns 304, 412, 200 and 206, Decided by the Field Name, the Method and an Unrelated Neighbour

One Unchanged W/"abc" Returns 304, 412, 200 and 206, Decided by the Field Name, the Method and an Unrelated Neighbour

Comments
3 min read
Deleting One .filter() Buys 30.15 Points for Zero Tokens While the Escape Convention Adds 0.69 Points of Silent Corruption

Deleting One .filter() Buys 30.15 Points for Zero Tokens While the Escape Convention Adds 0.69 Points of Silent Corruption

Comments
3 min read
Base-62 Order Keys Cross the Case Boundary on the Second Key They Mint, so a Case-Insensitive ORDER BY Loses 100% of Boards

Base-62 Order Keys Cross the Case Boundary on the Second Key They Mint, so a Case-Insensitive ORDER BY Loses 100% of Boards

Comments
3 min read
Nim-Values Wrong About 100% of Positions Win 525 of 525 Games; Ones Wrong About Only 3.09% Win 8 of 719

Nim-Values Wrong About 100% of Positions Win 525 of 525 Games; Ones Wrong About Only 3.09% Win 8 of 719

Comments
3 min read
The Only Sentence That Puts Goa Into Arc Rector's Memory Store Is the One Asking For It To Be Forgotten

The Only Sentence That Puts Goa Into Arc Rector's Memory Store Is the One Asking For It To Be Forgotten

Comments
3 min read
A 10-Tick Dip Could Only Fail 600 Requests. Unbudgeted Retries Failed 4,543, and 2,989 After the Cause Had Cleared

A 10-Tick Dip Could Only Fail 600 Requests. Unbudgeted Retries Failed 4,543, and 2,989 After the Cause Had Cleared

Comments
3 min read
Truncation Scores 1.00 on Every Metric a Repurposer Can Compute About Itself, and Keeps 0% of the Conclusion

Truncation Scores 1.00 on Every Metric a Repurposer Can Compute About Itself, and Keeps 0% of the Conclusion

Comments
3 min read
Identical Model, Prompt and Bill: a Strict Tool Contract Ships 18 Wrong Answers Per Thousand, a Permissive One 240

Identical Model, Prompt and Bill: a Strict Tool Contract Ships 18 Wrong Answers Per Thousand, a Permissive One 240

Comments
3 min read
Four of Eight KV-Cache Bugs Are Bit-Identical at Step 1, So the Check Everybody Writes Has Recall Exactly 0.500

Four of Eight KV-Cache Bugs Are Bit-Identical at Step 1, So the Check Everybody Writes Has Recall Exactly 0.500

Comments
3 min read
The Same 95% Interval Covers the Truth 95.3% of the Time in One World and 0.0% in Another, on Byte-Identical Data

The Same 95% Interval Covers the Truth 95.3% of the Time in One World and 0.0% in Another, on Byte-Identical Data

Comments
3 min read
faß.de and FAẞ.DE Resolve to Two Different Servers, Because Case Folding Runs Before the Deviation Rule

faß.de and FAẞ.DE Resolve to Two Different Servers, Because Case Folding Runs Before the Deviation Rule

Comments
3 min read
Deleting Two Thirds of Your Prompt Hits the Same 183 of 14,400 Cases as the Careful Fix, at 74.5 Tokens Against 229.7

Deleting Two Thirds of Your Prompt Hits the Same 183 of 14,400 Cases as the Careful Fix, at 74.5 Tokens Against 229.7

Comments
3 min read
All Seven Fill-Handle Implementations Pass on 100.0% of Clean Progressions; Two of Them Are Wrong on 99.3% of Real Columns

All Seven Fill-Handle Implementations Pass on 100.0% of Clean Progressions; Two of Them Are Wrong on 99.3% of Real Columns

Comments
3 min read
Spreading Evenly Scores Exactly 0 Against a Perfect Blotto Bot and 1 Against One That Merely Watched You

Spreading Evenly Scores Exactly 0 Against a Perfect Blotto Bot and 1 Against One That Merely Watched You

Comments
3 min read
Tic-Tac-Toe Is Still a Draw on 20 of 513 Bankrolls; the Other 493 Are Decided Before a Mark Is Placed

Tic-Tac-Toe Is Still a Draw on 20 of 513 Bankrolls; the Other 493 Are Decided Before a Mark Is Placed

Comments
3 min read
A Naive PDF Extractor Welds 18 Sentences Across the Gutter, and Six Whitespace Cuts Remove All Eighteen

A Naive PDF Extractor Welds 18 Sentences Across the Gutter, and Six Whitespace Cuts Remove All Eighteen

Comments
3 min read
A Payload Hash Plus a Per-Attempt Request ID Is Byte-For-Byte Identical to Having No Idempotency At All

A Payload Hash Plus a Per-Attempt Request ID Is Byte-For-Byte Identical to Having No Idempotency At All

Comments
3 min read
Replay Was Meant to Be the Filter and Filters Nothing: 36 of 36 Mined Skills Verify, Including a Chimera

Replay Was Meant to Be the Filter and Filters Nothing: 36 of 36 Mined Skills Verify, Including a Chimera

Comments
3 min read
The Same Stream Leaks 5.6 Responses Per Thousand to a Reader and 212 to a Machine, From Reading Speed Alone

The Same Stream Leaks 5.6 Responses Per Thousand to a Reader and 212 to a Machine, From Reading Speed Alone

Comments
3 min read
The Exposure Gap Ranks Scheduled Sampling's Winners Above Its Losers at AUC 0.529, Against 0.500 for Chance

The Exposure Gap Ranks Scheduled Sampling's Winners Above Its Losers at AUC 0.529, Against 0.500 for Chance

Comments
3 min read
The Same 95% Interval Covers the Truth 93.6% of the Time and 0.0% of the Time, From Bit-Identical Data

The Same 95% Interval Covers the Truth 93.6% of the Time and 0.0% of the Time, From Bit-Identical Data

Comments
3 min read
The BYxxx-Just-Filters Model Is Exactly Right on All 200 DAILY Rules and Wrong on 276 of 300 YEARLY Ones

The BYxxx-Just-Filters Model Is Exactly Right on All 200 DAILY Rules and Wrong on 276 of 300 YEARLY Ones

Comments
3 min read
Counting the Lines and Tagging the Answers Both Score 74.0% at k=16, at 92.2 Against 55.4 Tokens per Item

Counting the Lines and Tagging the Answers Both Score 74.0% at k=16, at 92.2 Against 55.4 Tokens per Item

Comments
3 min read
Six of Seven Diff Implementations Pass the Only Test Anyone Writes, Including One That Retypes the File at 10.86x

Six of Seven Diff Implementations Pass the Only Test Anyone Writes, Including One That Retypes the File at 10.86x

Comments
3 min read
A Cross-Encoder Reads the Query and the Document Together, Which Your Embedding Model Structurally Cannot

A Cross-Encoder Reads the Query and the Document Together, Which Your Embedding Model Structurally Cannot

Comments
3 min read
The Highest-Scoring Duplicate Pair in My Corpus Is Not the Same Story, So No Threshold Reaches Zero

The Highest-Scoring Duplicate Pair in My Corpus Is Not the Same Story, So No Threshold Reaches Zero

Comments
3 min read
Re-embedding in Traffic Order Beat the Clever Two-Encoder Merge at the Same 30% Budget, 0.803 to 0.673

Re-embedding in Traffic Order Beat the Clever Two-Encoder Merge at the Same 30% Budget, 0.803 to 0.673

Comments
3 min read
Deleting Half the Gradient of a Tied Embedding Is Exactly Correct on 87.5% of Its Rows

Deleting Half the Gradient of a Tied Embedding Is Exactly Correct on 87.5% of Its Rows

Comments
3 min read
Two Datasets With Bit-Identical Drift Scores Differ 436x in What the Drift Actually Cost

Two Datasets With Bit-Identical Drift Scores Differ 436x in What the Drift Actually Cost

Comments
3 min read
Set-Cookie: Secure=1 Is a Cookie Named Secure, and It Travels Over Plain HTTP

Set-Cookie: Secure=1 Is a Cookie Named Secure, and It Travels Over Plain HTTP

Comments
3 min read
Taking the Longest Branch Scores 76.2% Against CoT-Decoding's 75.9%, So the Logprobs Bought Nothing

Taking the Longest Branch Scores 76.2% Against CoT-Decoding's 75.9%, So the Logprobs Bought Nothing

Comments
3 min read
Four of the Six Wrong Calendar Layouts Produce Zero Overlapping Boxes, Which Is the Only Thing Anyone Tests

Four of the Six Wrong Calendar Layouts Produce Zero Overlapping Boxes, Which Is the Only Thing Anyone Tests

Comments
3 min read
The Same Graph Under 720 Numberings: 240 Where My Robber Survives Everything, 240 Where It Loses Everything

The Same Graph Under 720 Numberings: 240 Where My Robber Survives Everything, 240 Where It Loses Everything

Comments
3 min read
Your Vector Database Is Three Decisions, and Only One of Them Changes Your Results

Your Vector Database Is Three Decisions, and Only One of Them Changes Your Results

Comments
2 min read
A Pixel Diff Cannot Converge, So Your Screenshot-to-Code Loop Is Following a Flat Signal

A Pixel Diff Cannot Converge, So Your Screenshot-to-Code Loop Is Following a Flat Signal

Comments
3 min read
A Calibrated 70% Model Beats a Badly Calibrated 80% One in a Cascade, at the Same Cost

A Calibrated 70% Model Beats a Badly Calibrated 80% One in a Cascade, at the Same Cost

Comments
2 min read
With Right Padding a Causal Mask Already Excludes Padding. With Left Padding It Excludes Nothing

With Right Padding a Causal Mask Already Excludes Padding. With Left Padding It Excludes Nothing

Comments
2 min read
Selecting Features Before the Split Gave Me 73.7% Accuracy on Data With No Signal in It

Selecting Features Before the Split Gave Me 73.7% Accuracy on Data With No Signal in It

Comments
2 min read
Adding a Googlebot Block to robots.txt Can Open Your Whole Site to Googlebot

Adding a Googlebot Block to robots.txt Can Open Your Whole Site to Googlebot

Comments
2 min read
Spotlighting Cut Prompt Injection From 62% to 26%. It Did Not Reach Zero, and It Cannot

Spotlighting Cut Prompt Injection From 62% to 26%. It Did Not Reach Zero, and It Cannot

Comments
2 min read
Your Marquee Selection Has Four Bugs and All of Them Keep the Rectangle Inside the Canvas

Your Marquee Selection Has Four Bugs and All of Them Keep the Rectangle Inside the Canvas

Comments
2 min read
Ones Are Wild, So p Is 1/3 and Not 1/6 — and That One Number Decides Whether Your Bot Bluffs

Ones Are Wild, So p Is 1/3 and Not 1/6 — and That One Number Decides Whether Your Bot Bluffs

Comments
3 min read
Your Agent Framework Is a Control-Flow Choice, and Three of the Four Options Are Not Frameworks

Your Agent Framework Is a Control-Flow Choice, and Three of the Four Options Are Not Frameworks

Comments
4 min read
My Coding Agent Cannot Fix the Bug, Notices After Two Tries, and Says So. That Is the Feature

My Coding Agent Cannot Fix the Bug, Notices After Two Tries, and Says So. That Is the Feature

Comments
4 min read
I Built Three Models Before I Could Measure Whether a Chain of Thought Was Doing Anything

I Built Three Models Before I Could Measure Whether a Chain of Thought Was Doing Anything

Comments
3 min read
Under Adam, Your L2 Penalty Is Divided by the Gradient. The Biggest Gradients Get the Least Decay

Under Adam, Your L2 Penalty Is Divided by the Gradient. The Biggest Gradients Get the Least Decay

Comments
3 min read
The Bootstrap Covers the Mean 94.5% of the Time and the Maximum 0%. I Measured Both

The Bootstrap Covers the Mean 94.5% of the Time and the Maximum 0%. I Measured Both

Comments
3 min read
strict-dynamic Discards 'self' Too, and My CSP Evaluator Did Not Know That

strict-dynamic Discards 'self' Too, and My CSP Evaluator Did Not Know That

Comments
3 min read
Contextual Calibration Removed 100% of My Prompt-Ordering Effect. That Was the Correct Answer

Contextual Calibration Removed 100% of My Prompt-Ordering Effect. That Was the Correct Answer

Comments
3 min read
Your Aspect-Locked Image Cropper Has a Bug, and Both of Its Clamps Are Individually Correct

Your Aspect-Locked Image Cropper Has a Bug, and Both of Its Clamps Are Individually Correct

Comments
3 min read
Minimax Does Not Apply to Backgammon. The Node Between You and Your Opponent Is a Die

Minimax Does Not Apply to Backgammon. The Node Between You and Your Opponent Is a Die

Comments
3 min read
Llama Is Not Open Source. The Clause That Decides It Has a Number In It: 700 Million Users

Llama Is Not Open Source. The Clause That Decides It Has a Number In It: 700 Million Users

Comments
5 min read
My Multi-Agent Crew Found 2.11x as Many Facts as One Agent. It Also Cost 4.5x and Was Less Precise

My Multi-Agent Crew Found 2.11x as Many Facts as One Agent. It Also Cost 4.5x and Was Less Precise

Comments
5 min read
I Tried to Reproduce Attention Sinks and Got Nothing. The Null Result Is the Interesting Part

I Tried to Reproduce Attention Sinks and Got Nothing. The Null Result Is the Interesting Part

Comments
3 min read
loading...