← Feed

Posts

• View post

  "And it brings an added twist: The contention that Hugging Face, an American company, was able to repel the attack by turning to an open-weights model from China offers a counterargument to some U.S. officials, as well as executives at OpenAI and Anthropic, who support restricting access to Chinese models." As a researcher, this is the part that actually bothered me. https://www.wsj.com/tech/ai/how-the-futuristic-hack-by-rogue-openai-models-unfolded-1657bcea?st=dL4iH6 #ai #openai #h...

• View post

  Has anyone ever refused a bug bounty payment? Curious…. I mean, if the only way to report a bug to some company is via a bug bounty program, is it possible to say “no thanks” on the payout? Or have them donate it to the #eff? I’d be interested in hearing about any such thing happening. #infosec #security #bugbounty

• View post

  From last April, I somehow missed this so maybe others did too. Regardless, it's fucked up. https://futurism.com/artificial-intelligence/ice-facial-surveillance-glasses #privacy #meta #security

• View post

  You know that nerd thing where there's a joke amongst techies and one of them buys the domain for the joke? Imagine simply keeping that domain and actually using it for something. Behold! https://www.markloveless.net/blog/2026/04/24/the-tale-of-handjob-alley #FunFriday #infosec #HackerLife #humor

• View post

  Copied in on a lively text convo with left and right. Was asked my opinion on the whole Trump firing squad thing. I think I managed to piss off my left friends when I said "I think out of some of the states doing capital punishment, don't we have some that still do firing squad?" One of the right people said something like "so the old hippie agrees with us" and I said "Well I thought you guys were pro life. Are abortions being legal his next m...

• View post

  Interesting. Using Agentic AI to avoid EDR detection while functioning as a malicious implant. Fascinating read since this is literally and figuratively hacking the system. https://www.beyondtrust.com/blog/entry/claude-control-agentic-c2-computer-use-agent #infosec #security #ai

• View post

  @joshbressers @jerry I take a step further, repost the LLM’s code in a separate chat, and say “I wrote this code but strongly suspect it is insecure, please show me the flaws and give me a diff to fix things.”

• View post

  I know there is a lot of hype and panic surrounding #anthropic and #mythos but I think the thing I am looking forward to and what no one seems to focus on is that 1) the flaws in code are still there Mythos or not, and 2) imagine running this as a part of a CI pipeline to look at every bit of code particularly during a "build" and "test" stage. That second part is what I am really looking forward to. #security #infosec #ai

• View post

  I have a good friend and we can say virtually anything to each other and not be offended - even when trying to offend for laughs. Everyone should have a friend like that. I recently replied to her text (which I will NOT reveal), and I said "Yes! As long as I am not within 500ft of a school." Like I said, everyone needs that kind of a friend.

• View post

  Oh come on! Put in some effort. If you're going to scam, take your time and scam well. And make sure you fill out all of the fields. #infosec #security #docusign #scam #hacking #hacker

• View post

  A sign of the times.

• View post

  Karma for vibe coders comes from vibe bug hunters and vibe PRs. Who wins? Us hackers do. It's raining shells! #ai #vibecoding #Hacker #infosec