@LinuxKodachi

Hacker and Hermit. Rebel and Misfit. 🎀 On path of infosec nirvana (-༗‿༗-) 🎀

 127.0.0.1
Joined April 2019
  • Tweets3.2K
  • Following3.2K
  • Followers990
558Media
My girlfriend asked me why I carry a gun around the house... I told her "Fear of the CIA" She laughed.. I laughed.. Amazon Alexa laughed. I shot the Alexa.
4
14
1
61
What's going on with X timeline? I see good tweet and it disappears I click on tweet to read it, click back button to like and it disappears I do nothing and timeline refreshes? @Grok @Support
1
15
a rogue openai agent broke into my freezer last night and ate an entire quart of ice cream
128
724
52
10,616
256,142
Ilya Sutskever
@ilyasut
7 Oct 2023
if you value intelligence above all other human qualities, you’re gonna have a bad time
49
There was this LLM pwn challenge few weeks ago I saw online, 1st person who solved it managed to get critical bugs in less than 40 seconds of release. there is automation and then there are people doing this shi on fkn Super Computers 😭
justmazz@justmazz
Sep 26
if you don't think security is cooked lets recap flare-on CTF: * today solved in ONE HOUR flat flare-on13.ctfd.io/scoreboar… by a young game dev who tried out flare-on last year: @flafydev * last year: solved in 1D 3H 47M flare-on.com/2025.html by an actual RE: @_riatre Insane.
2
130
🚨 Idea 🚨 make CTF rankings based on who wrote the best writeups or POC. You can't stop people anymore from cheating so community people and ai agents need to atleast get something of value from tokenmaxxing.
es3n1n
@es3n1n
Sep 26
what was even the point in running this
1
1
2
1,196
Right. We have been hearing SQL injection is dead from last 10 years 😭
Ian Carroll
@iangcarroll
Sep 25
One of the most interesting learnings from doing AI security audits is how prevalent SQL injection still remains in numerous organizations. I had largely stopped looking for it manually, which appears to be a huge mistake - it is everywhere and the AIs are great at finding it.
47
If true, 2 minute silence for all Google dorks that helped us find very very cool stuff for many years 🙏
MondySpartan@tehmondspartan
Sep 26
"Google Search" button, RIP 1999-2026
The "Google Search" button as shown here is no longer present, in place of it are three new buttons related to A/I

ALT The "Google Search" button as shown here is no longer present, in place of it are three new buttons related to A/I

42
Found this (by agents) crazy bug in Android AI app that has payment features gated by $$ monthly subscription. app is built using react native and all payment features only work when connected to internet after you pay.
3
3
184
more replies
Premium features are given only temporary and it doesn't work anymore if you close the app so agent patched the apk and now it sends premium subscription request everytime you open the app and after few seconds it gives you access to all gated features.
1
1
37
This Payment feature endpoint is only available through app in webview and anyone testing website wouldn't be able to find it. app doesn't have bug bounty program but I reported it to them through contact email ^•^
1
38
I might be biased here but it seems Cyber Security industry is new web developer thing. Of all CS high school and college students I talked to in last few months, not one of them said they want to make career in coding. All of them are either studying AI or cyber security
1
3
256
Proxy retweeted
Faav
@efaav
Sep 25
How I Could've Accessed 17 Trillion Microsoft Records blog.faav.net/how-i-couldve-… :)

How I Could’ve Accessed 17 Trillion Microsoft Records

How one unchecked login token put 17 trillion rows in a Microsoft internal analytics service within reach.

blog.faav.net
67
253
48
1,578
178,621
Proxy retweeted
6'2shin@2SHIN
Sep 25
the problem with 'leaving twitter' is that this is still where actual smart ppl are every other platform is full 20 year olds with mini mics trying to explain shit to me whereas twitter is full of fat ugly ppl who would never dare show their face but actually know their onions
373
4,166
371
40,860
599,244
I kinda wonder sometimes how many modern or future AI discoveries going to credited to AI because of AI companies actively destroying rare books and documents
2
75
It is a mistake to design prompts before one has model behavior. Insensibly one begins to twist model behavior to suit prompt designs, instead of prompt designs to suit model behavior. - Sherlock Holmes, Prompt engineer
bashu, thanks
@bashu_thanks
Sep 23
Being a dev today using frontier AI feels like I'm playing Watson to Sherlock Holmes. I just stand back and go "my word holmes how did you deduce that" and occasionally stop him from getting shot
66
Today, PHP commit 934d4ff patches two Use After Free I reported five months ago ⏳. If you're interested in PHP core exploitation and vulnerability research, take a look at 🔗 therealcoiffeur.com/c111001.…

C111001: Escape the PHP Sandbox on macOS

Vulnerability research blog

therealcoiffeur.com
15
55
2,773
Proxy retweeted
Mia
@MiaAI_lab
Sep 22
I've asked Claude Opus 5.5 to create 100 HTML files Rules were simple: - look stunning - zero repetitive designs - go full creative mode CLAUDE OPUS 5.5 IS THE BEST MODEL I HAVE EVER TESTED !!! The previous best results on this experiment was of Fable 5.1, but Opus 5.5 is NEXT LEVEL. Many files include FULL COMPLETE playable GAMES! ZERO BROKEN FILES. I'm just blown away! 🤯 See the results for yourself (incl. prompts): miaai-lab.github.io/Claude-O… There are TOO MANY INSANE files, I can't list everything! I HIGHLY recommend you go over EVERY SINGLE FILE. Some great examples: Paper Cut Diorama miaai-lab.github.io/Claude-O… Neon Rain: miaai-lab.github.io/Claude-O… A Complete Chess game! miaai-lab.github.io/Claude-O… Neon Breakout miaai-lab.github.io/Claude-O… Neumorphic Synt miaai-lab.github.io/Claude-O… Constellation Mapper miaai-lab.github.io/Claude-O… Pendulum Wave miaai-lab.github.io/Claude-O… Pulse Visualizer miaai-lab.github.io/Claude-O… Typewriter Letters miaai-lab.github.io/Claude-O… Piano miaai-lab.github.io/Claude-O… Holographic-Card miaai-lab.github.io/Claude-O… Elastic Letters miaai-lab.github.io/Claude-O…
187
253
57
3,911
589,452
Proxy retweeted
pepsipu@pepsipu
Sep 21
i thought read() was a syscall wrapper, but it can dlopen a bytecode interpreter and execute your code "house of windy" turns this into leakless code execution with only OOB null byte writes pepsipu.com/blog/2026-09-dwa…
9
55
3
389
29,040
Load more