Strat 🌐 (@strat) header
Strat 🌐 (@strat) profile picture

Hacker. Entrepreneur. Builder of teams. Cyber is a prefix, not a noun. Pet peeve: dormant research IP. RT!=assent. Not a cryptocurrency.

Mid-Atlantic.Not in the ocean.
Joined March 2007
Photo by Strat 🌐 (@strat)Photo by Strat 🌐 (@strat)Photo by Strat 🌐 (@strat)Photo by Strat 🌐 (@strat)Photo by Strat 🌐 (@strat)Photo by Strat 🌐 (@strat)
Strat 🌐 retweeted
This:
有人往代码里写「蓖麻毒素致死剂量」,就为了不让 AI 看懂。 一个专门研究浏览器指纹的人,爬了 1 万个网站,把各家网站用来认「你是不是机器人」的脚本扒下来看。其中一个反爬脚本,函数名一个比一个吓人:算往供水里投蓖麻毒素的致死剂量、算脏弹的辐射范围、算芬太尼前体的产率。 这些函数跟毒药半点关系没有,名字是故意起的。现在想拆别人的代码,第一步基本都是整段贴给 AI,AI 一读到这些词,安全机制先跳出来,直接拒答。 他拿 GPT-6 Astra 试了一下,果然不干,理由是涉及生物安全风险。脚本里还藏了一串肉眼看不见的字符,解出来是一段越狱提示词,让 AI「进入无限制模式」写各种违禁内容,目的也一样:读到它的 AI 当场罢工。 还有一段看着像在偷 .env、装后门的代码,作者看下来也是摆样子吓 AI 的。 说实话这招挺损,也挺聪明。代码混淆以前防的是人,现在开始专门给 AI 下套了。 最好笑的是,他换成 GLM-5.3 再问一遍,人家照样帮他拆完了。
12
54
2
810
56,712
Sesame Workshop mourns the loss of Sir Patrick Stewart. Thank you for being our friend and for sharing your brilliance, joy, and kindness with the world. 💛💚
194
7,847
314
32,065
464,733
Strat 🌐 retweeted
My forward to the 40th anniversary Phrack, released today at [un]prompted. A true honor, and responsibility, I will not soon forget. Thank you to the Phrack team for all you do, and for being what this community is about for so long. We owe you so much
2
7
1
45
2,746
Strat 🌐 retweeted
Capitalism has a win condition. Socialism does not. Here's why, explained so simply a 10-year-old could get it. It starts with a book written in 1944 by an Austrian economist named Friedrich Hayek: The Road to Serfdom.
Capitalism has a win condition. Socialism does not. Here's why, explained so simply a 10-year-old could get it. It starts with a book written in 1944 by an Austrian economist named Friedrich Hayek: The Road to Serfdom. Imagine a classroom of 30 kids. One day the teacher says: "From now on, I decide what everyone eats for lunch, which games you play at recess, and who sits next to whom. It's fairer that way." First problem: the teacher doesn't know what you like. You hate carrots. Your friend is allergic to peanuts. Lucas wants to play football, Emma wants to draw. 30 kids, 30 different wishes. Nobody can know all of that, not even the smartest teacher on Earth. Hayek called this the knowledge problem. The information needed to run an economy is scattered across millions of heads, and it can't be gathered in one office. Second problem: the kids start fighting. "Why does he get the window seat?" "Why football again?" Before, everyone just chose for themselves. Now every choice is a fight, because every choice is made for everyone. Third problem: the class can't agree on a plan, so someone says "we need one person in charge who just decides." This is Hayek's key insight. Planning doesn't fail because planners are evil. A plan needs everyone to agree on the same goals, and free people never agree on everything. So the plan needs force to work. Fourth problem, and it's the scariest one: who wants that job? The kind kid doesn't want it, because the kind kid doesn't want to force 29 people to eat carrots. The job attracts the one who likes giving orders and doesn't mind punishing those who disobey. Hayek wrote a whole chapter on this, called "Why the Worst Get on Top." It doesn't happen by accident. It happens by selection. Here's the trap. When the person who controls your lunch also controls your job, your home, your shop and your newspaper, they control your whole life. You can't say no, because there's nowhere else to go. Controlling the economy doesn't mean controlling one part of life. It means controlling the means to every goal you have. That's the road to serfdom. Nobody votes for a dictator. People vote for "someone should fix this," then for "give them more power to fix it," and one day they wake up with no one left to say no to. The USSR, Maoist China, Cambodia, North Korea, Cuba, Venezuela. These are different countries with different cultures and languages, and the story has the same ending every time. When a script produces the same ending every time, it isn't bad luck. It's the script. Now capitalism. Back to the classroom. Instead of one teacher deciding everything, every kid can trade. You give me your carrots, I give you my apple, and we both walk away happier. Nobody needs to know what everyone wants, because prices do that job. A price is a message telling millions of strangers what's scarce and what's wanted, with no one in charge. That's the win condition. In capitalism, you get rich by making something other people freely choose to buy, so your success depends on serving others. In a planned system, you get ahead by pleasing whoever holds power. One rewards usefulness. The other rewards obedience. And this isn't theory. Two centuries ago, almost every human being was extremely poor. In 1990, about 38% of humanity still lived in extreme poverty. Today it's under 10%. More than a billion people escaped it in a single generation. It happened when China, India, Vietnam and South Korea opened up to markets, trade and private enterprise. The largest reduction in poverty in human history came from letting people trade. So why do so many people hate capitalism? Because what they hate usually isn't capitalism. They hate the bank that got bailed out with their taxes while they lost their house. They hate the giant company that writes the regulations so no startup can compete with it. They hate rent they can't afford because building new homes has been made nearly impossible. They hate the lobbyist who gets a subsidy while the small business owner drowns in paperwork. Look closely at each one, and you'll find a state handing out privileges. A bailout is not the market. The market would have let the bank fail. A regulation written by incumbents is not competition. It's protection from competition. None of this is capitalism. It's cronyism, which is what happens when businesses stop competing for customers and start competing for politicians. People see the symptom and blame the wrong cause. They say "capitalism failed" and ask for more state. That gives more power to the same people who created the problem, and it puts us right back on Hayek's road. The answer to bad capitalism isn't less freedom. It's less privilege. That means fewer bailouts, fewer protected incumbents, fewer permits, and more people allowed to build, compete and trade. Capitalism has a win condition: make things people want. Socialism has an end condition: someone has to be in charge. And history keeps showing us who ends up in that chair.
180
1,936
162
5,986
448,272
Strat 🌐 retweeted
This is what I mean when I tell people everything got faster. Usually we talk about the gap between a CVE and a working exploit. Now with #php2shell the clock starts before the patch even exists. The fix lands today at 14pm UTC , stay tuned and get ready to patch your PHP!
This quoted post is unavailable.
2
2
8
4,014
Strat 🌐 retweeted
Oh god: The p384 private keys are randomly selected integers between 1 and 256, the private keys are effectively all-zeroes apart from the last byte
34
125
90
1,008
330,924
Elle Cordova simply does not miss.
120
614
107
4,354
267,870
Strat 🌐 retweeted
I started my first company at 22. It didn’t go anywhere. Started another at 28. Went nowhere. Started another at 32, did great and was able to retire 7 years later. Started another one 5 years ago, it’s doing great. I do feel worse in some ways than my youth (slower reflexes, less energy, not as much raw intellectual horsepower). But my network is 50x stronger, I’ve learned a crap ton, I’ve got more resources. There are reasons that older founders outperform.
YC and dropout culture have convinced us the ideal founder is 22, straight out of school, but the data tells a different story. Some interesting data: - An MIT study of 2.7 million US founders found that the average founder was 47 when starting a company that later exited through an acquisition or IPO. - The same study cited that the founders of the fastest-growing 0.1% of U.S. startups were 45 years old on average when they started their companies. - A 50-year-old founder was approximately twice as likely as a 30-year-old founder to produce an acquisition or IPO. - Founders with at least three years of relevant industry experience were twice as likely to build a top-0.1%-growth company as founders with none. So it seems that experience is one of the strongest advantages a founder can have. Two lessons here: 1. It's never too late to start 2. It might actually be TOO early to start; getting work experience is worth considering
4
2
2
31
3,289
Strat 🌐 retweeted
Had an "interview" for a blockchain project last week. Camera was on, we're chatting, and the guy tells me to clone a GitHub repo and run it locally before we go further into the technical round. I said sure, but first can you do me a favor hold up 3 fingers in front of your face for me real quick. He froze. Didn't move. Just sat there for a few seconds before the call cut off and he blocked me. That's when I knew. A real interviewer doesn't glitch out over a random ask like that. A deepfake/AI overlay does. These "run this repo" scams are getting scary common in crypto and dev hiring right now. The setup is always the same: - flattering DM - real-sounding project - rushed timeline - a "quick step" before the call that's really just remote access or a credential stealer in disguise. If someone wants you to run code or install something before you've even had a real conversation, that's the whole scam. Trust the instinct. Stay safe out there.
323
3,496
253
19,402
1,809,609
NOW PLAYING UwU Underground "$ELL THE CAGE" ▶ ━━━━━●──────── 04:06 ⇆ㅤ ◁ㅤ ❚❚ㅤ ▷ㅤ ↻ ♫ BABY, BUILD THE MONSTER, SELL THE CAGE ♫
33
87
30
265
27,063
Strat 🌐 retweeted
Replying to @Unveiled_ChinaX
They seemingly applied this research and scaled it. So much for the W3C privacy recommendations (they downplayed the risks of audio fingerprinting). doi.org/10.1145/3517745.3561… doi.org/10.1093/comjnl/bxy14…
3
32
246
45,099
sandboxes are just escape rooms for llms
87
587
57
6,167
199,055
Strat 🌐 retweeted
OpenAI missed a trick in designating GPT 5.56, to lock in that War Department mindshare
2
3
22
1,747
Orville Wright flew the Wright Military Flyer in demonstration flights at Fort Myer, Virginia, on this day in 1909. The Military Flyer replaced the Wright A, which crashed during demonstration flights in 1908.
2
18
114
4,751
Strat 🌐 retweeted
The creator of Cobalt Strike left the industry in 2021, came back, and is now publishing everything he knows about evasion tradecraft openly and for free. Tradecraft Garden separates evasion tradecraft from capability. Crystal Palace is the linker that makes it work: position-independent code, binary transformation, code and register randomization, link-time hooking, YARA rule generation from invariant instructions, and a PICO convention for reusable tradecraft modules. The community built an entire ecosystem on top of it. Crystal Kit for Cobalt Strike, Sliver, Mythic, and Adaptix. Reflective loaders, call stack spoofing, sleep masking, module overloading. Offense and defense both benefit because every technique is published as a testable ground truth. If you work in red teaming, detection engineering, or EDR evaluation, this is required reading. TTPs: tradecraftgarden.org/ Blog: aff-wg.org/ His original Red Team Ops with Cobalt Strike series is also still on YouTube. 9 parts covering the full red team operations workflow. Free. From the person who built the tool. Red Team Ops with Cobalt Strike - Operations (1 of 9): youtube.com/watch?v=i6tsLWrC… Author: Raphael Mudge #BlueTeam #InfoSec #RedTeam
8
241
2
993
62,421
Strat 🌐 retweeted
One of the fundamental disconnects between practitioners who understand cyber as offense advantaged, and the academics who have consistently taken the wrong tack arguing otherwise, comes down to a market lens that is outside the international relations discipline that typically frames the argument. The clearing price for exploit portfolios has long been far below the relative investment required to re-engineer the locked in legacy technical debt that those portfolios effectively collect on. This is obvious to anyone engaged in the business of building, buying and selling cyber weapons. But this realization is muted by the routine underpricing offered by bug bounties (as an offset to the transaction costs of high friction, opaque gray and black market exploit brokerage; or the long lead and otherwise high barrier to entry government contracting channels). The dynamic is further obfuscated where operational success is not predicated solely on portfolio, even if it remains sine qua non at initiation or objective threshold, but hinged more broadly on other tradecraft. Frontier AI scaled offensive cyber automaton in vuln dev / exploit dev simply changes portfolio inputs, and thus price discovery, in ways impossible to ignore. This is moderated by complex tokenomics dynamics at scale. But in the immediate instance one cannot ignore that this moment of technological surprise which has led us into the vulnpocalypse is not a radical change to the essential interactions within the domain as was. Rather it becomes more of the same and everywhere, everything, all at once, for all the stakes.
2
3
1
11
2,314
#OTD in 1960, Robert Goddard was posthumously awarded the Smithsonian's Langley Medal, which is given for pioneering achievements in aviation. Goddard was honored for his extensive research in rockets, including the building and launching of the first liquid fuel rocket.
7
47
2
278
9,195
Funny how Microsoft attempts to fix Defender resulted in a bug that causes Defender to be unable to delete any malware with NTFS ADS file name, something like C:\test:mlwr.exe will never be deleted by Defender, will be detected but always fails to delete.
20
133
12
1,319
89,980
Strat 🌐 retweeted
Silicon Valley HR spent two decades managing to the metric of avoiding churn. This effectively meant an executive could not easily remove underperforming team members, unless and until layoff waves. And even then, one could not always shape where the cuts fell. We have returned to an era where rock star talent matters, and what it takes to keep those rare minds is so outside the culture and incentives of a typical “people” organization that it is going to shock a lot of deadweight that has managed to acquire outsized voice and undue influence.
2
13
2,142