Vulnerability Researcher and Exploit Developer. Former CTO and Director of Research @Crowdfense, ex-@XI_Research.
ntoskrnl.exe
Joined November 2013
- Tweets1.8K
- Following1.9K
- Followers5.2K
- Likes3.2K
Looks like even though I just finished setting up my local model pipeline, there's always something new to test. huggingface.co/deepseek-ai/D…
I don't understand the hype/excitement around Nemotron 3.5, when Qwen3.8 Flash Next beats it on all the benchmarks...
While reverse engineering down to 1:1 of the original code has always been possible (despite taking skills and a lot of time), I believe the current advancement with AI will push more and more vendors to ship heavily obfuscated and DRM protected code
Paolo Stagno (VoidSec) retweeted
How to recognize the implants you can find on a Ledger Nano X today?
Learn about the Ledger Nano X display test pads, which one is the most important to watch for, and what today's known implants look like.
youtube.com/watch?v=A-R7Sm0E…
That's crazy
This looks like this could be exactly what I'm investigating. Anyone affected, please contact me or open your ledger and send me pictures so we can confirm if there's a bug in there (pictures: ledger board on top, spy implant below).
xitter.cf/Ledger_Support/status/…
Amazing how offensive work "is for organizations only; individual researchers are not eligible."
Local AI is the way to go. Not going to renew @AnthropicAI.
We’re expanding our Cyber Verification Program to give security professionals broader access to our most capable models.
Through this program, verified security professionals can access Claude Mythos 5.1, Opus 5.5, and Sonnet 5.5 with safeguards designed for defensive work.
We’re also opening up new tiers to allow for authorized offensive work, like penetration testing and red-teaming.
anthropic.com/news/cyber-ver…
So NVIDIA announces 64GB DGX Spark configuration at the original price of the 128GB ones; makes perfect sense to me blogs.nvidia.com/blog/local-…
Let me reframe it correctly: 5 months ago they told us about Mythos and how it was too dangerous for the public. Now that they've built fear around their own model, they are now nudging governments to step in and kill open-weight competitors. anthropic.com/research/glm-5…
Looks like 50% less usage on OpenAI's $200 plan starting tomorrow. Better run deepseek locally or via open router then...
Can we please stop normalizing AI labs hacking into whatever random companies/product they want without any accountability? Otherwise it should be free for all, so I can claim my "agent" hacked into XYZ because I wanted unlimited drinks
I wonder what happened to spook them into agreeing. Whatever it was, it must have been pretty bad. Open-source weights have never been this important.
While we can agree that safeguards are important, it's clear that's data it's not private until you run on your local models
anthropic.com/threat-intelli…
