(mobile) security researcher, ctf player at @fireshellst and language learner (en | pt | es | jp) tweets are my own

Joined October 2021
Happy Friday, Intent filters are not blockers 🫡
1
41
???????
Não saiam de casa ainda, hoje o malandro encontrou outro malandro
67
Que triste, vamos ter que parar de falar: "Tá com pressa passa por cima"
Turns out the future does have flying cars
1
53
regne retweeted
memory is safe tho
Nothing is safe in Rust. 🐇☢️🎯
31
199
3
6,748
202,555
Pwn2Own Ireland 2026でMaster of Pwnの称号を頂きました。$361,000の賞金と42.5 Master of Pwn pointsをゲットです。チーム全員で獲得した、日本人初の世界トップハッカーの称号です😎 #Pwn2Own #P2OIreland
35
108
12
1,031
37,200
1 bug wonder! With an Confused Deputy (CWE-441) bug Dimitrios Valsamaras (@Ch0pin), Ken Gannon / 伊藤 剣 (@yogehi) using Djini.ai from Mobile Hacking Lab, Tenia Valsamara (@ir3l14) from CENSUS Labs PwN'ed the Samsung Galaxy S26 #Pwn2Own
7
42
6
310
21,244
Impressão minha ou tem muita gente emigrando para o Brazil recentemente?
1
1
153
Another Collision 💥 4 bugs - 3 collisions & 1 zero-day successfully exploit the Samsung Galaxy S26 and Interrupt Labs (@InterruptLabs) takes home $15,750 and 3.25 Master of Pwn points #Pwn2Own
10
113
6,404
This feels so good
1
2
147
Yes, my rating is low, this is a new account tho Let’s see how high I can get after the weekend. I doubt I will pass 800 without really spending time on it
34
regne retweeted
‿⊱⊱༒༻༻༻༻⛧༺༺༺༺༒⊰⊰ ‿︵‧˚⊹ CHAMADA DE ARTIGOS ⊹˚‧︵‿ ‿⊱⊱༒༻༻༻༻⛧༺༺༺༺༒⊰⊰ ༺༻༺༻ DATA FINAL ༺༻༺༻ ༺༻༺༻ 13/11 ༺༻༺༻ ༺༻༺ trm@tramoia.sh ༻༺༻ ‿⊱⊱༒༻༻༻༻⛧༺༺༺༺༒⊰⊰
8
16
2
40
3,669
Here is how OpenAI’s CISO fumbled the situation (in my personal opinion) 🧵 1/X
22
127
42
1,093
314,289
Tip of the day: when you are planning a new app or feature from scratch using AI, ask them to document the SBOM and review the libraries. There is some sort of vies in choosing deps, and I'm finding AI using random alternatives instead of relying on big and stable oss projects
3
140
I still see no reason to do CTFs with agents. There’s no learning, no fun, nothing. just boring.
Replying to @Steph3nSims
I think the bigger problem is the participants have the incorrect incentives. A CTF should be to learn and test skills/knowledge not watch a glorified autocomplete go brrrrr. I also think it’s a good test to show who you would want to help build up, and ignore the AI bros
84
The end of flow state You wake up, excited for the day to start. You have a feature idea you are looking forward to implement. You make your coffee. Sit in front of the laptop. Put on that techno set you love. The house is empty for the next 8 hours. No one can interrupt you. You open your IDE and begin typing. Soon, hours pass in minutes. Everything makes sense. And before you know it, it’s the end of the day. You’re looking at today’s work and are content. You’re energised. Because you created something you enjoy. Fast forward. No more. You start a new day with an open IDE. But, instead of pressing those keyboard buttons, you’re staring at a orange text. “Discombulating” “Wombanizing” Minutes feels like hours. Nothing makes sense. And before you know it, it’s the end of the day. You’re tired. Your brain hurts. It feels like you just finished a ton of meetings. But, at least you shipped 1,000 lines of code, right? You should be proud. But, the only thing you feel is hollow. Did you create? Or did someone else? That magical feeling from years ago, where did it go? Rest in peace, flow state. You were dear to me.
206
111
48
1,760
91,744
Why do AI-generated unit tests always look overengineered?
41
Thanks AI for rooting my device, I was bored by doing this every month to keep it updated
2
173
regne retweeted
Did you know macOS binaries can run on iOS? It needs rewriting architecture information and adjusting library paths. I automated this, including DYLD shared cache library extraction and replacement, allowing many macOS command line tools to run on iOS. github.com/mowisec/macos-to-…
5
63
556
28,517
Working in R&D of security solutions is crazy. I spent years in offsec/appsec running tools and for me "going beyond" has always been understanding the technique or vulnerability, but I still ignoring the whole magic happening under the hood, because I didn't grasp the massive abstraction in SAST tools. After ~6 months working full time in building and improving such solutions I've been exposed to computing concepts I likely would have only encountered in a university degree or at a Big Tech company: Graphs in CFG, Semantic Analysis with AST, (de)compiler concepts, taint analysis, and so on. Crazy how much you learn by exposure
9
400