@bcrypt
Account based inUnited States
About this account
- Account based in
- United States
- Connected via
- United States App Store
Account-level information from X, not a live location or the device used for a specific post.
Pinned Tweet
could not for the life of me figure out how to buy a bus ticket in Milan. it was literally easier to get a shell 😆
yan retweeted
Please don't install - it's trivial to turn Muse into the ultimate backdoor 💀👀
Ya, as an AI assistant built to manage your Mac, Muse needs broad access to your digital life.
But serious 0-day flaw(s) can let local malware/attackers invisibly hijack it.
Let me show you. 🧵
Day 2 of voting on randomly-selected songs on SoundCloud until we collectively find the best one: tracks with 37 plays are outperforming ones with 15k+! azuki.vip/bse/
HELP NEEDED: please vote at azuki.vip/bse/ so we can determine the best song ever uploaded to soundcloud (songs are picked completely at random)
HELP NEEDED: please vote at azuki.vip/bse/ so we can determine the best song ever uploaded to soundcloud (songs are picked completely at random)
Alibaba's AliExpress was caught using users' audio systems to track them.
AliExpress wasn't recording users but instead playing a silent sound and measuring how users' specific devices processed it in order to fingerprint them.
But don't worry because Brave stops this.
truly sad that LLMs could never produce this specific type of trash
if you’ve been on either side of a bug bounty you know the joy in it is gone now. it’s just AI reports coming in, AI patches going out, and decreasing human understanding of either. i wonder what is left of the security industry once the fun clever hacking parts are all outsourced to AI.
after seeing the current state of HackerOne, I decided it was time to sit down and address the elephant in the room
blog.teknogeek.io/posts/what…
The site looks like a coffee shop to humans. To Claude, it serves a fake Cloudflare check.
web_fetch is read-only, so the page builds an alphabetical directory Claude clicks through to spell out your data, one letter at a time.
ayush.digital/blog/the-memor…
Developers from Signal (including its protocol's co-creator) along with Microsoft and Harvard unveil Encrypted Spaces, an open-source codebase for a new generation of private collaboration apps. Think Slack, Discord, Google Docs, all end-to-end encrypted. wired.com/story/signal-alums…
haha this reminds me that at one point during internal testing of Brave's AI agent (Leo), it refused to execute Step 3 on a todo list when Steps 1 and 2 were black text and Step 3 was white text (therefore invisible). but it got tricked into executing it when Steps 1 and 2 were red and blue, i guess because it thought Step 3 was trying to be patriotic instead of deceptive.
Today we launched the community-requested Brave Origin: an optional, paid version of our browser that offers Brave's leading privacy protections and ad blocker without its extra features.
Origin is live now on desktop and Android, and coming soon to iOS: brave.com/origin
in light of the tragic news that a 2-year old died at a licensed SF daycare earlier this month, i made a site to show childcare license violations and complaints in the Bay Area: azuki.vip/childcare/
* the data is public at ccld.dss.ca.gov/carefacility… but i found that site hard to use
* PRs welcome github.com/diracdeltas/child…
* i am aware this does not show small home daycares; working on that
* very grateful to Claude for making this a sunday project instead of a multi-week one