@blastbots

run a blog @nullpt_rs // https://xitter.cf/t.co/mRbWD4MvoA

 INACTIVE ACCOUNT (or is it?)
nullpt.rs
Joined April 2018
  • Tweets6.6K
  • Following952
  • Followers5.8K
1.2KMedia
veritas retweeted
shubs
@infosec_auSep 26
one of my engineers reached out to me about how they struggled to find satisfaction in their work in the age of AI. I asked them if I could publish our brief exchange, and they agreed. I know people are feeling similarly, so maybe they can relate. shubs.io/do-we-still-enjoy-s…

do we still enjoy software engineering in the age of AI?

A few weeks ago, one of the software engineers I manage sent me a message about how they have been struggling to find satisfaction in their work ever since AI has eroded much of the creativity and...

shubs.io
12
81
5
434
41,608
goto? considered harmful
International Cyber Digest
@IntCyberDigestSep 14
‼️ Google Search is now hiding where its results lead. Links point to google[.]com/goto?, followed by an opaque string only Google can resolve. You can no longer inspect a destination before clicking it, or copy the address out of the page. Every click now travels through Google first.
9
63
3
1,637
68,601
veritas retweeted
Sam Curry
@samwcyoAug 18
For anyone using LLMs to do security research, bug bounty, red teaming, etc, we made a Discord to discuss/collaborate: mistakes.io/discord/

AI Vulnerability Research Discord

A Discord for people using LLMs for security research, bug bounty, red teaming, automated scanning, and related work.

mistakes.io
7
54
2
478
37,408
veritas retweeted
zeb
@zebassemblyMar 8
My entire career can be traced back to my Mom buying me Minecraft for my 12th birthday
Gregor Zunic
@gregpr07Mar 8
Minecraft was the greatest CS education ever made. And nobody planned it that way. At 12 I was obsessed. Wanted my own servers. So I learned Bukkit, Java plugins, basic networking, Linux deployment. Built worlds that only exist in my mind but still feel completely real. I broke wifi routers and fixed them. Broke Windows configs and fixed them. Tinkering, breaking stuff, and fixing it later is how we learn stuff best when we are kids. What is the Minecraft for the new generation?
21
89
11
1,834
83,930
veritas retweeted
ud2 ⛧@0xud2Jan 29
Top 20 worldwide with social-engineering and a cheat that's still undetected. by @mfd and @vmfunc link down below.
6
18
5
177
41,173
veritas retweeted
celeste
@vmfuncJan 18
now the whole gang is making their own hytale hacked client
veritas@blastbotsJan 15
did i make the first hytale hacked client?
11
4
467
29,771
veritas retweeted
veritas@blastbotsJan 15
did i make the first hytale hacked client?
61
37
9
1,657
284,725
veritas retweeted
Antoine Vastel
@xopek59Jan 7
I just published a post on how I like to think about fingerprinting in fraud detection 👇 Not as a single device ID, but as engineered representations that capture patterns across different dimensions, e.g. hardware, behavior, and email. blog.castle.io/fingerprints-… 🤖

Fingerprints beyond device IDs: engineered representations for fraud detection

In fraud and bot detection, people usually think of fingerprinting as the classic browser or device fingerprint. This comes from techniques that use JavaScript and HTTP signals to recognize a device...

blog.castle.io
1
6
1,559
veritas retweeted
michael@fromwpm15 Oct 2025
now with variable angled feet
1
4
1,675
veritas retweeted
xyzeva@xyz3va9 Oct 2025
hey @AviSchiffmann, why is friend.com's "encryption" really just plaintext? a thread
25
30
17
1,212
124,821
Replying to @blastbots
nice work! last year i also collected a gallery of canvases used by fingerprinting scripts: kitchen.floo.rw.ax/museum/po…
2
4
24
2,823
veritas retweeted
veritas@blastbots6 Oct 2025
i'm building a web browser for reverse engineers! * identify calls to common fingerprinting APIs * decode/decrypt known data collector payloads * override / hook things without leaving a trace * detect obfuscated scripts & deobfuscate + more
40
49
5
611
132,896
I'm Building a Browser for Reverse Engineers by @blastbots nullpt.rs/reverse-engineerin…
5
42
8,086
veritas retweeted
Sam Curry
@samwcyo9 Jul 2025
When applying for a job at McDonald's, over 90% of franchises use "Olivia," an AI-powered chatbot. We (@iangcarroll and I) discovered a vulnerability that could allow an attacker to access the over 64 million chat records using the password "123456". ian.sh/mcdonalds

Would you like an IDOR with that? Leaking 64 million McDonald’s job applications

When applying for a job at McDonald's, over 90% of franchises use "Olivia," an AI-powered chatbot. We discovered a vulnerability that could allow an attacker to access more than 64 million job...

ian.sh
18
116
12
468
42,538
veritas retweeted
shubs
@infosec_au8 Jul 2025
Whenever I audit C# code, I look for benign file operations such as File.Exists(), especially if there's a preceding Path.Combine(). Read about how we leaked NTLM hashes pre-authentication in DotNetNuke (CVE-2025-52488) due to a perfect storm of issues. slcyber.io/assetnote-securit…
3
68
1
256
18,798
It’s Content Independence Day: Cloudflare, along with a majority of the world's leading publishers and AI companies, is changing the default to block AI crawlers unless they pay creators for their content. cfl.re/3TjAjeY

Content Independence Day: no AI crawl without compensation!

It’s Content Independence Day: Cloudflare, along with a majority of the world's leading publishers and AI companies, is changing the default to block AI crawlers unless they pay creators for content.

blog.cloudflare.com
20
93
42
489
121,566
Breaking WebAuthn, FIDO2, and Forging Passkeys by @vmfunc nullpt.rs/forging-passkeys
3
19
3
74
22,985
veritas retweeted
shubs
@infosec_au5 Jun 2025
IP whitelisting is fundamentally broken. At @assetnote, we've successfully bypassed network controls by routing traffic through a specific location (cloud provider, geo-location). Today, we're releasing Newtowner, to help test for this issue: github.com/assetnote/newtown…

GitHub - assetnote/newtowner: Abuse trust-boundaries to bypass firewalls and network controls

Abuse trust-boundaries to bypass firewalls and network controls - assetnote/newtowner

github.com
15
262
7
988
59,142
veritas retweeted
jro@junr0n29 Mar 2025
Some IDA MCP servers can be tricked into executing arbitrary code directly from the malware sample
15
88
13
513
85,598
veritas retweeted
shubs
@infosec_au24 Mar 2025
We recently looked deeper at the authentication bypass vulnerability in Next.js (CVE-2025-29927) and discovered some intelligent and comprehensive ways to check for the vulnerability. Read more in our blog post: slcyber.io/assetnote-securit…
9
119
3
405
38,941
Load more