@dev0x01

Infrastructure Engineer @ThinkstCanary. @dd@ioc.exchange on Mastodon

devdua.github.io/
Joined December 2012
  • Tweets625
  • Following770
  • Followers253
33Media
Dev Dua retweeted
Andrew Case
@attrcSep 29
I am very confused why Anthropic wrote a blog post advertising for cybersecurity teams to switch to GLM!?!? anthropic.com/research/glm-5…

GLM-5.3 and the spread of advanced cyber capabilities

GLM-5.3 can autonomously build end-to-end cyber exploits, but unlike other frontier models, it was released without meaningful safeguards to limit misuse.

anthropic.com
132
256
93
2,905
363,227
Dev Dua retweeted
D8c
@D8c_auSep 27
Well placed canaries and canarytokens are absolutely one of the best pieces of tech you can use as a defender
haroon meer
@haroonmeerSep 26
We built @ThinkstCanary for this. Some of the best security teams in the world use our Canaries && Canarytokens for this. (You can get pretty far with even just our free tokens at canarytokens.org)
5
3
735
AI/Agentic attacks have made headlines recently, but agents are highly "suggestible", allowing us to easily detect (or derail) them. Our new "Agent Provocateur" deploys in minutes & works. Read more here, including how to ask agents for reverse shells blog.thinkst.com/2026/09/get…
46
78
12
677
3,322,158
We never ambulance-chase, but there's a good reason that smart security teams have suggested honeypots and deception to detect agentic attacks. Dead simple && Works! xitter.cf/ThinkstCanary/status/2…
Thinkst Canary
@ThinkstCanaryAug 26
Last month: 🌍 free canarytokens.org were created in ~75% of the countries around the world; 🤯 a single (@ThinkstCanary) customer deployed >500,000 Canarytokens per hour (embedded in their workflows); 💪 we uncovered at least 1 major breach at an AI cloud infra provider
4
14
1
56
6,154
A writeup of @ThinkstCanary & our other tools 🤯🥲💚 "this is my love letter to a company" "something rare in this industry: it made me feel good about detection again" "gave me back .. signal over noise, and something close to joy in the process." linkedin.com/pulse/little-bi…
1
12
1
21
5,402
Dev Dua retweeted
v v dinesh@vvdinesh1Jul 10
Replying to @Lodha
@Lodha the approach road to LB has deteriorated badly and has become safety hazard for residents and visitors. As a premium township, the basic access infrastructure should shud be smooth . Request to take up a case with @pcmcindiagovin immediate intervention.
11
4
1
8
282
The World Cup kicks off this Thursday. Now, you can support your team _while_ detecting badness on your network! 💪💚⚽️
5
6
907
After not receiving a raise in the four years I’ve worked at BHIS they’ve now decided to reduce my pay by $40k after coming back from maternity leave and moving my role to solely pentesting. So I am looking for a new position effective immediately if anyone has any leads 😇
168
260
35
1,846
294,295
It only took 14 years… but it’s finally here 😊 Meet NexPhone — a smartphone built to run Android, launch Linux (Debian) on demand, and dual-boot Windows 11. My 14-year founder story: nexphone.com/blog/the-tale-o… If you want to support what we’re building, a repost helps a lot.
441
2,090
233
10,248
648,378
You can grab the latest copy of our quarterly security research roundup at thinkst.com/ts¹ For this issue, we selected work from over 1,370 talks & 1,200 blog posts. Available as PDF, ePUB (or audio highlights) __ ¹ As always, completely free
7
14
1,818
We've always been all about the love.. From all of us, to all of you 💚💚💚
4
7
1,043
We are currently experiencing alerting failures on our Azure login certificate Canarytoken. This affects both free and paid Consoles. The problem appears to be due to changes on Azure - but we are still investigating. We will update with more information when we have it.
1
1
7
1,027
Today we released our new (free) AWS Infrastructure Canarytoken. It catches attackers in your AWS account by putting tempting assets in their way and alerting you if they get probed. Extending our old work on fake AWS assets, this makes it even easier to deploy juicy S3 buckets, DynamoDB tables, SSM parameters, SecretsManager secrets, and SQS queues, that attackers will want to browse. We help you design and build a Terraform module that’s  unique to your environment, then you deploy when ready. It's live on canarytokens.org. Check out our blog for more, including how to deploy your first AWS infrastructure Canarytoken. __ ¹ blog.thinkst.com/2025/09/int…
2
13
55
3,127
It's our birthday, so we created a tiny skunk(worksy) game for you to play.. Complete all 7 continents, and we will send you a limited-edition, 10-year t-shirt. Have fun!! (but watch out for the Canaries) canary.tools/10-year
6
14
3
55
8,032
In April this year, @grafana had a security incident due to an insecure GitHub Action. The attackers even tried covering their tracks. How were they discovered? Canarytokens.. Check out their (super transparent) post¹ on how they use our tokens at scale.. __ ¹ link follows
6
44
6
210
21,857
Just published a new blog on hashnode—give it a read! ruhika.hashnode.dev/getting-…
3
4
27
2,087
A decade in, bootstrapped Thinkst Canary reaches $20M in ARR without VC funding | TechCrunch techcrunch.com/2025/05/29/a-…

A decade in, bootstrapped Thinkst Canary reaches $20M in ARR without VC funding | TechCrunch

Reflecting on 10 years since its launch, the honeypot maker explains why the company did not take on any VC funding.

techcrunch.com
1
11
3
35
19,719
When we first built @ThinkstCanary we were proud that it took less than 4 minutes to be useful when bought. Now it takes less than two... Catching attackers is the game the whole family can play...
3
16
78
4,689
This Valentines your Canary Console offers you a walk down memory lane, with our homage to flappy-bird.. It's a bit of a distance from what we do.. but.. it's also totally what we do 💪💚
3
8
1,046
1) This would be funny if it wasn’t kinda annoying; 2) This definitely isn’t us, don’t fall for it; 3) Crypto stands for cryptography 💪💚
This Post is from a suspended account. Learn more
2
6
693
Load more