 Security Engineering & Research / Xoogler / CTF dude. Tweets are my own opinion.

Austin, TX
Joined May 2013
In case anybody wondered, ChatGPT has sorted it out!
2
13
6,330
Can anybody point me to a financial contact at Google?
1
3,013
Anybody out there who knows the secret handshake to get in touch with @SouthwestAir to refund me for flights they cancelled during the storm last month? The email from their CEO is for a handful of loyalty points, I want hard currency.
1
3,019
For @obsdmd users, it looks like a new @Atlassian @Confluence sync plugin just landed on GitHub (not listed in plugins yet) github.com/obsidian-confluen…
2
1,661
I have such a love-hate relationship with @obsdmd but I’m glad that they’re manually curating lists like these.
Gems of the Year 2022 results are out! Can't believe it's the 3rd annual awards already! So many amazing plugins, themes, and people this year to appreciate this year 🥰 forum.obsidian.md/t/gems-of-…
2,107
I had a sensible chuckle at this response
3
2
21
7,036
ebeip90.cc retweeted
We're trying something new this summer -- instead of our traditional summer intern program, we plan to have a paid bounty on various plugins. We'll have a list of ones we'd like to see, but you're welcome to propose your own as well!
1
5
28
5,848
(1/🏁) As much as I want to like @obsdmd, my genuine recommendation is that at this point it’s not well-suited for data gathering and cross-references unless you’re a librarian AND astute in RE’ing a TypeScript application running in Electron. It’s a mediocre editor, and …
1
1
1,123
(2/🏁) It's incredibly difficult to get ANY kind of usable settings for productivity. The "it's really just a Electron renderer" is so hard to get away from. Any competent IDE will open an already-open tab for a file, or open a new one. Obsidian takes the worst route.
802
Did OpenAI just come up with a new definition for a common situation? $ ai 'What is the term used to describe when a person with expertise in topic A speaks about a topic B where they lack expertise?' This is known as subject-matter trespassing.
1
920
CVE-2020-3884 because I POC’ed it while screen-sharing
Drop your most proud pre-auth RCE below, curious to read other peoples write ups/advisories/exploits :->
1
3
1,982
Uptime of OpenAI is 100% as long as you ask the RIGHT question!
1
1
754
Who wants to tell them first?
4
1,030
Whaaaaaaaat. OpenAI + iOS HomeKit integration. youtu.be/THeet9bbphw?t=15
2
776
So it turns out you can use UTF-8 glitching / homoglyphs and ASCII downgrade to ask OpenAI DaVinci questions… And sometimes, it even responds in kind!
1
2
1,033
Close, ChatGPT. Very close!
1
4
28
8,900
ChatGPT understands some fundamental laws of the universe.
1
778
“Finally, the small size of the piece means that it could be stepped on with the same amount of force as a much larger object, making it more painful than it appears.”
1
1
536
It would be neat to see another post that uses BPF JIT via seccomp(2) to emit the correct instructions for e.g. ‘mov cr4, rdi; ret’ to disable SMEP and SMAP. The constant 0f22e7c3 should fit into a single move, and you can spray repeatedly with 1000s of copies of that instr.
If you're interested in Linux kernel exploitation. Read this fantastic 3-parts series by @_lkmidas Part 1: lkmidas.github.io/posts/2021… Part 2: lkmidas.github.io/posts/2021… Part 3: lkmidas.github.io/posts/2021… #Linux #kernel #exploit #infosec #cybersecurity
3
6
1,878