GenAI Sec, Evals, AI containment, Mobile AppSec, Android & iOS RE & Crypto(graphy). opinions = own

/usr/local/bin
Joined May 2010
Ivn 🖤🖤🖤 retweeted
Anthropic has filed an S-1 registration statement with the SEC related to its proposed IPO. Read more: anthropic.com/news/s1-sec Legal disclaimer: A registration statement relating to these securities has been filed with the SEC but has not yet become effective. These securities may not be sold, nor may offers to buy be accepted, prior to the time the registration statement becomes effective. This post does not constitute an offer to sell or the solicitation of an offer to buy these securities, nor shall there be any sale of these securities in any state or jurisdiction in which such offer, solicitation or sale would be unlawful prior to registration or qualification under the securities laws of any such state or jurisdiction.
1,021
1,837
1,866
14,849
4,554,349
Ivn 🖤🖤🖤 retweeted
Update: Our PHP exploit is now production-grade. * stock php.ini-production, display_errors=off, normal memory_limit, multi-worker, ASLR, under load * ARM64 + x86-64 targets * MediaWiki, WordPress, phpBB, Laravel * Apache/mod_php and nginx/php-fpm -> root xitter.cf/dguido/status/21131291…
Re: the widely circulated blog claiming the PHP bugs aren't easily exploitable: @trailofbits has a working exploit that gets a shell on an unmodified MediaWiki installation. eliastaylor.com/noexploit/
33
102
19
659
84,377
Ivn 🖤🖤🖤 retweeted
Just in case it wasn’t clear: we popped the iPhone Duo on release day, adding a much needed feature, inspired by the php2shell hacker @lcfr_hax! What else there to hack? Wrong answers only.
77
78
10
991
92,056
Ivn 🖤🖤🖤 retweeted
Today we disclose PHP2Shell - remotely exploitable memory corruptions in PHP WordPress pre-auth RCE: ✅ Drupal pre-auth RCE: ✅ Joomla pre-auth RCE: ✅ Remote memory disclosure of any PHP application: ✅ Read more ⬇️🧵
66
568
94
3,100
469,648
Ivn 🖤🖤🖤 retweeted
Thread 🧵 1/ NEW REPORT: Billions of advertising auctions determine in real time which ads we see on websites and in apps every day. Our latest research shows how the same data fueling this advertising ecosystem is being used to profile millions of users and silently infect targets with zero-click mercenary spyware, a novel attack technique we call "Adfection.” Read the report: citizenlab.ca/research/how-d…
18
351
40
553
81,231
Ivn 🖤🖤🖤 retweeted
At #hexacon - Calif.io demos iOS 27.0.1 untethered jailbreak on iPhone 18 Pro
93
326
81
2,195
535,667
Ivn 🖤🖤🖤 retweeted
“OpenAI in talks to buy Trail of Bits” 👀 theinformation.com/articles/…
19
57
23
439
47,693
Ivn 🖤🖤🖤 retweeted
We discovered a sophisticated recording device that was hidden inside one of our offices. We used our models to understand the device and where it had come from, identifying that a specific employee had planted it a few days earlier. We referred the matter to the FBI, and we’re grateful to the agents and prosecutors who moved quickly to make an arrest. The FBI’s investigation is ongoing and we will continue to support their work. At this time, we have no indications of this individual inappropriately accessing or exfiltrating model weights, source code, or customer data. The employee was terminated. We take protecting our technology, data, and people seriously, and as a matter of national importance. Our security program is designed to protect against a wide range of threat actors, from insider risks to cybercriminals to nation states, and this case is an example of how AI can help address these sophisticated security threats.
4,154
6,080
5,729
77,550
26,109,129
Are you recruiting them *this* young, @steipete ? 😂
1
185
Ivn 🖤🖤🖤 retweeted
Hiring: iOS Reverse Engineer on my team at Corellium. Bring up iPhones/iPads and new iOS releases on our hypervisor, reverse binaries, build virtual peripherals and tools. US remote. You won't be bored, I promise! cellebrite.com/en/about/care…
1
1
5
723
I'd be interested to see how are things going inside companies in the travel industry right now. There are billions of $ funding teams to solve one specific problem: "booking with AI". Finding the cheapest tickets or better options.
235
Ivn 🖤🖤🖤 retweeted
CVE-2026-100754: ChatGPT's code-signing checks on macOS/Windows can be bypassed by (local, unprivileged) attackers, who then inherits the agent's trust: 💉 Inject prompts 👀 Read private chats 🔓 Access TCC-protected files 🍪 Steal cookies/auth tokens/browsing sessions
Security & privacy used to mean fighting malware and hackers ...now, we have to add "AI agents" to that threat model 🤖 😅 Mahalo to the @nytimes for spotlighting some of our recent ChatGPT research & bugs! nytimes.com/2026/09/29/techn…
5
24
1
116
9,887
Ivn 🖤🖤🖤 retweeted
si no sabes en qué gastar tus créditos de opus 5.5 tengo 2 proyectos en abierto, la web de helpmiriam y Polaris el sistema agentico que ayuda con mi enfermedad. Todo necesita mejorar github.com/orgs/BeyondThePro…
10
88
4
216
9,002
Ivn 🖤🖤🖤 retweeted
Hello, Little People Living Inside My Computer, I have made a YouTube account to discuss malware reverse engineering and development. It will primarily target noobs. It will be lighthearted, poorly produced, and spontaneous. youtube.com/@MalwareForFun
127
381
7
5,111
148,812
Ivn 🖤🖤🖤 retweeted
An excellent new resource by @claucece: a practical cryptography course covering PIR in practice, TLS 1.3, post-quantum integration, and TLS attestation. github.com/claucece/Practica…
1
19
138
6,594