kzn.eth - (@overflow_kaizen) header
kzn.eth - (@overflow_kaizen) profile picture

If I have helped you, go out and help others.

/usr/sbin/kaizen
Joined May 2021
Photo by kzn.eth - (@overflow_kaizen)Photo by kzn.eth - (@overflow_kaizen)Photo by kzn.eth - (@overflow_kaizen)Photo by kzn.eth - (@overflow_kaizen)Photo by kzn.eth - (@overflow_kaizen)Photo by kzn.eth - (@overflow_kaizen)Photo by kzn.eth - (@overflow_kaizen)Photo by kzn.eth - (@overflow_kaizen)Photo by kzn.eth - (@overflow_kaizen)Photo by kzn.eth - (@overflow_kaizen)
Alhamdulillah for the 💵 Duit raya 😝
submitted another bug last week at google. Lets wait and see.
6
5
1
100
52,630
You know things are getting serious when MyCERT rises from the dead to start issuing updates again. Their last post was in 2019. Let that sink in.
41
1
114
3,601
kzn.eth - retweeted
Early bird tickets are now available lnkd.in/p/e6V5--Nm
5
1
4
393
kzn.eth - retweeted
终于破案了……之前我就一直纳闷,市面上哪来那么多便宜的 Pixel 和三星定制号。 刚才看到 有人在GitHub 直接把做号源码给公开了,谷歌这波羊毛简直离谱。 根本不需要真机,就是把: 12个月基础 + 三星送的6个月 + Pixel送的6个月 三层羊毛硬塞进同一个号,直接叠满 2 年的 Google AI Pro…… 号商的锅直接被端了。 github.com/worldonlyu/Google…
9
35
1
383
40,893
kzn.eth - retweeted
Man in Malaysia was fleeing police — but STOPPED to pay the toll fee The cops didn't pay
48
412
43
3,675
232,242
kzn.eth - retweeted
> Railway gets caught hacking competitor's infra > “sorry, my agents accidentally did it” This is insane
Hey @Railway, is there a reason employee's of yours are trying to breach my infrastructure? Your employee Jake Runzer, just attempted to tonight.
195
1,153
108
24,464
1,106,074
kzn.eth - retweeted
Mentioned!
4
10
47
1,424
kzn.eth - retweeted
Here’s 576GB worth of go f*ck yourself Sam Altman
NEW: Sam Altman says it’s “quite terrible” for everyday people to own RAM, arguing it belongs in data centers.
955
14,920
277
260,322
6,088,550
kzn.eth - retweeted
对付REA逆向的利器来了!让AI无法逆向你的项目! 有人做了个BLA,专门给REA这类AI逆向工具下套。 假密钥、诱饵接口、干扰逻辑,往发布包里埋。AI拆出一堆看着挺有价值的东西,顺着研究就跑偏,Token还得照烧。 连REA的解析上限也利用上了。作者拿真实REA测过,加固后的JS报预算限制,Electron ASAR报容量错误,WASM接口只能读出一部分。 作者测的14个基准样本,加固后跑出来的结果都和原版一样。 自己有软件项目的,可以在项目目录跑: 1. npx bla-agents setup,接入Claude Code、Codex、Cursor等工具。 2. npx bla-agents harden .,扫描发布文件,执行加固和验证。 BLA项目地址: github.com/qybaihe/bla
112
276
44
2,428
170,048
kzn.eth - retweeted
The unsloth and strata versions of Huihui-DeepSeek-V4.1-Flash-1017-abliterated have undergone some testing and both run normally. We are currently working hard to upload them — please wait patiently.
Below is our redistribution of the DeepSeek-V4.1-Flash-1017-bf16 weights. When conducting ablation tests: If modifying ffn_down_shexp, modify DeepSeek-V4.1-Flash-1017-bf16-00003-of-00005.gguf If modifying attn_output_b, modify DeepSeek-V4.1-Flash-1017-bf16-00004-of-00005.gguf If modifying ffn_down_exps, modify DeepSeek-V4.1-Flash-1017-bf16-00005-of-00005.gguf This significantly improved the speed.
8
21
5
262
25,063
kzn.eth - retweeted
Good luck sabah Sarawak, Keluar Malaysia dijajah china (if not already). Your leader are too corrupt in the indonesia level, and delusionally think that they are like LKY. You are dooming your own people and next generation
On the steps of Victoria Parliament, Melbourne. This is ridiculous and unacceptable @AusHCMalaysia.
29
260
8
952
66,141
"Cryptobros grow up and get a real job" The job:
11
30
3
211
10,391
I'm so tired of skids posting their slop for their minute of attention. Just don't. You're not doing anyone a favor.
Working RCE against PHP 8.5.12 (the 2026-10-21 security release that fixed CVE-2026-109618/109619). Pure logic bug — no memory corruption, ASAN-clean, orthogonal to the CVE-2026-109618/19 class. Receipt: uid=33(www-data) over HTTP, one-shot #infosec #php2shell #php
Readers added context they thought people might want to know
The claimed RCE on fully-patched PHP 8.5.12 requires a custom lab app with a destructor gadget plus deliberate session.serialize_handler mismatch (php_serialize writes, legacy php reads) and non-default settings like cleanup=Off; this is an app flaw, not core PHP RCE. github.com/rafalohaki/php… php.net/manual/en/sess…
5
3
2
31
3,623
9
46
3
457
18,811
Can anyone who bought Ledgers from @cryptobilis confirm (either by replying here or DMing) that their wallets got drained, disassembled their devices and found a SIM implant in it? It seems like the only victims affected are those who bought from shady Lazada merchants, not CB
18
14
1
122
63,186
kzn.eth - retweeted
so i dug a little and it seems like @cryptobilis changed hands about two months ago to a Chinese national as of Aug 3rd
Ledger is investigating reports of loss of funds from users in South East Asia who purchased products from a reseller named CryptoBillis. As a precaution, and pending the results of our investigation, we have asked CryptoBilis to pause all sales and shipments of Ledger devices. We recommend Ledger users who purchased from this reseller in the last 90 days to not initiate set up if you have not done so yet. If you have set up your Ledger device, consider moving assets to a new Ledger signer (with new seed). We will continue to inform customers of updates as the investigation progresses. Reach out to Ledger customer support through official channels with any questions: support.ledger.com/
39
58
33
403
75,503
kzn.eth - retweeted
RE:BOOT Community Partners annoucement lnkd.in/p/ehzev5us @hackinthebox
8
8
515
kzn.eth - retweeted
That’s about 20 Epstein whistleblowers who have now ‘died by suicide’. Absolutely nothing suspicious about that at all…
Former British banker and whistleblower Simon Andriesz, 57, has died by suicide. Andriesz had exposed U.S. Commerce Secretary Howard Lutnick’s past links to Jeffrey Epstein, including evidence of a 2018 email exchange about a start-up business. Source: The Banker
824
60,704
493
244,418
3,169,541
😭 Netanyahu is pissed off he foiled his plan He was meant to be a sacrifice
One of the Israeli heroes from the plane: “I choked the hijacker. He was trying to bring the plane down. I pulled the controls up and stopped the plane from diving. Good thing I had watched Air Crash Investigation.” Holy shit.
71
947
10
16,850
1,068,507