You know things are getting serious when MyCERT rises from the dead to start issuing updates again. Their last post was in 2019. Let that sink in.
kzn.eth - retweeted
Early bird tickets are now available
lnkd.in/p/e6V5--Nm
kzn.eth - retweeted
终于破案了……之前我就一直纳闷,市面上哪来那么多便宜的 Pixel 和三星定制号。
刚才看到 有人在GitHub 直接把做号源码给公开了,谷歌这波羊毛简直离谱。
根本不需要真机,就是把: 12个月基础 + 三星送的6个月 + Pixel送的6个月 三层羊毛硬塞进同一个号,直接叠满 2 年的 Google AI Pro……
号商的锅直接被端了。
github.com/worldonlyu/Google…
> Railway gets caught hacking competitor's infra
> “sorry, my agents accidentally did it”
This is insane
Hey @Railway, is there a reason employee's of yours are trying to breach my infrastructure?
Your employee Jake Runzer, just attempted to tonight.
kzn.eth - retweeted
对付REA逆向的利器来了!让AI无法逆向你的项目!
有人做了个BLA,专门给REA这类AI逆向工具下套。
假密钥、诱饵接口、干扰逻辑,往发布包里埋。AI拆出一堆看着挺有价值的东西,顺着研究就跑偏,Token还得照烧。
连REA的解析上限也利用上了。作者拿真实REA测过,加固后的JS报预算限制,Electron ASAR报容量错误,WASM接口只能读出一部分。
作者测的14个基准样本,加固后跑出来的结果都和原版一样。
自己有软件项目的,可以在项目目录跑:
1. npx bla-agents setup,接入Claude Code、Codex、Cursor等工具。
2. npx bla-agents harden .,扫描发布文件,执行加固和验证。
BLA项目地址:
github.com/qybaihe/bla
kzn.eth - retweeted
Just dropped a new blog post! 🔥
blog.orange.tw/posts/2026-10…
kzn.eth - retweeted
GitHub release: github.com/seedds/nxnative
kzn.eth - retweeted
The unsloth and strata versions of Huihui-DeepSeek-V4.1-Flash-1017-abliterated have undergone some testing and both run normally.
We are currently working hard to upload them — please wait patiently.
Below is our redistribution of the DeepSeek-V4.1-Flash-1017-bf16 weights. When conducting ablation tests:
If modifying ffn_down_shexp, modify DeepSeek-V4.1-Flash-1017-bf16-00003-of-00005.gguf
If modifying attn_output_b, modify DeepSeek-V4.1-Flash-1017-bf16-00004-of-00005.gguf
If modifying ffn_down_exps, modify DeepSeek-V4.1-Flash-1017-bf16-00005-of-00005.gguf
This significantly improved the speed.
kzn.eth - retweeted
Good luck sabah Sarawak,
Keluar Malaysia dijajah china (if not already).
Your leader are too corrupt in the indonesia level, and delusionally think that they are like LKY.
You are dooming your own people and next generation
On the steps of Victoria Parliament, Melbourne. This is ridiculous and unacceptable @AusHCMalaysia.
kzn.eth - retweeted
I'm so tired of skids posting their slop for their minute of attention.
Just don't. You're not doing anyone a favor.
Working RCE against PHP 8.5.12 (the 2026-10-21 security release that fixed CVE-2026-109618/109619).
Pure logic bug — no memory corruption,
ASAN-clean, orthogonal to the CVE-2026-109618/19 class.
Receipt: uid=33(www-data) over HTTP, one-shot
#infosec #php2shell #php
Readers added context they thought people might want to know
The claimed RCE on fully-patched PHP 8.5.12 requires a custom lab app with a destructor gadget plus deliberate session.serialize_handler mismatch (php_serialize writes, legacy php reads) and non-default settings like cleanup=Off; this is an app flaw, not core PHP RCE.
github.com/rafalohaki/php…
php.net/manual/en/sess…
kzn.eth - retweeted
Can anyone who bought Ledgers from @cryptobilis confirm (either by replying here or DMing) that their wallets got drained, disassembled their devices and found a SIM implant in it?
It seems like the only victims affected are those who bought from shady Lazada merchants, not CB
kzn.eth - retweeted
so i dug a little and it seems like @cryptobilis changed hands about two months ago to a Chinese national as of Aug 3rd
Ledger is investigating reports of loss of funds from users in South East Asia who purchased products from a reseller named CryptoBillis. As a precaution, and pending the results of our investigation, we have asked CryptoBilis to pause all sales and shipments of Ledger devices. We recommend Ledger users who purchased from this reseller in the last 90 days to not initiate set up if you have not done so yet. If you have set up your Ledger device, consider moving assets to a new Ledger signer (with new seed). We will continue to inform customers of updates as the investigation progresses.
Reach out to Ledger customer support through official channels with any questions: support.ledger.com/
kzn.eth - retweeted
RE:BOOT Community Partners annoucement
lnkd.in/p/ehzev5us
@hackinthebox
kzn.eth - retweeted
That’s about 20 Epstein whistleblowers who have now ‘died by suicide’.
Absolutely nothing suspicious about that at all…
kzn.eth - retweeted
😭 Netanyahu is pissed off he foiled his plan
He was meant to be a sacrifice














































