
Generating AI slop @QED_Audit ex. @TeamAtlanta24, @osec_io, @georgiatech
/proc
Joined April 2019
- Tweets1.8K
- Following877
- Followers1.9K
- Likes2.1K
On July 25, we hacked OpenAI.
Two bugs let us take over ChatGPT/Codex accounts of OpenAI employees (+some unaffiliated users) and reach connected services: Outlook, Slack, GitHub, etc.
We proved it with a PR in OpenAI’s internal codebase . It took us <72h. 🧵
During my time at @QED_Audit I circled back and took another quick look at browser/JSE vulnerability research. AI agents flying high, seemingly finding & exploiting bugs everywhere, and there's this: a **constant integer overflow** in V8, alive for over 3.5 years. (1/5)
Replying to @QED_Audit
@QED_Audit found CVE-2026-19174, an integer overflow in V8 that gives you arbitrary code execution in Chrome. The bug is one line of constant arithmetic. It survived 3.5 years of fuzzing, manual audit, and LLM-driven review. (1/n)
pr0cf5 retweeted
@QED_Audit found CVE-2026-19174, an integer overflow in V8 that gives you arbitrary code execution in Chrome. The bug is one line of constant arithmetic. It survived 3.5 years of fuzzing, manual audit, and LLM-driven review. (1/n)
In some ways, LLM pessimists are even more bullish on AI than the slop startup bros. It's just buried so deep in their unconscious mind that it materializes as denial and complete logical fallacies like this.
pr0cf5 retweeted
Some people saw the "count Rs in strawberry" example and dismissed the capabilities.
But I saw it and thought I cannot spell strawberry either, and I still can be productive.
Anyone can write a patch-gap exploit in a few minutes using Claude Code. Uncoordinated patch releases are criminal.
pr0cf5 retweeted
Recently I uploaded two new videos! But I have been pretty inactive the past 2-3 years and a lot has happened.
Let me share an update about my life, AI and the future of LiveOverflow.
pr0cf5 retweeted
LLM-driven security isn't just about finding implementation bugs in code. it's breaking cryptographic protocols at the logic level.
AI agents are necessary to secure every layer of a project, from theoretical foundations to the frontend.
We found a key-recovery attack on TALUS v4, a PQ threshold signature scheme in NIST’s Threshold Call, using @QED_Audit’s bug finder.
Huge thanks to the authors for the quick response and fix in v5.
📄 Attack: eprint.iacr.org/2026/1668
🛠️ TALUS v5: arxiv.org/abs/2603.22109v5















