Penetration Tester. Art passionate. Friends call me "grandpa".
Joined January 2015
- Tweets449
- Following52
- Followers48
- Likes347
Pinned Tweet
"The need to be understood, to create things of value, to meet the inner lives of others, to refine one's emotions: these are everyday concerns. And they are played out - met or left unmet - as we go through our days trying to address our more obvious needs." John Armstrong
Nicolò Fornari retweeted
My wish for 2026 is that we move beyond pelicans and vibes-based oneshot web apps for model evaluations. Let them spend 2 hours implementing a detailed spec on a real-world project instead.
In my testing, gpt-5.2-xhigh >> opus-4.5 >= gemini-3-pro-preview.
Nicolò Fornari retweeted
In a new video, Nicolò Fornari walks through how to fuzz with AFL++, how to pick targets, avoid common pitfalls, and boost effectiveness. Find performance tips, fuzzing theory, and AFL++ internals. youtu.be/L5Tin7m5sbE?si=D0IL…
#security #fuzzing #AFLplusplus #appsec
Nicolò Fornari retweeted
LLM-based vuln hunting just leveled up with xvulnhuntr - a fork of vulnhuntr with support for: C#, Java, Go. Read @rationalpsyche's blog post and go grab the project on GitHub.
blog.compass-security.com/20…
Nicolò Fornari retweeted
We won't be using this account actively anymore. You can stay connected with us through:
Our Website: osintswitzerland.ch/
LinkedIn: linkedin.com/company/osint-s…
Discord: discord.gg/FTTNyGe9ta
Bluesky: bsky.app/profile/osintswitze…
We’d love to see you there! Thanks for your support!
Nicolò Fornari retweeted
I talk to a lot of people who just use the "For you" timeline on X, and get baited into a permanent state of simmering rage by what they see there. The amount of time you should be spending on "For you" is ZERO - interact with X through curated lists and "Following" only.
Nicolò Fornari retweeted
🦋🔵Did you know that we are now also on Blue Sky? Follow us for updates on cutting-edge supercomputing, science breakthroughs, and tech-driving innovation: bsky.app/profile/cscsch.bsky…
10 years on twitter, it has been good for a while, but now I post on Bluesky bsky.app/profile/rationalpsy… #MyXAnniversary
Nicolò Fornari retweeted
Turns out WhatsApp does NOT have end-to-end encrypted backup enabled by default. Your backups are stored cleartext on cloud, which means the E2EE in chats are essentially a joke, if you backup.
That's FB just being an ass and sneaky IMO.
Nicolò Fornari retweeted
Threema 2.0 for desktop (beta), which was audited by @cure53berlin earlier this year, recently passed a bug bounty challenge and is now open source: threema.ch/bp/threema-deskto…
Nicolò Fornari retweeted
We're joining a promising platform to reach more interested OSINTers and learn from each other.
Our association is now also on Bluesky. You can find us at bsky.app/profile/osintswitze…
We will be more than happy if many of you will also join the conversation!
Nicolò Fornari retweeted
You can also find me there:
bsky.app/profile/sploutchy.b…
Nicolò Fornari retweeted
Paged Out! Issue #5 is out now!
pagedout.institute/?page=iss…
Happy reading!
Please RT and tell your friends! :)
Nicolò Fornari retweeted
If you're following me here, I'm also posting @halvarflake.bsky.social bsky.app/profile/halvarflake… -- and on mastodon, too.
Nicolò Fornari retweeted
The entire 3rd-edition of @rossjanderson's "Security Engineering" is available free as PDFs now!
cl.cam.ac.uk/archive/rja14/b…
Nicolò Fornari retweeted
Interesting talk worth watching about DAST at scale. MS basically went full circle between old solutions like parsing code to modifying built env to generate OpenAPI specs to feed DAST tools, to use AI to consume code & produce that. None works as expected at scale. What works?--
Take a rare look inside how Microsoft is working to use automated reverse engineering techniques to secure its own web services!
youtube.com/watch?v=kfuOzDwv…
#BlueHat
Nicolò Fornari retweeted
We've just released our 2024-Q3 edition of ThinkstScapes: thinkst.com/ts
For this issue, we went through ~5000 info-sec research talks, papers, presentations & blogs.
The website includes PDF & ePub links (and a brief audio summary).
As always: completely free...
Nicolò Fornari retweeted
I’ve 40 times less followers on @bluesky but I don’t give a f*ck 🤷♂️
Why?
- the moderation team is efficient
- 3rd-party clients are welcome
- there’s no ads
- the mood is much better
Unless you really want to show your support for Elon, give it a try!
Alright, time to give a try it. I'm also there, bsky.app/profile/rationalpsy…
Psst, if you don’t know, infosec people are finally switching to Bluesky. Matt Burgess put together a “starter pack” for infosec people (or just look at who I follow). I hope people start sharing their ideas and resources there
bsky.app/profile/mattburgess…