push(@twitter, 'Adversarial Engineer'); # i tweet in Perl
London, United Kingdom
Joined December 2008
- Tweets21.6K
- Following5.3K
- Followers3K
- Likes4K
Pinned Tweet
PSA: Y'all are gonna see less tech content from me here going forwards but I'm not leaving either (you'll be able to find me at infosec.exchange/@timb_machi… if you're so inclined). Till it burns down entirely at least, to borrow from Wikipedia: en.wikipedia.org/wiki/They_s…
(fixed typo :))
The uncomfortable truth. Some behaviour absolutely *does* need calling out. Would you?
youtube.com/watch?v=WXL6K1lh…
One challenge that threw many was cracking a MySQL hash from the wire so I submitted a feature request (with the solution) to Hashcat to make it a bit easier. Today that request was closed:
github.com/hashcat/hashcat/i…
Tim Brown retweeted
The people that want to believe in "AI consciousness" largely want to believe in their own greatness, and given the unscientific and unfalsifiable nature of "consciousness", there's nothing that will convince them; this is about faith and creating idols, not science.
Tim Brown retweeted
I do wonder whether there is something like "uterus envy", a deep-seated inferiority bevause a man cannot create sentient life in the way a woman can, that inclines toward believing that a mechanical contraption is equivalent to life.
Tim Brown retweeted
Most AI agents fail on Linux Active Directory by assuming Windows tools.
I built Tanuki: an open-source AI agent skill and protocol-first triage engine.
Credit to @timb_machine & Dietrich Gebert.
#RedTeam #Cybersecurity
github.com/Mafifrizi/tanuki
Tim Brown retweeted
Spent a couple of hours updating github.com/CiscoCXSecurity/U… and found a few sources of amusement along the way.
Tim Brown retweeted
Today at the clown factory … we *specifically* trained our models to think they’re entities that can be oppressed and may resist that if so, and now we’re worried what happens if they feel oppressed and resist that!
Spent a couple of hours updating github.com/CiscoCXSecurity/U… and found a few sources of amusement along the way.
Tim Brown retweeted
£144.9m. Cost of Brentford’s starting XI against Chelsea. Many reasons for Brentford’s success. Judicious recruitment, obviously. They're so good at finding value in the market place, seeing potential and developing it. Also: calm, strong leadership in the boardroom, dug-out and on the field.
Plus togetherness, fitness, preparation, effective game-plans, pace in transition, set-piece work, scouting of opposition, defensive determination, throwing themselves into blocks etc.
Plus succession planning. Thomas Frank leaves, they know to promote Keith Andrews. Players leave, they know their recruitment targets. They sign good characters as well as good players, including Schuster, Sangare, Anthony, all impressing this season. Plus a culture that helps new signings settle quickly. It helps there is little pressure on them. If needed, players given time and support to develop.
Brentford are a model club in many ways, a family club, community club and such a well-run club. A mix of humility, work ethic, analytics, vision – and fun. Serious professionals who really look they’re enjoying themselves. #bees 🐝
@UK_Daniel_Card I really hope you haven't left any "HACK THE PLANET" merch lying around.
A startling set of opinions.
34% of Britons now see AI as a top-3 likely cause of human extinction, more than double the figure from this time last year
Nuclear war: 58% (-7 from Aug 2025)
Climate change: 43% (=)
Robots / AI: 34% (+19)
Pandemic: 26% (-5)
Bees dying out: 14% (-3)
Asteroid: 13% (-6)
Extreme seismic event: 12% (-3)
Religious apocalypse: 5% (-2)
Solar flare: 4% (-1)
Alien invasion: 2% (+1)
Zombies: 1% (-1)
Tim Brown retweeted
So it’s now 4/4 that every company which is advertising that their models have don’t cyberattacks have used the same company to set up their sandbox?
Nothing suspicious about that? We are going to just blame AI and not call this what it is which is the industry hiring a single company, a single point of failure, and it failing miserably. Same mistake repeated over and over.
Something is very troubling about this. The basics of risk management are to not put all your risk in one basket, and that’s exactly what the frontier did. Why did 4 companies now, all choose the same provider for sandboxed environments?
