Information security enthusiast. Riyadh DEF CON group @dc9661

Joined August 2009
في حلقة جديدة من #بودكاست Added Value، نكتشف كيف تسهم المستحضرات الحيوية المشابهة في تطوير صناعة الدواء، ودورها في توسيع خيارات العلاج وتعزيز القدرات الوطنية في التصنيع الدوائي.
 
رحلة داخل عالم التصنيع الدوائي مع #سبيماكو الدوائية، نتعرف خلالها على أهمية هذه المستحضرات والتوجه نحو تطوير إنتاجها محلياً. youtu.be/C2Bk80q4Ozc?si=VDBs…
2
5
9
883
🔴 تحذير أمني: بادر بإجراء التحديثات الأمنية على منتجات Lenovo. 🔗 nca.gov.sa/ar/cert/7859/
4
6
7,310
Mazin retweeted
I see many people demotivated due to AI and feels like its been a while since I ranted. Probably a mild take but here is how I stay motivated. Nothing really new just how I use what people have said to keep my motivation up. The normal 2026 disclaimer, what is in this post isn't actually 100% in line with my opinion; yes I know there are holes in my logic but some rabbit holes are best "on read". The biggest change for me is Linus Torvalds saying something along the lines of idk why people say AI makes things, people make thing. If communication was so global in the 70's I am sure people would have said similar things during the conversion from assembly to C. Humans are creating instructions for the compiler to make a program. So why didn't we think the compiler made it? Without internet I think it would take me around 2 minutes to write hello world in C (i know embarrassingly slow but man have i gotten lazy over the years). Do it in assembly? That's probably an hour. Which is a 30x difference of time. Okay now lets say we are in the year 2010 and have Python. I timed myself and it was 3 seconds. That's a 40x time difference from my C. Why did I think I made the program and not python made it? Unfortunately, the only thing I can come up with is how much we communicate and how quick ideas/sentiments can form. I'm sure C/Python got hate when they first came out. Hate can be a really goo fuel -- Most engineers I know have their best work come out of "hate coding" something to prove someone wrong. Only to later realize they social engineered themself into doing an amazing thing. Could be wrong here, but I think Pythons Flask is a good example of this as it started as an April fools joke. Quite literally "the most engineer thing ever" to have a funny joke spiral out of control and grow beyond their wildest dreams... Kind of like that guy that was vibe coding games last year when AI was "bad", or heck even the W̷a̷r̷e̷l̷a̷y̷ C̷L̷A̷W̷D̷I̷S̷ ̷C̷l̷a̷w̷d̷B̷o̷t̷ ̷M̷o̷l̷t̷B̷o̷t̷ ̷ err OpenClaw person. Really with all those name changes I'm shocked they landed at OpenAI instead of MSFT. Anyway, our hate on vibe coding created the sentiment that we aren't creating things anymore (AI makes things). I don't really view it that way, AI just makes me 20-30x faster; which is similar to the jumps between Assembly -> Compiler -> Scripting. Actually now that I think about it, I remember trying to learn C many times because scripting wasn't a "real language" and it would never run a web server or it wasn't capable of editing memory (silly times indeed). AI is enabling us to develop faster and expanding the number of people that can do things, which is not new; quite literally every time we come up with a new way to interact with machines -- it does the same thing. So yes - Anyone can make a cool demo that looks real now but they are still going to spend hours getting AI to work out all the bugs and do it better. To me they are still making something, it is other people telling them they aren't -- Funnily enough, those people trying to convince others they aren't making things, is what in return demotivates themself because it poisons their thought process when it comes to this topic. So uh. If you look for my permission to learn something? Vibe on and let the good times roll. Just make sure you do things safely, obey terms of service, and try not to end humanity. Oh wait. That disclaimer. Using AI in a way that causes humans to spend a lot more time than they are used to is bad mmkay? Seeing all the low effort CTF Work, blog posts, bug bounty, etc does get annoying... oh wait I have a diclaimer to the disclaimer. If you use AI to eat up time of scammers, like tricking call center scammers into chatting with robots for hours, I thank you for your token donation to helping fight that plague.
27
74
3
477
51,268
Mazin retweeted
🥰
9
17
191
8,580
قول قزح — لن يقول ( قُزح ) إلا الجميل ولن ينقل غير الجمال ولن نرى فيه سوى مائدة تتزيّا بالتنوع اللوني والثراء الدلالي مما أنتجه الصديق أ. د. أحمد بن صالح الطامي في أحدث إصداراته مشتملًا على ( أبحاث ومراجعات نقدية في الأدب واللغة والمثاقفة ) ومتضمنًا أربعة فصول: *دراسات وقراءات في الأدب الحديث *ترجمات أدبية *وقفات في واقع اللغة العربية ونحوها *في التواصل الثقافي والمثاقفة مع مقدمة وإهداء وتعريف بأبرز نتاجه وأعماله، وأشير منها إلى رياسته نادي القصيم الأدبي وعمله وكيلًا لجامعة القصيم وأستاذيته للأدب الحديث والنقد والأدب المقارن، كما أعتز بصداقةٍ تربطني بأبي مازن مذ كنا في المرحلة الثانوية ولقاءات مضيئة جمعتنا في مكة وجدة والرياض وبريدة وعنيزة، وما نزال بفضل الله. -
2
7
11
2,115
صدر كتابي (قول قزح: أبحاث ومراجعات نقدية في الأدب واللغة والمثاقفة) عن مؤسسة الانتشار العربي.
11
17
53
8,259
There was a time when cell phones had style and personality. Now they are all indistinguishable from each other.
18
41
6
448
21,709
Mazin retweeted
PoCs for Apache Tomcat Unauth RCE (CVE-2026-34486) and Apache httpd Pre-auth RCE (CVE-2026-23918) are now public on our Github. Tomcat exploit is fully reliable. httpd chain works in a controlled lab setup with a known info leak. github.com/striga-ai/CVE-202… github.com/striga-ai/CVE-202…
4
180
6
724
96,828
🚀 هكذا سيتم نشر اقمار ستارلنك في الجو 😍 تستعد SpaceX لإطلاق الجيل الجديد من أقمارها الصناعية (Starlink V3) بالاعتماد على مركبة Starship العملاقة. 🛰️ أبرز القدرات التقنية للجيل الجديد: 🔻 سرعات تنزيل بيانات (Downlink) مرعبة تصل إلى 1 تيرابت في الثانية (1 Tbps). 🔺 سرعات رفع (Uplink) تصل إلى 160 جيجابت في الثانية. حجم حمولة Starship الضخم سيسمح بنشر أعداد كبيرة من هذه الأقمار دفعة واحدة، مما يسرّع بشكل هائل من بناء شبكة إنترنت عالمية فائقة السرعة وتتحمل نقل بيانات ضخمة. 🌍
10
10
79
18,729
نظام مايكروسوفت المتخلف يبلشك حتى وانت بنص الفضاء.
JUST IN: Artemis II crew experiences issues with Microsoft Outlook on their way to the Moon, asks ground crew for assistance.
3
35
16,711
JUST IN: Artemis II crew experiences issues with Microsoft Outlook on their way to the Moon, asks ground crew for assistance.
1,497
2,740
2,657
31,466
20,662,331
Did you know these Super Mario Bros. secrets!? 😲
47
297
23
1,421
110,831
🔴 تحذير أمني: بادر بإجراء التحديثات الأمنية على منتجات Lenovo. 🔗nca.gov.sa/ar/cert/7322/
5
6
2,075
I was recently laid off, so I’m officially open to new opportunities. If you need a Hacker, or a teachable moment using Red Team tactics. I can also be a trainer, community builder & liaison. I want more than a job I need a company & purpose I can believe in. Please share! 💜🤗💜
36
157
11
446
35,620
Mazin retweeted
#CVE-2025-55182 #React2Shell Let me walk you through the technical path of the WAF bypass. When a request is sent as multipart/form-data, Next.js hands the raw body stream to Busboy. The bypass comes from Busboy’s charset logic: it cleanly accepts UTF‑16LE (and legacy UCS‑2) and forwards the decoded bytes straight into the RSC payload deserializer. charset=base64 is a dead route — that path hits base64Slice(), which encodes instead of decodes, corrupting the payload and killing the exploit chain. So the only viable encodings for smuggling malicious RSC payloads past WAF normalization are UTF‑16LE and UCS‑2. And if the WAF isn’t performing proper normalization on non‑UTF8 charsets, it will miss the payload entirely.
16
123
3
552
70,962