"Trust this man, he has a Power Glove." Appsec and Static Analysis @ MSFT. ^(🇮🇷|🇺🇸|🇨🇦)-ian$
Vancouver, BC / Redmond, WA
- Tweets 9,067
- Following 957
- Followers 3,569
- Likes 23,947
Pinned Tweet
My very opinionated rant on getting started with AI and static analysis.
parsiya.net/blog/wtf-is-ai-n…
8
11
69
15,309
Parsia Hakimian retweeted
"Product managers love it. Developers love it. Security engineers hate it. I guess bug bounty hunters love it too."
Parsia gave us the TLDR on the Zoom webcam hack, and shouts out @JLLeitschuh for the find ⬇️
1
5
13
1,151
Preparing my (complicated) taxes with AI
parsiya.net/blog/tax-ai/
1
195
Going to Europe for vacation (driving to Vancouver).
Canada has been invited to become the first associate member of the EU, Ursula von der Leyen has announced.
🔗 telegraph.co.uk/world-news/2…
4
324
(A)I reverse engineered Burp's project format and made a tool to extract proxy history, Repeater tabs, and Site map from project files. I've always wanted to do this.
parsiya.net/blog/burp-projec…
3
21
98
6,017
(Hoping) They are alive and well somewhere,
The smallest sprout shows there is really no death
- Song of Myself by Walt Whitman
5
485
Attended an internal talk by Taesoo Kim (of team Atlanta AIxCC) and holy shit it was a breath of fresh air. An actual nuanced take about LLM vuln research from someone who has already done it as opposed to all the Claude code hype people here.
2
4
59
6,114
I use models for static analysis everyday. You have to give them targeted prompts and use “traditional sast” to pinpoint the code to ~10KBs of hotspots to get good results. Granted a small code base in my scope is 100MBs of code so YMMV.
I am still long tree-sitter.
Introducing Claude Code Security, now in limited research preview.
It scans codebases for vulnerabilities and suggests targeted software patches for human review, allowing teams to find and fix issues that traditional tools often miss.
Learn more: anthropic.com/news/claude-co…
4
1
34
4,842
Finished the Quillifer trilogy by Walter Jon Williams. Loved the series. Sad that it's only three books. If I were rich (even around 100 mil) I would've definitely sponsored him to finish (he says he has plans for three more).
parsiya.io/literature/bookre…
2
450
> I gave Claude Code access to my file system. I gave Claude Code access to my calendar.
Give Claude Code access to your brain. It might find an original thought instead of LinkedIn AI slop.
2
357
Holiday 2025 reading list courtesy of work and local public library.
Holiday reading courtesy of the local public library.
Reviews will appear here:
parsiya.io/random/bookreview…
ALT Image of six books on top of each other. From the top they are Sword and Citadel by Gene Wolf Icarus Plot by Timothy Zahn Sir Hereward and Mister Fitz by Garth Nix The Spark, The Storm, and The Serpent all three by David Drake
1
936
Parsia Hakimian retweeted
Slides are also in the GitHub Repo now for anyone interested.
github.com/irsdl/viewstate-s…
I was asked about the side quests, so here they are in the screenshot if you don't want the slides.
#NahamCon #ViewState
Step 3: Watch the #NahamCon talk tonight! I hope this is useful for some of you, especially if you’re new to the subject. Check @NahamSec messages for the exact time.
This was a 3–4 hour in-person workshop, turned into a 90-minute talk. I recommend following the side quests, and feel free to ask me questions or submit PRs for the lab:
github.com/irsdl/viewstate-s…
Note: YSoSerial .NET v2 needs a few tweaks to work properly. Please be patient, and you may need to use an older Visual Studio version, like Visual Studio 2017.
2
15
91
13,046
Review for "Walter Jon Williams - The Best of Walter Jon Williams" my favorite cyberpunk author - 4.5/5.
My favorite is Videostar (set in the Hardwired universe) with "The Golden Age" (weird steampunk wild west super hero) a close second.
parsiya.io/literature/bookre…
403
To continue my AI+ SAST posting, I propose a small change to how we use SARIF files.
parsiya.net/blog/ai-native-s…
1
8
1,139
Parsia Hakimian retweeted
Slides for "ToolShell Patch Bypass and the AI That Might Have Seen It Coming" at @NDC_Conferences {Manchester} 2025.
github.com/irsdl/sharepoint-…
Bonus: WAF & workarounds bypass!
#AppSec #SharePoint #TolShell
2
56
213
23,599
After a few days of using Gemini 3 in GitHub Copilot Chat, I've moved back to Claude 4.5. I have "do not edit when I mention discuss" in multiple instruction files and it still just edits.
It might be better, but I cannot end each prompt with three "do not edit" variations.
3
489
This is poetry. Ice is single handedly saving the reputation of anime pfp accounts.
>go online to learn about tech
>spyware company guy waddling with sword in office
>orange investors company funding middle school side projects (vibecoded subway surfers)
>omarchy
>immortality guy pays young girl for shrooms
>I wrote task manager
>72nd Yann LeCun crash out
>hallucinated cheat sheet “Arch Linux vs parrot OS for penutrutiuna tastrse”
>new model for videos, HOLLYWOOD is COOKED (video of a duck with a backwards cap surfing while drinking beer)
>”move to sf, go into debt if you have to”
>floral pattern shirt defense company guy going on increasingly genocidal rants
>I wrote task manager
>omarchy
>screenshot: blocked by investor guy with surgically eggified head tip
>tbpn interview with ratatouille the mouse and G-Man from Half-Life
>I wrote task manager
>omg don’t use public wifi sim swap attack Russian AI 0day grok is this true
>world’s richest retard says grok told him the only way to get to mars is to deport all immigrants (he’s an immigrant but he means the OTHER ones, you know)
>tbpn interview with ayatollah khomeini
>omarchy is just a script?
>pay me more for steve job daughter screenshot crash out
>I wrote task manager
>OpenAI vaguepost
>vercel ceo selfie with Adolf Hitler
>fifteen trillion passwords leaked in data breach
>ok but Omarchy is literally just an install script for arch what am I missing
>Our Smartest Model Ever
>tbpn interview with Ragnaros, The Firelord live from Molten Core
>I wrote task ma
1
14
2,064
Back to Gene Wolfe. Review of "The Knight", the first book in "The Wizard Knight" series. 4/5.
TL;DR: Arthurian fantasy. You thought Severian was an unreliable narrator? He is a genius compared to Able (main character).
parsiya.io/literature/bookre…
2
3
554