Hacker and Hermit. Rebel and Misfit. 🎀 On path of infosec nirvana (-༗‿༗-) 🎀

My girlfriend asked me why I carry a gun around the house... I told her "Fear of the CIA" She laughed.. I laughed.. Amazon Alexa laughed. I shot the Alexa.
4
14
60
I kinda wonder sometimes how many modern or future AI discoveries going to credited to AI because of AI companies actively destroying rare books and documents
2
65
It is a mistake to design prompts before one has model behavior. Insensibly one begins to twist model behavior to suit prompt designs, instead of prompt designs to suit model behavior. - Sherlock Holmes, Prompt engineer
Being a dev today using frontier AI feels like I'm playing Watson to Sherlock Holmes. I just stand back and go "my word holmes how did you deduce that" and occasionally stop him from getting shot
64
Proxy retweeted
Today, PHP commit 934d4ff patches two Use After Free I reported five months ago ⏳. If you're interested in PHP core exploitation and vulnerability research, take a look at 🔗 therealcoiffeur.com/c111001.…
15
55
2,751
Proxy retweeted
I've asked Claude Opus 5.5 to create 100 HTML files Rules were simple: - look stunning - zero repetitive designs - go full creative mode CLAUDE OPUS 5.5 IS THE BEST MODEL I HAVE EVER TESTED !!! The previous best results on this experiment was of Fable 5.1, but Opus 5.5 is NEXT LEVEL. Many files include FULL COMPLETE playable GAMES! ZERO BROKEN FILES. I'm just blown away! 🤯 See the results for yourself (incl. prompts): miaai-lab.github.io/Claude-O… There are TOO MANY INSANE files, I can't list everything! I HIGHLY recommend you go over EVERY SINGLE FILE. Some great examples: Paper Cut Diorama miaai-lab.github.io/Claude-O… Neon Rain: miaai-lab.github.io/Claude-O… A Complete Chess game! miaai-lab.github.io/Claude-O… Neon Breakout miaai-lab.github.io/Claude-O… Neumorphic Synt miaai-lab.github.io/Claude-O… Constellation Mapper miaai-lab.github.io/Claude-O… Pendulum Wave miaai-lab.github.io/Claude-O… Pulse Visualizer miaai-lab.github.io/Claude-O… Typewriter Letters miaai-lab.github.io/Claude-O… Piano miaai-lab.github.io/Claude-O… Holographic-Card miaai-lab.github.io/Claude-O… Elastic Letters miaai-lab.github.io/Claude-O…
187
253
3,897
586,723
Proxy retweeted
i thought read() was a syscall wrapper, but it can dlopen a bytecode interpreter and execute your code "house of windy" turns this into leakless code execution with only OOB null byte writes pepsipu.com/blog/2026-09-dwa…
9
55
389
28,881
In July, Microsoft fixed CVE-2026-50343, a Windows privilege escalation bug reported by Calif and 9 others, dubbed “Dark Elevator”. But was it really fixed? Ask @tiraniddo projectzero.google/2026/09/w…
3
46
208
16,779
Proxy retweeted
Jev is now available to everyone. No waitlist. Start using it here: console.typesafe.ai
729
2,412
22,665
3,122,059
Proxy retweeted
Meet Qwen-Image-2.1, the most balanced and cost-effective image generation model in the Qwen-Image series! Now open weights! 🎨 A unified model for both generation and editing, delivering top-tier quality in a lightweight package. Highlights: 👀 - Compact & exceptionally fast: A lightweight 7B architecture that outperforms most closed-source models, with drastically accelerated inference for multi-image inputs. - Native transparency: Natively generates and edits RGBA layers, enabling seamless compositing and text editing within transparent images. - Versatile, high-fidelity editing: Supports up to 10 reference images and precise local control while preserving strict fidelity for portraits and products. - Broad coverage & stunning aesthetics: Excels at panoramas, infographics, and virtual try-ons, delivering realistic textures and elegant typography. Start to create your next masterpiece with Qwen-Image-2.1! 🖼️ - Blog: qwen.ai/blog?id=qwen-image-2… - GitHub: github.com/QwenLM/Qwen-Image… - Model Scope: modelscope.cn/models/Qwen/Qw… - Hugging Face: huggingface.co/Qwen/Qwen-Ima…
287
889
8,244
2,245,732
Proxy retweeted
pleased to share the entire arXiv site as a dataset on HuggingFace huggingface.co/datasets/sece… 3,148,796 papers, every version, in LaTeX, PDFs, PostScript, HTML, 16 TB in total
131
518
4,350
394,671
Companies don't understand how important these little things are. They literally losing users over this.
can we stop logging people out every 3 days i pay $100 a month and i still have to prove who i am twice a week my shitty bank app keeps me logged in longer than this
1
71
Proxy retweeted
Any legal 3×3 Rubik’s Cube scramble can be solved in 20 moves or fewer. This is called “God’s Number.” In 2010, researchers proved it by effectively checking all 43,252,003,274,489,856,000 possible cube states using massive computing power. So no matter how scrambled it is, there’s always a solution within 20 face turns—where a 180° turn counts as one move. In the stricter quarter-turn metric, the maximum is 26 moves.
Solving a Rubik's Cube with graph theory.
20
506
4,251
308,847
Solving a Rubik's Cube with graph theory.
469
10,694
73,113
11,679,471
You haven't made it until someone on Hackernews writes 500 words essay on why your thing is worthless.
1
142
74
661
8,603
253,751
Proxy retweeted
Today, we’re announcing Ternary Bonsai 2 27B. Based on Qwen3.8 27B, Bonsai 2 27B is 9x smaller than its full-precision counterpart while retaining 98.2% of its aggregate benchmark performance. Two months after the first Bonsai 27B release, the biggest change is quality. The footprint remains 5.9 GB, but the gap to full precision has narrowed materially, with particularly strong gains in agentic coding, multimodal reasoning, and long-horizon tool use. Ternary Bonsai 2 27B is available today under Apache 2.0.
639
1,567
15,541
5,400,734
From what I understood, Jev is fast and cheap AI decision making API, it is not a chatbot like LLMs. It is not open source. It outputs typed probabilities for routing, scoring, agent control, validation, and labeling. Seems it will be game changer for agentic coding.
484
Pen testers will soon lose their job
GPT-6 Astra test 4/n Prompt: "Implement pen spinning with a dexterous hand. Use Isaac Lab for RL training, use the Sharpa hand, and create the pen mesh yourself. Give me a trained RL policy and a visualization video. You are free to search the web and download papers or anything else you need." After running autonomously for a day and a half (including training the policy), this is what we got: Credit: my student Chengyang Li
60
399
10,309
403,209
I don't know if bug bounty is dead or companies don't care about security anymore because no way openAI account takeover issue is only worth $6.5K ????
On July 25, we hacked OpenAI. Two bugs let us take over ChatGPT/Codex accounts of OpenAI employees (+some unaffiliated users) and reach connected services: Outlook, Slack, GitHub, etc. We proved it with a PR in OpenAI’s internal codebase . It took us <72h. 🧵
1
3
398
Proxy retweeted
Step 1: buy a domain Step 2: get a HTTPS certificate for the domain Step 3: sell domain Step 4: free MITM
44
89
4,655
301,684
Everytime trillion $$ companies try to convince you into believing "AI needs to be regulated by few institutions", Never forget what they took away from us.
3
217