‿⊱⊱༒༻༻༻༻⛧༺༺༺༺༒⊰⊰ ‿︵‧˚⊹ CHAMADA DE ARTIGOS ⊹˚‧︵‿ ‿⊱⊱༒༻༻༻༻⛧༺༺༺༺༒⊰⊰ ༺༻༺༻ DATA FINAL ༺༻༺༻ ༺༻༺༻ 13/11 ༺༻༺༻ ༺༻༺ trm@tramoia.sh ༻༺༻ ‿⊱⊱༒༻༻༻༻⛧༺༺༺༺༒⊰⊰

Here is how OpenAI’s CISO fumbled the situation (in my personal opinion) 🧵 1/X

hmmm

Tip of the day: when you are planning a new app or feature from scratch using AI, ask them to document the SBOM and review the libraries. There is some sort of vies in choosing deps, and I'm finding AI using random alternatives instead of relying on big and stable oss projects

I still see no reason to do CTFs with agents. There’s no learning, no fun, nothing. just boring.

The end of flow state You wake up, excited for the day to start. You have a feature idea you are looking forward to implement. You make your coffee. Sit in front of the laptop. Put on that techno set you love. The house is empty for the next 8 hours. No one can interrupt you. You open your IDE and begin typing. Soon, hours pass in minutes. Everything makes sense. And before you know it, it’s the end of the day. You’re looking at today’s work and are content. You’re energised. Because you created something you enjoy. Fast forward. No more. You start a new day with an open IDE. But, instead of pressing those keyboard buttons, you’re staring at a orange text. “Discombulating” “Wombanizing” Minutes feels like hours. Nothing makes sense. And before you know it, it’s the end of the day. You’re tired. Your brain hurts. It feels like you just finished a ton of meetings. But, at least you shipped 1,000 lines of code, right? You should be proud. But, the only thing you feel is hollow. Did you create? Or did someone else? That magical feeling from years ago, where did it go? Rest in peace, flow state. You were dear to me.

Why do AI-generated unit tests always look overengineered?

Thanks AI for rooting my device, I was bored by doing this every month to keep it updated

Did you know macOS binaries can run on iOS? It needs rewriting architecture information and adjusting library paths. I automated this, including DYLD shared cache library extraction and replacement, allowing many macOS command line tools to run on iOS. github.com/mowisec/macos-to-…

Working in R&D of security solutions is crazy. I spent years in offsec/appsec running tools and for me "going beyond" has always been understanding the technique or vulnerability, but I still ignoring the whole magic happening under the hood, because I didn't grasp the massive abstraction in SAST tools. After ~6 months working full time in building and improving such solutions I've been exposed to computing concepts I likely would have only encountered in a university degree or at a Big Tech company: Graphs in CFG, Semantic Analysis with AST, (de)compiler concepts, taint analysis, and so on. Crazy how much you learn by exposure

CVE-2026-18058 😮‍💨

hottake: connect to literally any wifi network at defcon you want, it doesn’t matter. It’s not 2010. If someone throws RCE at your fully patched MacBook you earned that shit

The whitepaper is live! Read "Can AI Do Novel Security Research? Meet the HTTP Terminator" here -> portswigger.net/research/htt…

I'll be at Black Hat and DefCon. If you want to chat or just hang out, DM me :)

As promised, DarkSword Kernel Exploit writeup is now live at therealclarity.github.io/blo… This goes over the root cause, what happens on the Kernel side and how the kernel exploit is implemented. Hope it helps anyone looking to understand it! :)

Average vibe coder 🤣

yay I earned $3,313.37 for my submission on @Bugcrowd bugcrowd.com/h/regne #ItTakesACrowd

We're launching a $100,000 fund to save CTFs.

[1/3] It's common to get a ParcelFileDescriptor pointing to a directory through an Android ContentProvider. But can you actually turn that into a directory listing?