irresponsible disclosure aficionado
The Netherlands
- Tweets 4,687
- Following 1,153
- Followers 17,894
- Likes 3,042
blasty retweeted
As Flare-On starts I am happy to announce the official Hex-Rays IDA MCP Server is out! 🥳
Details and links below ⬇️
ALT We are happy to introduce the official IDA MCP server! This free and open source software connects your IDA installation with AI agents, enabling them to disassemble, decompile, and support reverse engineering tasks. It works great with models like Gemini, Qwen, or Opus using familiar harnesses like Claude Code, Codex, or Pi. Across our internal malware analysis-focused benchmark, IDA MCP’s “code mode” architecture reduced token consumption by approximately 20% compared to popular alternatives.
9
71
360
18,007
you’re all riling up over the $6,500. that wasn’t even an issue for us.
the disclosure process itself was nightmarish, we had to get input from lawyers and eventually go to journalist
one of the worst disclosure process.
42
75
1,229
117,750
.. I'm sorry @S1r1u5_ && team
We reported the bug to Discourse and OpenAI. OpenAI fixed the SSO issue roughly 14 hours after our initial submission.
Discourse received our separate report Saturday, replied Sunday, and had a fix Monday.
OpenAI awarded us $6,500.
Made with AI
5
9
184
13,597
reverse engineering in 2026 be like: /goal make sure no sub_* remains, everything needs to have a CORRECT name also recover all types and signatures and TRIPLE CHECK make no mistakes or you and your entire family will fucking die
then walk the dog and come back to 💯👍 IDB('s)
10
21
405
23,548
update: i have been granted daybreak blue 🙏
I showed you my face TWICE, i uploaded my government issued drivers license (front and back); what more do you want man? there was no follow up requesting additional information whatsoever. this is a humiliating and utmost frustrating experience @sama >:-[
11
51
6,722
I'll be giving a (short) talk again at @TheSAScon this year! lineup is looking very strong; happy to be a part of this!
🔥 The #TheSAS2026 agenda is live: thesascon.com
Browse the sessions, plan your route, then hit REGISTER if you haven’t already. 😉
Yes, there’s still some chaos. A few timings and details may still shift. No, that’s not unusual when active research and fresh findings are involved.
A couple of talks will be revealed closer to the event while vulnerability fixes are still in progress.
See you in 🌴 Jimbaran Bay!
1
3
15
2,285
do not leave your omarchy machine unattended, people!
Presenting the QuickLogin attack against Omarchy. Think again, is leaving your FDE laptop unattended a good idea? Let's have a look! @dhh @OmarchyLinux
8
7
133
27,227
just a “little” 7900xtx being puppeteered by a mac mini over USB3.2 gen2 using a driver thats running fully in userland. (@comma_ai chestnut and @__tinygrad__) maybe not the final form of sovereign/affordable ai compute yet.. but certainly a giant step in the right direction! :-)
6
2
83
6,627
slosh v0.1.7 has been released! with fixes for kitty graphics protocol rendering (no worries, we don't support the RCE parts ;)), an ergonomic/intuitive scrollback search and more!
grab it while it's still hot: slosh.foo/ ☕️
bug reports / feature requests welcome!
4
6
22
4,125
thanks for the quick response, David! noted. your little signature is of greater importance than getting a free and honest heads up to protect your user base.
I appreciate the offer, but that's not happening. I sign the work with my name because I have put everything into it, and I stand behind it personally. But I'll trade you with some good vibes, solid recognition, and knowing you're helping Linux win ✌️
31
6
159
22,922