CTO @crashappsec. Past: Cofounder and Chief Scientist @capsule8, Hacker-in-Residence @NYUTandon, and other research, reverse-engineering, and exploit dev roles.

NYC
can’t tell whether this bullshit take that LLMs are the same as fuzzers conceptually (just another tool, nbd) is cope or actual ignorance
14
86
12,011
This is from Anthropic's Mythos preview post @ red.anthropic.com/2026/mytho…
🤔 I'd need to examine the bug, its setting, how much input/app state can be manipulated before I could say for sure.. but 3 bytes OOB is often 2 more than needed to get new primitives/code exec. I wonder if the team assessing this had any past experience manually shaping heaps?
1
1
9
2,188
... in IIS I think? Another hacker (whom I respect highly, left unnamed) bet me that the bug wouldn't see a real exploit written. It was unfair as I knew how close the exploit was. TL;DR it landed, and I worry the wisdom from that era is lost among the teams that need it most now
2
6
353
Alas it was a different time: the payout itself was another zeroday. And the hacker against whom I bet indeed made good on their end of the wager, dropping a kernel bug in the IRC channel for all to see! I'll see myself to the retirement home now.
1
3
210
🤔 I'd need to examine the bug, its setting, how much input/app state can be manipulated before I could say for sure.. but 3 bytes OOB is often 2 more than needed to get new primitives/code exec. I wonder if the team assessing this had any past experience manually shaping heaps?
2
2
24
10,073
Look at this goofy, sweet, awesome dog that needs a home. Are you considering getting a dog? Please consider adopting!
Replying to @notthesameone2
Saphire is back on the list:
4
6
4
827
Start your day with a little container sidechannel 0day, as a treat
Found a side-channel that lets containers communicate across isolation boundaries. No shared volumes, network, or privileges. Just POSIX advisory locks on /proc/self/ns/time. Built a working cross-container IRC chat to demonstrate. Works on default Docker/K8s. h4x0r.org/funreliable/
5
552
Brandon Edwards retweeted
❌ No type safety ❌ No argument count ❌ Can’t wrap one vararg API in another ❌ Can’t push/pop args or introspect You're stuck in a model where the caller has to be perfect. That’s not an interface, it's an improv show with segfaults. h4x0r.org/vargs/
2
1
362
Brandon Edwards retweeted
Today I have a more serious topic than usual, please consider reposting for reach: My wife and I are urgently looking for a specialist in neuropediatrics or a similar field for our autistic child with a diagnosed, but not further specified, movement disorder [1/3]
3
112
71
37,520
Brandon Edwards retweeted
wow this is the dumbest shit I have ever read. Tape is an amazing long term storage solution for records you can’t afford to lose. Also $1M is a drop in the bucket for government spending.
The @USGSA IT team just saved $1M per year by converting 14,000 magnetic tapes (70 yr old technology for information storage) to permanent modern digital records.
Community note
Despite its age, magnetic tape is still highly favorable for long-term, static data archives. It offers cost-effectiveness (cheaper than disk/cloud), longevity (outlasts disk drives), offline security (resists cyber threats), and high capacity (up to 50TB per tape). research.ibm.com/blog/tape-dens… corodata.com/tape-backups-s…
94
93
2,778
185,492
Brandon Edwards retweeted
Take a listen to Mr. Himes talking to Trump's top intelligence officials just now... Worth the two minutes.
97
1,146
2,894
97,103
Brandon Edwards retweeted
every politics tweet on here now is like "trump signs executive order shutting down electrical grid" and all the replies under it are just thank you jesus we have prayed for this
347
13,919
168,838
3,436,865
Brandon Edwards retweeted
Sigh...not that it matters or anything but we have a whole array of underwater microphones to spot subs. Remember the Titanic sub that imploded and the Navy was like "yea we have the audio"? I know this and I'm just a guy who annoys Navy officials and reads books...
Markwayne Mullin says America needs an Iron Dome in case Russia nukes us from waters "just off our shores"
26
25
279
21,973
Who know what's crazy? When you say you don't want titles or money but space to work on something important without disruption, people are looking at you like you are crazy. This is why America is losing.
16
26
489
26,411
Brandon Edwards retweeted
If you thought that there were privacy risks from TikTok, imagine the privacy risks from using an *online* LLM service that is run in China... Already people are in the habit of using LLMs to summarize uploaded documents, etc. The time to focus on private AI inference is *now*.
7
21
2,101
Brandon Edwards retweeted
My #deepseek take as no ai knowledge: turns out learning how computing works in low level is still very important.
1
3
776
Brandon Edwards retweeted
"We've reduced our support load by 99.9% using AI" In reality... your customer can't get ANY support now I'm getting tired of these terrible AI bot rollouts... Example:
109
439
5,414
258,050
Brandon Edwards retweeted
What really frighten me is that people no longer know what "liberalism" is. Among the uneducated public, it's been warped to mean "left-wing". Among the educated, it means tolerance, individual rights, rule-of-law, democracy -- the blueprint for how western society's work. It's like sportsball: different teams fight to win the game (where political parties are the teams), but "liberalism" is the rules of the game. Internationally, Russian and China are the major threat to liberalism. Domestically, it's wokism and Trumpism. Woke Marxism dominates college campuses to a toxic extent. Trump appeals to the most ignorant and brutal of our society. Liberalism is what the never-woke and never-trump centrist people fight to defend. But we can't even have a simple conversation about it because for some reasons, civics classes in high school have stopped teaching "liberalism".
Just 25 years ago, liberalism was the world's dominant ideology. Now, in 2024, it's on the run everywhere, pushed underground by a combination of 21st century technology and the power of the Chinese Communist Party. noahpinion.blog/p/liberalism…
30
56
470
75,774