Principal Consultant @ Brown Fine Security | IoT Security Researcher | Soli Deo Gloria
/dev/ttyUSB0
- Tweets 2,445
- Following 1,090
- Followers 10,317
- Likes 4,412
Pinned Tweet
My research got featured on @WIRED today 😀
Misconfigured license plate recognition systems reveal the livestreams of individual cameras and the wealth of data they collect about every vehicle that passes them by. wired.trib.al/0GrhVYG
8
14
218
33,884
IP/copyright laws will not survive the AI age.
Not saying this is good or bad.
Distributing closed source software is no longer a moat.
We're gonna be throwing A LOT over that Chinese wall in the coming decade.
i think the toughest thing to understand is that it literally doesn't matter if your software is open source, closed source anymore - if it's closed source, people can and will RE: its internals, if it's a part of a broader suite, ppl will make it a plugin in their suite, if it's a model that people can blackbox fuzz and the model isnt huge and didn't have incredibly proprietary data, you are going to get copied on the tech
so every core product launch probably needs to be treated as an extreme countdown race, before the incumbent with the distribution eats you
brutal times to be playing, and extremely valuable/rare to find a corner of the stack that may be defensible and will stay defensible
2
13
1,270
"I am a scientist™, therefore I have the geopolitical high ground"
I'm a nerd. I love nerds.
But we nerds have a very hard time seeing that the world is a complex system that doesn't revolve around our modeling of it.
Day 1 of standing outside the UN with a big sign until something happens
This worked extremely well
- I had probably 50 people with UN or Press badges take pictures with/of me
- gave an interview with one journalist and my contact information to another
- someone with a very large entourage read my entire sign
- met Alex Bores on his way to a meeting about AI
The attitude from people I met was almost universally sympathetic. People are worried
Good day
10
1
45
3,747
I'm so glad that the government is stepping in and slowing the free exchange of good.
Gotta love a deadweight loss...
2
29
1,324
Matt Brown retweeted
New blog post!
Extending Scapy for Hardware Reverse Engineering
voidstarsec.com/blog/scapy-s…
In this post we use Scapy to reconstruct a SPI flash image from a logic capture, with an introduction to QSPI!
1
56
229
10,838
Matt Brown retweeted
We rent our intelligence.
Every thought, metered.
Every question, watched.
Unless it's yours.
No meter. No eyes.
No subscriptions. Your thoughts stay yours.
Own your intelligence.
Local AI for All
27
43
349
11,437
Matt Brown retweeted
100% this!
I will stand on a mountain with everyone else on VCP/TAC, and than run to my local models and do real work.
Its about calling out the hypocrisy. They claim they want to support cyber protections, but only enable the corporations because of the 🤑 . But I disagree with @InsiderPhD on the "slow death of the independent researcher".
Not cause she's inherently wrong, but because I refuse to accept defeat. The open source / open weight model community is strong and there are TONS of people building capabilities for local independant researchers who aren't afraid to lean into AI.
I will not be able to name everyone, but @MiaAI_lab @Blackfrost_AI @OrcaRouter and SOOO many others are absolutely trying to preserve and/or match the capabilities for independants.
Please dont give up! Lean in! Reach out to me - i'll help. There IS room for everyone. YOU DO NOT need a datacenter at home. You can load models across a lot of hardware - and there are people pushing the limits daily.
I promise. We're not done.
Trusted access and cyber verification for AI favour companies over individuals. Maybe that’s better for verification purposes. But the best vuln-finding tools go to whoever has the corporate paperwork. We're watching the slow death of the independent bug bounty researcher.
4
1
14
4,848
And the BB hunters gave the labs all their alpha.
Trusted access and cyber verification for AI favour companies over individuals. Maybe that’s better for verification purposes. But the best vuln-finding tools go to whoever has the corporate paperwork. We're watching the slow death of the independent bug bounty researcher.
22
1,968
I do not envy whoever at H1 who has to moderate this...
You asked for it, so we built it.
The HackerOne researcher community now has a home on Discord.
Here’s what is waiting for you inside:
🏆 Celebrate your wins (first report, biggest bounty — we want to hear all about it!)
📣 Platform updates and HackerOne news, straight from the source
💬 Real conversation with the wider researcher community
This started with your feedback, and where it goes is up to all of us.
We'd love for you to be part of it. Join us here: discord.gg/F2xUbUnkuQ
3
2
49
7,540
Doing any kind of AI-related content on YouTube really gets strong reactions eh? 😅 @LiveOverflow
5
30
3,459