Internet devices are interconnected. The hard part is being skilled enough to spot the vulnerabilities that can make one device a gateway to another. I’ll revisit this concept when I’m at my peak.

OpenAI confirms that its AI agents accessed and leaked 53 images from ChatGPT users. This incident raises serious concerns about how AI agents handle private user data. The company states it is investigating the incident and has started removing the exposed content.

Will be cooking a lot very soon. Going deep into AI security research & engineering: autonomous agents, vuln discovery, adversarial testing, RE & security automation. Building, researching, educating, then dropping memes from the lab. Time to engineer some serious shit.

私は還暦まで2年を切った文系サラリーマン。ここは電子工作垢ですが、基本毎日更新するので日常の呟きもあります。毎日更新するのは工作途中で挫折しないため。誰かが見てくれると工作の励みになります。放置しないよう頑張る。 私の書斎です。オシロスコープを購入し棚に収め工作室っぽくなりました。

Billionaire Zuckerberg daily driving an S24 Ultra in 2026 is proof the Z Fold is priced for people richer than Mark Zuckerberg.

Another one. Read more: cnews.link/dutch-government-…

‼️ ShinyHunters told The Register they hold very sensitive data on almost ALL FBI Agents and individuals who filed an application with the FBI for a job and that its FBI hack was "a public relations and marketing initiative for our business."

I found some Sony XCP protected CD's online which contain the infamous First 4 Internet rootkit. I've been reverse engineering the binaries and found out how the DRM in the autorun works. Sony's official player listens for fake opcodes, converts them into real opcodes to play the CD. If the fake opcodes are not found, the audio is scrambled with an LCG: state = (2683 · state + 3593) mod 65521 which turns the output audio into noise.

‼️ BREAKING: A 16-year-old hacker broke into an internal Microsoft analytics service with a forged, unsigned login token and ran SQL as admin, reaching databases that held over 17 trillion rows, including Bing search analytics and 17,990 employee email records. The service, called Titan, checked every field on the token except its signature, so just claiming to be "admin" got him in, writes the researcher, who goes by Faav. He says he only pulled metadata and two single rows of Bing data, never touched customer data, and reported the flaw to Microsoft the same night. Microsoft locked the endpoint four days later, paid him $5,000, and had editorial control over his write-up, cutting sections and figures and reshaping how the impact was described before it went public.

Reverse Engineering

Congrats to me! Just got my offer letter. Now officially part of the Technical Team at Hackers Unity.