ameya

Just blogged about an RCE in GitLab's CLI tool that I found last year, soon after joining their amazing security team. blog.takemyhand.xyz/2023/07/remote… #bugbounty #bugbountytips

I cant stand these millennial tech companies with these 'cute' nonsense names like "granola" or "clay." if I had a company youd see me calling that shit the American Computing Corporation. National Electron. United Tabulation. thats a name with some chest hair

IMPORTANT message for everyone using Gmail. You have been automatically OPTED IN to allow Gmail to access all your private messages & attachments to train AI models. You have to manually turn off Smart Features in the Setting menu in TWO locations. Retweet so every is aware.

when bro suddenly starts submitting PRs with detailed descriptions, correct grammar and casing, and testing steps

How ssh got port 22 assigned!!

aUtHenTiCaTed RCE Citrix?

@PhonePeSupport when do you plan on settling this gold sale amount of 1L? It has been a month and I still haven’t received the money. Pathetic.

@0xLupin @defcon Do you have the slides hosted somewhere? Looks like a great talk.

My @defcon talk about how we made around $150k in Bug Bounty only with Denial of Services is out ! Let me know what you think 😁 youtu.be/b7WlUofPJpU?si…

Secret Service should have a bug bounty where if you hit someone under their protection with a paintball gun you get $10k

Indie Hacker Pro Tip: Monetize your free endpoints with sponsored messages.

Her: take me to somewhere expensive Me:

GPT is having a profound effect on how students write. Its verbose style, full of cliches and 'fancy', out of place vocabulary is in every paper and draft I read. A few years back, there were grammar errors and awkwardness -- but at least people had their own voice. Now, scholarship is getting full of robotic triviality.

HOW TO ROTATE YOUR VULNERABLE YUBIKEYS (PLEASE LIKE AND SHARE)

*sigh* I made this for you all.

appsec be like:

@joaxcar not currently, i’ll let you know when it surfaces!

@0xtakemyhand Do you know if the full interview is available somewhere?

🫶🏻

@joaxcar It’s a heavily clipped version of a ~50min interview

@0xtakemyhand Interesting! is it part of a full interview or is this the whole thing?

exploit developers reading yet another RFC to see how IPv6 option processing works

Logging into Xitter and seeing thousands upon thousands of people, who have never written a single line of code their entire life and can barely use a computer, giving their expert input into kernel-mode programming