Keith Ramphal

I've been posting a lot of tools that I've been building, the target for these tools are independent researchers, Small/Medium admins, and those who don't have the resources/needs of a full large enterprise. Here is a breakdown of what they are and what they do

@NathanMcNulty @MarkHunterOrr Oh good, so it still won't work, but we'll have a little copilot icon next to it.

@MarkHunterOrr It still feels like a half baked solution, but on the plus side, now I bet it will get attention. Not the attention it deserves mind you, but at least an intern with a Copilot+ subscription ;)

👀 Yeah...

@HackingLZ Claude needs to spend more time on a lot of things they're not doing.

Claude code desperately needs to spend more time with enterprises they’re begging for more end user controls around it.

@kasper_rt @ZackKorman @_winter_wonders If I write malware in Elixer, you know what? I deserve the win and let me go about my day.

@kasper_rt @ZackKorman @_winter_wonders Given that it kept breaking on my Elixer program for modeling power systems. I have no idea what they hell they could have done. Like there's "reasonable" and then there's "You're writing malware in Elixer im rejecting all things immediately"

claude has been like 400% stupider than normal today

@_winter_wonders @wbmmfq That's more useful than the OWASP list though

@wbmmfq it's been hallucinating on like the simplest questions like what's the owasp top 10 api list and it's like boiled chicken, herbs, assorted vegetables

@kasper_rt @ZackKorman @_winter_wonders support.claude.com/en/articles/82… They added a new guardrail system yesterday. It is very stupid. They should feel bad.

@ZackKorman @_winter_wonders They weighted the models IQ to overflow, going negative

@_winter_wonders They added new guardrails to protect us from ourselves or some other stupidity. It's actually breaking on a lot of my code. I know my stuff was garbage, but i didnt expect it to be flagged as malware.

@Mecha_Egirl Brilliant, truly brilliant.

@KeithRamphal I had one tell me yesterday it couldn't remove wording from a meme

So claude is now saying that searching for *anything* involving security is "Violative Cyber Content" Man I'm really glad there's companies out there to decide what I should know and how I should know it. /s

@cljack @edwardleetwtr I will have you know, I am a delight. Friendly and cheerful at all times.

@edwardleetwtr They usually let it slide if you don’t look scary like @KeithRamphal

Our flight is at gate C4. My second daughter said “Oh C4! Just like the [muffled sounds of being tackled by her sister]

So it turns out LLMs are alarmingly good at writing Elixer code. This is actually fascinating.

@IceSolst @jsark983 At that point you're just inflicting pain on that laptop.

@jsark983 (IT person installing crowdstrike on a laptop) “I’m pentesting this laptop” (I’ve actually witnessed this)

For the love of anything you believe in, can we please stop referring to anyone who has ever even briefly dabbled in offensive security as a “red teamer”? You’re part of the f*cking problem!!!

@0xTib3rius @hetmehtaa Also the ability to interact with people who are also taking the course.

@hetmehtaa Structure and confidence that the course isn’t full of hallucinations, plus the personal experience of the person teaching the course?

You paid $500 for that cybersecurity bootcamp/course. Claude teaches you the same concepts better, faster, and answers your specific questions. The bootcamp's moat was 'we gatekeep knowledge.' AI broke the gate. Why would anyone pay for courses anymore?

@HackingLZ Any situation where I think I need K8S is rapidly remediated by any attempt at installing K8S

I always enjoy these because I find new tools, then I also realize I only want to manage a limited number of things at home.

I can't think of a single reason to display the information in this way other than "it looks cool" and that perfectly explains the state of AI security today. From Crowdstrike's AI detection and response product.

@NathanMcNulty Are you saying with enough time and effort, we've found something that understands Microsoft's insane licensing.

Cut your cloud spending bills with this one weird trick! lol, honestly, I can't believe how well this worked 😅

@NathanMcNulty @skytaleSythe I have it generate markdown files that I convert to PDFs, I dont really (thankfully) have much use for word docs these days.

@KeithRamphal @skytaleSythe Claude is struggling over here. I gave it explicit instructions to only use bullet points, and it still uses numbers in places 🤷‍♂️ Having said that, Claude > ChatGPT > Copilot in my testing through this process for both Word and PowerPoint (all paid subs)

Feed M365 Copilot a simple markdown file asking for a Word doc, and of course it chokes and dies... It's truly impressive just how bad this product is :-/

@NathanMcNulty @skytaleSythe Claude my man, Claude.

@skytaleSythe To be fair, M365 Copilot seems to be the only one that can generate a Word document using only bullet points and not somehow mixing numbers in there randomly... 😂

Can anyone help my friend out? Dude helps me put on awesome contests every year at DEF CON and he's being screwed by his co-founder.

@nnennahacks @ZackKorman Yep! This is my area of research, increasing code quality and understanding about what is being generated.

@ZackKorman @KeithRamphal Thank you! Just followed

This is something to look into folks. Now that code quality has re-entered the AI trending topics. ⬇️