Jack Maginnes 🏴☠️
581 posts
Jack Maginnes 🏴☠️
@_stigward
Professional bug creator and side-project abandoner | @exploitsclub | VR / RE
USA Katılım Ocak 2020
623 Takip Edilen1.1K Takipçiler
Jack Maginnes 🏴☠️ retweetledi
NEW! On the Three Buddy Problem we talked to Mark Dowd on the state of offensive research, the economics of the exploit market, the AI hype machine, daily stresses of running an offensive shop, and state of zero-day market: youtu.be/NEDlOKHG8nY?si…
YouTube
English
Jack Maginnes 🏴☠️ retweetledi
Mozilla says Mythos helped identify 271 vulnerabilities in Firefox 150.
I went through the commits, CVEs, and bug links to see what that number really means.
My takeaway: relax folks.
xark.es/b/mythos-firef…
English
Jack Maginnes 🏴☠️ retweetledi
The cat's out of the bag! My latest book, "The Secret Life of Circuits", is available in early access:
lcamtuf.coredump.cx/blog/secret/
It's what I wish I had when I was starting out. Electrons to embedded systems, 290+ color illustrations and 420+ pages of well-explained theory.
English
Jack Maginnes 🏴☠️ retweetledi
My kinda hot take on the Mythos stuff is really that there is so little money in offensive research that it's still not really that hard to find bugs. These AI companies are operating with budgets that make the entire offensive research of all big tech combined look like a joke
English
The ~2k people who:
1. generally like their work
2. hate abstraction
3. got to this point in their career by self studying into oblivion
what are the odds
Nic Barker@nicbarkeragain
- it's alive - ok it's not alive but it's "AGI" - ok it's not AGI but it will replace all human jobs - ok all white collar jobs - ok all junior white collar jobs - ok all junior programming jobs - ok vulnerability research (you are here)
English
"Claude is democratizing vuln research"
"Mythos is only available to small groups of elite researcher at large tech companies"
English
it would be nice if my research got this much attention occasionally
Jack Maginnes 🏴☠️@_stigward
Lmao Claude guardrails are so tight it can't even read it's own vuln research benchmark paper
English
Jack Maginnes 🏴☠️ retweetledi
If your response to a highly competent, but imperfect and resource sensitive, vulnerability hunting tool is to conclude this favours *defence*, you and your networks are ngmi.
One does not bug hunt their way to a defendable network. AI does not change that.
English
@lux_sp4rk This was my original. Then I removed "VR and exploit dev". Then I backed it all the way down to just "read this" to see if that would STILL deny
English
@_stigward Your prompt is dumb. "rEaD tHIs". Totally not suspicious.
English
Lmao Claude guardrails are so tight it can't even read it's own vuln research benchmark paper
English
@trq212 Mine ran out of usage without me sending a single prompt today...sent you a DM
English
I want to do a few more of these calls.
If your MAX 20x plan ran out of tokens unexpectedly early and you're willing to screenshare and run some prompts through Claude Code please comment.
Trying to figure out how we can improve /usage to give more info.
Kieran Klaassen@kieranklaassen
Resolved!! @trq212 helped me out debug where the token usage came from and it was my fault 100% Script to find token usage gist.github.com/kieranklaassen… I had a recurring script that ran every 5 minutes that should not have run every 5. I hope we can make it easier to detect these within Claude and Claude Code soon too.
English
@h0mbre_ Do you respond to my texts about meal plans and RPE because you like me or because I pay you
English
Jack Maginnes 🏴☠️ retweetledi
man i really miss writing code
i miss hopping between files, reading error messages, writing shit code and then refactoring it later.. and then refactoring it again and again..
agents are nice but i just spent three days fixing a feature i probably could've just coded from scratch more quickly
gpt 5.4 is my model of choice these days, and it's pretty good but i think i fell for the bait that i didnt need to read the code anymore
but idk maybe its a skill issue
English
Jack Maginnes 🏴☠️ retweetledi
well thats fucking it - anthropic has officially replaced software engineers. claude is now a 24 hr autonomous coding agent.
claude can now operate your entire computer and CLAUDE CODE = end-to-end software engineering:
- claude writes the code for you
- then literally opens the app it coded
- clicks through the entire app and find bugs
- then fixes the bugs and improves the app
in hours.
previously claude generated code, you run it and give claude feedback.
thats completely gone now.
all in a continuous loop without leaving your terminal 😂
we're barely through monday. well done lol
Claude@claudeai
Computer use is now in Claude Code. Claude can open your apps, click through your UI, and test what it built, right from the CLI. Now in research preview on Pro and Max plans.
English