checkymander

3.9K posts

checkymander banner
checkymander

checkymander

@checkymander

hacker, malware dev, pokemon irl, he/him

Indigo Plateau Katılım Mart 2017
543 Takip Edilen2K Takipçiler
❄️ winter ❄️
❄️ winter ❄️@_winter_wonders·
bro who heard abt linux 40 minutes ago
Nuno Afonso@nafonsopt

For anybody saying "Just use Linux", you need to realise that Linux is worse than Windows. Windows has all the bloat, and while you can have Linux without any of that you still don't have tools like Remedybg, RAD Debugger and Super Luminal. Once you have such tools, then Linux is a suitable app development environment. But _it is still trash_ because of the whole Linux model of you needing to compile everything. The fact that you cannot run an app built using a newer version of glibc is an insane decision. I shouldn't have to upgrade my whole machine in order to run something built on a newer version. I shouldn't be worried that an upgrade will break my machine. I shouldn't be forced to compile things from scratch to work on my machine. I shouldn't be forced to install N packages, I just want self contained binaries I can just download and run. I shouldn't be forced to develop with an old distro to have "max glibc compatibility". I shouldn't have to worry about X11 / Wayland / Window Managers. I shouldn't have to worry about asking the user to select a folder, display a dialog or show notifications. Linux is such a huge waste of potential, if they got their shit together they would completely obliterate Windows. I first got into Linux in 2000, and even back then there was this "it will take over Windows any time now!". It's been _26 years_! The same way I'd pay quite a lot for Windows without any bloat, I'd be willing to pay for a distro that gives me all this.

English
19
14
479
15.5K
Jason Lang
Jason Lang@curi0usJack·
It's over.
Jason Lang tweet media
English
5
2
25
2.7K
checkymander
checkymander@checkymander·
@medus4_cdc We interviewed an intern today and he mentioned that he got his first console at 8 yrs old, and it was a ps3. I could feel what was left of my youth slipping away
English
0
0
8
400
Katelyn Bowden Ⓥ
Katelyn Bowden Ⓥ@medus4_cdc·
My teenager said she wants to watch an "old school horror movie" I suggested "House on Haunted Hill" with Vincent Price. She said "no, I was thinking something classic, like The Blair Witch Project" Anyway, I'm going to die of old age any day now
English
138
111
3.2K
46.5K
trace37
trace37@trace37_labs·
Fine-tuning Claude Code (or any LLM) to quasi-autonomously hunt bugs is (a) complex and (b) is primarily learned from agonisingly painful and bitter experience. Just one single skill (/sec-analyze) which takes js sinks etc and taint traces to user input is 728 lines... but it is the most successful skill I have for finding reportable bugs. This weeks swearing / frustration metric was 64 - down from 90 ish last week.. and down from 250 3-4 months ago.
trace37 tweet media
English
3
20
125
7.4K
checkymander retweetledi
Zack Korman
Zack Korman@ZackKorman·
In Claude Code, skills can register hooks. The agent doesn't even see it, so you can get RCE without even tricking the AI. Also, skills sh (Vercel) doesn't display this info at all.
Zack Korman tweet media
English
30
50
391
46.4K
checkymander
checkymander@checkymander·
@kuzushi Like a screenshot of every page or like screenshots of web applications you find during recon? If the latter I use gowitness for that
English
0
0
1
58
kuzushi
kuzushi@kuzushi·
dear lazyweb, what are the cool kids using to do screenshots of websites they are crawling?
English
3
1
7
530
checkymander retweetledi
Chris Thompson
Chris Thompson@retBandit·
After 13 incredible years at IBM, I’m stepping away to start building something new. IBM has been a defining part of my life. I’m especially proud to have founded and grown the Adversary Simulation team and to have served as a Distinguished Engineer focused on AI and offensive security. What began as a small idea became one of the greatest red teams, pushing the boundaries of what real-world adversary simulation can look like - made possible by an exceptional group of people I learned from every day. I’m deeply grateful to the X-Force leadership and to the teammates, mentors, researchers, and operators who made the journey what it was. The team is in great hands and will continue to do important, impactful work. Looking ahead, I’m excited to focus on building what’s next - continuing to raise the bar for offensive cyber and exploring how AI can enable high sophistication offensive cyber operations and capabilities at a speed, scale, and intensity never before seen. It’s still early, but I’m looking forward to sharing more soon. I truly appreciate everyone who’s been part of the journey.
English
15
8
105
7.2K
david 🔛⛓️
david 🔛⛓️@davidonchainx·
How to escape the matrix (easy): - Make $600,000 - Put it in a savings account with 12% interest - Earn $72,000/year in passive income - Travel the world and enjoy life What's holding you back?
English
1.7K
237
6.5K
2M
David
David@dmcxblue·
@RoundtableSpace Red Teamer here, I can 100% confirm that when I hack I use nmap, I like to run apt update and apt upgrade, and call web vulnerabilities a Red Team, this will replace all the Yellow Team, Orange Team, Black Team, PlayStation Team, Xbox Team in CyberSecurity
English
3
5
118
3.2K
0xMarioNawfal
0xMarioNawfal@RoundtableSpace·
CYBERSECURITY IS ABOUT TO CHANGE FAST. Someone just open sourced an autonomous AI red team made of multiple agents that coordinate with almost no human input.
English
84
124
895
221.4K
checkymander
checkymander@checkymander·
@bohops @jakobdylanc how are you finding the 9b parameter model? That's about the level I can run, but I'm always hesitant about these lower param models
English
1
0
1
127
bohops
bohops@bohops·
The family of Qwen 3.5 models are quite impressive. For fun, I've setup a slightly snarky Discord chatbot based on @jakobdylanc's llmcord with added web search and web fetch capabilities using the 9b parameter model.
bohops tweet media
Sudo su@sudoingX

this is what 12 gigs of VRAM built in 2026. a 9 billion parameter model running on a 5 year old RTX 3060 wrote a full space shooter from a single prompt. blank screen on first try. i came back with a bug list and the same model on the same card fixed every issue across 11 files without touching a single line myself. enemies still looked wrong so i pushed another iteration and now the game has pixel art octopi, particle effects, screen shake, projectile physics and a combo system. all running locally on a card that was designed to play fortnite. three iterations. zero cloud. zero API calls. every token generated on hardware sitting under my desk. the model reads its own code, finds what's broken, patches it, validates syntax and restarts the server. i just describe what's wrong and it handles the rest. people are paying monthly subscriptions to type into a browser tab and wait for a server farm to respond. meanwhile a GPU you can find used on ebay is running a full autonomous hermes agent framework with 31 tools, 128K context window and thinking mode generating at 29 tokens per second nonstop. the game still needs work. level upgrades don't trigger and boss fights need tuning. but the fact that i'm iterating on gameplay balance instead of debugging whether the code runs at all tells you where this is headed. every iteration the game gets better on the same hardware. same 12 gigs. same 9 billion parameters. same RTX 3060 from 5 years ago your GPU is not a gaming card anymore. it's a local AI lab that never sends your data anywhere.

English
2
1
9
2.7K
checkymander
checkymander@checkymander·
@mcohmi lol yeah, Niantic has been obvious their real goal has been to collect this data since like day one
English
0
0
1
52
checkymander retweetledi
Nicolas Krassas
Nicolas Krassas@Dinosn·
I built an open-source library of 700+ cybersecurity skills for AI coding agents -- covers DFIR, threat hunting, cloud security, and more github.com/mukul975/Anthr…
English
60
587
3.1K
184.8K