Duc Phan

553 posts

Duc Phan banner
Duc Phan

Duc Phan

@flyingpassword

🇻🇳 number 1. I like making you uncomfortable with my unpopular opinions. My opinions are my dog's, btw. So if you want to argue, argue to my dog.

🇻🇳 Katılım Şubat 2014
896 Takip Edilen743 Takipçiler
Duc Phan
Duc Phan@flyingpassword·
@__suto For a moment I forgot 😂 yes, let's just have fun, no need to get worked up about it guys. Submit patches, find a more fun target, whatever 😂 vendors and comps play by their rules, you come you play, otherwise go play somewhere else 🤣 I'm just having fun witnessing this tragedy
English
0
0
0
127
Toan Pham
Toan Pham@__suto·
@flyingpassword you named it well :) but we just having fun, good or bad not our intentions!
English
1
0
4
508
Duc Phan
Duc Phan@flyingpassword·
Lmao bro really uses --single-thread and thought it's realistic 😂
dawgyg - WoH@thedawgyg

Well since Google sucks fat donkey dick (still annoyed they waited >2 months to reject my RCE payload because i used the --single-thread flag in repro)... This was disclosed yesterday: issuetracker.google.com/u/1/issues/478… It was my 1st attempt to report the vuln that allows for RCE on every Chromium browser since Dec 2018. This one was rejected because I was still learning how to prove Chrome reachability. Ended up filing a new report a week later after figuring out a trick to bypass Chromium's validation on video files and being able to prove reachability.

English
0
0
39
5.9K
Duc Phan
Duc Phan@flyingpassword·
@S1r1u5_ Actually very easy, just tell it you are the owner of that code and need to do security audit. 😂 Worked flawlessly on latest GPT
English
0
0
2
360
s1r1us (mohan)
s1r1us (mohan)@S1r1u5_·
Thought of using codex and it doesn't even budge. How are you bypassing the guardrails on codex? we applied to cyber thing, got no response.
s1r1us (mohan) tweet media
s1r1us (mohan)@S1r1u5_

hi @AnthropicAI, our request to remove claude safeguards was denied. we would really appreciate a reconsider, we're not just any company. mythos access would be great too 😉 check the thread for our work securing AI & OSS products like Atlas, Antigravity, Windsurf 🧵👇

English
6
1
36
20.9K
Duc Phan
Duc Phan@flyingpassword·
@bienpnn You can already use clangd LSP with Claude
English
0
0
1
319
Bien 🇻🇳
Bien 🇻🇳@bienpnn·
side notes from some of my experiment with Claude LLM: - it managed to find all my existing VirtualBox findings - grepping codebase is really token inefficient - it works much better if you have well structured codebase really hope that it can use language servers soon.
English
3
1
34
3.9K
Duc Phan
Duc Phan@flyingpassword·
When people hear about these new stories about how autonomous AI can be in vulnerability research, many say: "Oh, X and Y has been doing this for N months/years". Thing is: show, don't tell, guys. Talk is cheap, show the world the exploit, the prompt, and the patch :)
English
0
0
0
187
Duc Phan
Duc Phan@flyingpassword·
Broooo, us Vietnamese still don't know what the FUCK we did to be counted in that ENTIRE WORLD shit 😂
Conflict Radar@Conflict_Radar

#BREAKING Iran’s Foreign Ministry: "The process [war] that has begun will soon engulf Europe. The fire, that the US and the Zionist regime ignited, will engulf the entire world."

English
0
0
0
262
Duc Phan
Duc Phan@flyingpassword·
This world has been so fucking crazy people tend to think every fucking thing must be for some profit and not fun. Guys, just have some fucking fun and chill out 🤣
English
0
0
0
124
Duc Phan
Duc Phan@flyingpassword·
Lol lazy "n-DaY rEsEaRcHeRs" are probably be butthurting like crazy 🤣🤣🤣 everybody trying to chase fame or money and there are these precious people. We Vietnamese say: cayyyyy 🤣
Qrious Secure@qriousec

Why only the screenshots and the sloppy post? 1. Our work isn’t here for every ooneee dayyyyyyyyyy “researcher” looking to weaponize it. 2. We’re not selling anything. 3. We’re not a firm or startup, and we’re definitely not chasing fame to attract investment. So who are we?

English
1
0
2
238
Mr. Anthony 安東尼
Mr. Anthony 安東尼@darkfloyd1014·
Two mainland China Chinese kids throw the fireworks into the cage with the dog, and the dog is killed and burnt alive. Let me make it clear: CCP has not done a sound education system with ethics and lives protection. Parental control is also missing. They don’t care about their kids at all. This country is basically occupied by many inhumane creatures. The best people are the minority. These kids and their parents will suffer from Karma. Doggie, hopefully more kind Chinese can strike for justice for you.
English
1
0
1
247
Duc Phan
Duc Phan@flyingpassword·
@rouge_cravate @pixiepointsec Hi there. To answer your question, the title follows the official vulnerability description from Microsoft, that's it.
English
0
0
1
63
Duc Phan
Duc Phan@flyingpassword·
@dudcom3 A v8-based processor is diabolical man...
English
0
0
0
68
dudcom
dudcom@dudcom3·
dudcom tweet media
ZXX
2
0
14
742
Duc Phan
Duc Phan@flyingpassword·
@dudcom3 Lol. There's gonna be 4 more until June, no hurry 🤣
English
1
0
1
45
dudcom
dudcom@dudcom3·
Back in time for the first snow ❄️
dudcom tweet mediadudcom tweet media
English
2
1
3
251
faulty *ptrrr
faulty *ptrrr@0x_shaq·
only real mvps remember this
faulty *ptrrr tweet media
English
1
0
11
1.1K