Corben Leo
4.3K posts

Corben Leo
@hacker_
I hack stuff legally; co-founder @boringmattress

Launched a new instagram account last week with my friend where we do AI voice skits 5 posts. 50k followers. 1 post at 10M views





In 2010, WikiLeaks released a classified document. A list of infrastructure critical to U.S national security. The government listed a Trans-Atlantic cable. 3 years ago, 19-year-old me gained ADMIN access to that cable (and another; shared codebase). 🧵Here's how I found it












bugcrowd.com/blog/savant-bu… so the bug bounty community freaked out a few weeks ago when hackerone had a single slide that talked about using AI agents for testing based off our reports. bugcrowd's new strategy sounds even more brazen, sly and egregious. submit reports -> your "signals" (aka creative thought process and work) feed into their AI agents -> AI agents find bugs without you (unclear incentive structure). that's if the technology even works though lol. these days I have trouble even adding collaborators in reports without the app erroring out. the messaging is so much more slick too. "connect those signals" - does that mean they are training on our reports? at least whoever did this PR release was careful to not blatantly say that they are training on our reports. but lol what does connecting those signals actually mean at the end of the day? extremely unclear if they train on our reports. this requires actual transparency from both platforms, not just marketing, and messaging tactics that you use when you're trying to convince you're not a wolf in a sheeps clothing.

SITUATION UPDATE: Fable 5 will only be included in Claude plans until June 22, after which you will have to pay API pricing.


6e4f2c98df34289e9644984fb38e8918b69ec03b1f1cfa772813096c3ea674dc poc․py









