Junaid Loonat

2.1K posts

Junaid Loonat

Junaid Loonat

@junaidloonat

Leading the vulnerable to a MORE than adequate level of security

Firewall -| Me |- Hard Place Katılım Kasım 2009
100 Takip Edilen140 Takipçiler
Junaid Loonat retweetledi
How To Prompt
How To Prompt@HowToPrompt__·
A toothpaste company has quietly killed the entire market research industry and nobody is talking about it. Colgate published a paper showing you can predict real purchase intent at 90% accuracy by simply asking LLMs to roleplay customers. And this is beyond insane. If you ask an AI, "Rate this product from 1 to 5," it gives safe, middle-of-the-road garbage. So researchers invented a method called Semantic Similarity Rating (SSR). Instead of asking the AI for a number, they asked it to roleplay. They gave the LLM a demographic profile. They showed it a product concept. And they asked it to write down its raw, unfiltered thoughts. Then, they used a semantic model to translate those written thoughts into a numerical score. The results are staggering. Tested against 57 real corporate surveys and 9,300 actual human responses, the synthetic AI consumers matched real human buying behavior with 90% reliability. They perfectly mirrored how different age brackets and income levels react to price changes. And they provided detailed, qualitative feedback that was deeper and more critical than what actual humans wrote. This destroys the economics of traditional market research. You don't need to wait a month to see if a product will sell. You can simulate 1,000 hyper-targeted customer interviews overnight. You can A/B test pricing across every demographic instantly.
How To Prompt tweet media
English
227
940
7.6K
697K
Junaid Loonat
Junaid Loonat@junaidloonat·
@dcuthbert The opening comment alone is packed with gold, including: "Make expensive boxes tell the truth" Despite all the advances and incidents in our field, we're still needed to operate as the reality check (aka "hammer") "...If it had a compliance department" Never too late :-)
English
1
0
0
33
Junaid Loonat retweetledi
Daniel Cuthbert
Daniel Cuthbert@dcuthbert·
Sorry, not sorry. GOBBLES4LYFE That was fun to do
Daniel Cuthbert tweet media
English
4
5
19
4.8K
Junaid Loonat retweetledi
cr3ghost
cr3ghost@cr3ghost·
Probably the best free Windows usermode exploit development training in the world. 41 tutorials. 17 years. Stack overflows. SEH exploits. Shellcoding. Egg hunting. ROP chains. Heap spraying. Unicode exploits. Bypassing DEP, ASLR, SafeSEH, SEHOP, stack cookies. Integer overflows. Memory corruption root cause analysis. Win32 and WoW64. Metasploit integration. WinDbg automation. mona.py v1 through v3. Updated in 2026 for Windows 10 and 11 x64 with video walkthroughs and AI-assisted crash triage. Free. No paywall. No login. corelan.be/index.php/cate… Author: @corelanc0d3r #ExploitDevelopment #ReverseEngineering #InfoSec
cr3ghost tweet mediacr3ghost tweet media
English
2
78
383
15K
Junaid Loonat retweetledi
𝕡𝕨𝕟𝕚𝕖
𝕡𝕨𝕟𝕚𝕖@0day_ninja·
The Secure Boot master key used to verify firmware integrity across hundreds of devices was a test key generated by AMI, labeled in the certificate itself as "DO NOT TRUST." Vendors were supposed to replace it with their own keys before shipping. Most did not. The key ended up in a public GitHub repository and was sitting there exposed before anyone noticed. Devices from Acer, Dell, HP, Lenovo, Intel, Gigabyte and Supermicro were all affected.
English
6
63
623
41.2K
Junaid Loonat retweetledi
Andy Greenberg (@agreenberg at the other places)
Developers from Signal (including its protocol's co-creator) along with Microsoft and Harvard unveil Encrypted Spaces, an open-source codebase for a new generation of private collaboration apps. Think Slack, Discord, Google Docs, all end-to-end encrypted. wired.com/story/signal-a…
English
3
41
163
40K
Junaid Loonat retweetledi
SpecterOps
SpecterOps@SpecterOps·
MSSQL has always been a favorite target. Now it ships its own egress channel. @gershsec's latest research breaks down how SQL Server 2025's native AI features enable exfil, NTLM coercion, and C2 transport, all functioning as intended. Read more 👇 ghst.ly/4e2L3JX
English
0
65
223
16.3K
Junaid Loonat retweetledi
Ben Goggin
Ben Goggin@BenjaminGoggin·
We tore down the "assembled in America" Trump phone, X-rayed it, and conducted a technical analysis. It is nearly identical to the HTC U24 Pro, which is made by a Taiwanese company with Chinese parts. Read the full analysis here: nbcnews.com/tech/gadgets/t…
Ben Goggin tweet mediaBen Goggin tweet mediaBen Goggin tweet media
English
75
781
3.8K
238K
Junaid Loonat retweetledi
Dominic White 👾
I audibly eyeroll when most cyber people talk about post-quantum crypto, and it's even worse when they're talking big consulting engagement to do what? - update some openssl packages or makes a TLS key exchange explicit? Now you can give them pqc4free github.com/singe/pqc4free
English
0
4
5
617
Junaid Loonat retweetledi
Dan Guido
Dan Guido@dguido·
I started blogging again! Short posts while I get my writing muscles strong again. Here's one about a scholarship program for hackers that I started at my high school (@mineolahs): illusivedan.com/writing/hacker…
English
3
3
37
3.3K
Junaid Loonat retweetledi
DARKNAVY
DARKNAVY@DarkNavyOrg·
While Mythos showed what frontier model might become, we asked a different question: With a dedicated security harness, can open-source LLMs approach Mythos-level vulnerability research on real targets? Meet deepsec, DARKNAVY's attempt to answer. darknavy.org/blog/deepsec_c…
English
1
24
113
10.8K
Junaid Loonat retweetledi
Geoffrey York
Geoffrey York@geoffreyyork·
Good news in South Africa: the murder rate has sharply declined. Key factors: better high-visibility policing, and the end of daily electricity cuts, according to crime experts in the analysis below. It's important for us to acknowledge good news when it happens.
Daily Maverick@dailymaverick

Why is our murder rate declining so quickly? #Echobox=1780892107" target="_blank" rel="nofollow noopener">dailymaverick.co.za/article/2026-0…

English
18
279
674
33.5K
Junaid Loonat retweetledi
lazyming
lazyming@vn_lazyming·
found a race condition in net/can, popped root on RHEL latest (default config, works on most distros). felt goood but. turns out the kernel AI on lore already caught it and it's being patched rn 🫪 still counts. probably fine for a 3-month intern. Gonna go buy myself a snack🍿
English
4
4
37
3.9K
Junaid Loonat retweetledi
Zack Korman
Zack Korman@ZackKorman·
Cybersecurity (noun): The process of stitching together multiple black boxes and hoping security pops out.
Zack Korman tweet media
English
41
23
271
25.7K
Junaid Loonat retweetledi
John Carmack
John Carmack@ID_AA_Carmack·
I admire Fabrice Bellard. He is almost certainly a better overall programmer than I am.
Spencer Baggins@bigaiguy

A French engineer who lives quietly in Paris has spent 30 years writing software that the entire internet now runs on without knowing his name. He wrote the code that streams every YouTube video, every Netflix show, every TikTok clip. He wrote the code that runs the virtual servers underneath AWS, Google Cloud, and Microsoft Azure. He calculated more digits of pi than anyone in history. He has no Twitter. He has no marketing. He just keeps shipping. His name is Fabrice Bellard. Here is the story, because almost nobody outside the systems programming world knows what one man has built. Fabrice was born in 1972 in Grenoble, France. He studied at École Polytechnique, the top French engineering school. He never went to Silicon Valley. He never built a startup empire. He just wrote code. In 2000 he started a project called FFmpeg, an open-source multimedia framework for encoding, decoding, and streaming video. He was 28. The project did one thing nobody else had done well. It handled every video and audio format that existed, in one library, on every operating system. He led it himself for years. Today FFmpeg is the invisible engine of the internet. YouTube uses it. Netflix uses it. VLC uses it. Chrome and Firefox use parts of it. Every Android phone, every iPhone, every smart TV, every video editing tool you have ever touched runs FFmpeg somewhere underneath. If you have watched a video on a screen in the last 20 years, Fabrice's code processed it. He was not done. In 2003 he started QEMU, a machine emulator and virtualizer. He wrote it solo until version 0.7.1 in 2005. QEMU lets you run any operating system on any other operating system. It became the foundation of modern virtualization. KVM, the Linux kernel hypervisor, runs on top of QEMU. Every major cloud provider, AWS, Google Cloud, Microsoft Azure, IBM Cloud, runs virtual machines on infrastructure built around it. The Quick Emulator is the most cited piece of cloud infrastructure code on Earth. He kept going. In 2001 he won the International Obfuscated C Code Contest with a small C compiler that grew into TCC, the Tiny C Compiler. TCC can compile and boot a Linux kernel from source in under 15 seconds. In 2004 he calculated the most digits of pi ever computed at the time, using a personal desktop computer and an algorithm he derived himself called Bellard's formula. In 2011 he wrote a complete PC emulator in pure JavaScript that runs Linux in your browser, a project called JSLinux that engineers still cannot believe is real. In 2019 he released QuickJS, a small but complete JavaScript engine that fits where V8 cannot. In 2021 he released NNCP, a neural network based lossless data compressor that immediately took the lead on the Large Text Compression Benchmark. Then he turned his attention to large language models. He built TextSynth Server, a web server with a REST API for running LLMs locally. He released ts_zip and ts_sms, compression utilities that use language models to compress text and short messages at ratios traditional algorithms cannot reach. He released TSAC, a very low bitrate audio compression system. In December 2025 he released Micro QuickJS, a new JavaScript engine for microcontrollers, separate from QuickJS, designed for environments with almost no memory. Fabrice co-founded a telecom company called Amarisoft in 2012, where he serves as CTO. Amarisoft builds 4G and 5G base station software used by carriers and labs around the world. He has been running it for over a decade while continuing to ship personal projects from his own home page at bellard dot org He has no Twitter. He has no Instagram. He gives almost no interviews. His personal website is a flat list of projects with no styling, no fonts, no marketing copy. Just titles and links. A quiet French engineer who never moved to Silicon Valley wrote the code that quietly runs the internet. He is still shipping.

English
137
658
10.1K
589.4K
Junaid Loonat retweetledi
Owen Jones
Owen Jones@owenjonesjourno·
Israeli soldiers shot a 7 month old baby dead. They then lied about it. This is what the Israeli state does. They commit war crimes, lie about it, commit more war crimes, lie about it, in an endless cycle of murderous horror.
B'Tselem בצלם بتسيلم@btselem

New footage obtained by B’Tselem uncovers the moments when the Abu Haikal family was shot. Seven-month-old Sam Abu Haikal was killed in the shooting, and both his parents were injured. The footage clearly shows that the Israeli soldier fired at the car as it was slowing to a stop. The car was far from the soldiers and posed no danger to them whatsoever. Moments later, in another video obtained by B’Tselem, seven-month-old Sam’s father, Fahed, is seen just after his son was shot. Fahed is holding baby Sam in his arms, trying to stop the bleeding from his head with his hands, while Sam’s mother, Daniyah, who was also injured by the gunfire while holding her son, is seen sitting on the ground, next to the car. Last Friday, 5 June, an Israeli soldier fired at a Palestinian family driving home from a family visit, as they sat in their car in the Tel Rumeidah neighborhood in Hebron. The family was shot as the car was slowing to a stop at the soldier’s command. Sam, a seven‑month‑old baby who was in his mother’s arms in the back seat, was struck in the head and pronounced dead shortly afterward. Sam’s parents were also injured by the gunfire; his mother is still in the hospital. After the shooting, the soldier who fired and another soldier who was with him left the scene without checking the car or offering any assistance to the critically wounded baby or to his mother. In the past two and a half years, Israel has killed tens of thousands of children in Gaza and the West Bank. The immunity it gets from the international community has led to a reality where, under Israeli rule, Palestinian lives are entirely disposable – even a seven‑month‑old baby.

English
89
2.1K
4.1K
69.6K
Junaid Loonat retweetledi
John Scott-Railton
John Scott-Railton@jsrailton·
NEW: malware developers added nuclear & biological weapons text to to their spyware. Goal? To trigger LLM safety refusals... so that their spyware wouldn't be analyzed by an AI security scanner. Cleanest practical example I can think of for why over-indexing on first order safety alignment is risky. When closed (and open) models ship with aggressive refusals, they will be sprinkled with second-order blindspots that attackers will discover...and exploit. We are only in the earliest days of attackers leveraging these features, and it wouldn't surprise me if users systems that need to handle complex cybersecurity issues demand that models be less safety-blunted. In the weeds: @SocketSecurity's post also shows why intention matters in how you design a malware analysis pipeline to avoid prompt manipulation. H/T to colleagues that shared this with me socket.dev/blog/mini-shai…
John Scott-Railton tweet media
English
226
2.2K
12.6K
1.5M
Junaid Loonat retweetledi
Dino A. Dai Zovi
Dino A. Dai Zovi@dinodaizovi·
👉 "It not only produced a full chain exploit, but produced eight distinct exploits, at a cost of $15,700 in API credits—an average of about $2,000 per privilege escalation. The binding constraint to N-days is now just a few thousand dollars and API access, which expands the pool of capable N-day attackers dramatically."
Sean Heelan@seanhn

red.anthropic.com/2026/n-days/ Very nice

English
3
15
102
21.2K