Yoav Alon retweetledi
Being an Israeli CEO since 2019 is basically very much like:
while True:
slack_team(f"Don't come to the office today due to: {random.choice(['pandemic', 'war', 'sirens', 'protests', 'shenanigans'])}")
English
Yoav Alon
630 posts
Yoav Alon
@yoavalon
CTO @orcasec | I tweet about fuzzing, bugs, and all that security jazz
Katılım Nisan 2014
381 Takip Edilen1.8K Takipçiler
Yoav Alon retweetledi
Joining the agentic vuln research hype, @EyalKraft and I did something. Unfortunately, it worked better than we hoped.
We spent a few weeks building an agentic loop that reverse-engineers and exploits kernel drivers. We already found 100+ exploitable drivers.
(link below)
English
Yoav Alon retweetledi
syzkaller/syzbot now has AI agentic framework for kernel bug fix generation, bug assessment, security triage, POC generation, etc:
groups.google.com/g/syzkaller/c/…
Includes set of tools to build kernels, navigate/edit source, test reproducers, etc.
Contributions/research are welcome.
English
Very cool! And with the advent of coding agents I believe annotations will come sooner rather than later
Marco Elver@maelver
Clang's -Wthread-safety, named "Context Analysis" for the Linux kernel finally merged after a year's worth of work: git.kernel.org/torvalds/c/092… docs.kernel.org/next/dev-tools… Currently opt-in; go and set 'CONTEXT_ANALYSIS := y' for any kernel code you're developing. Needs Clang 22+.
English
Wanted to replicate modded-nanogpt to try out a small idea to accelerate convergence. "Let's try runpod, it'll be simple." Big mistake.
Gimme back VMs, this isn't functional...
English
Yoav Alon retweetledi
Recorded some updated thoughts on agentic coding tools if someone is curious.
English
Yoav Alon retweetledi
@badlogicgames "includeCoAuthoredBy": false
In ~/.claude/settings.json
English
Yoav Alon retweetledi
🔍 Calling all **#CloudSecurity** Researchers!
🛡️ Lead Cloud Runtime Sec Eng @orcasec
🇵🇱 Hybrid (Poland/Warsaw)
🎯 Build & Research runtime engine (Go/C++/eBPF/AI)
👉 onthespotdev.com/positions/clou…
#InfosecJobs #Hiring
English
So far my experience with Gemini Code is … not amazing. It's really bad at actually doing edits. It's sometimes marinating for 5 minutes for a basic edit.
English
In the next version of Bun
`bun init` detects if you're using Cursor and adds a Cursor rule to guide the agent to use Bun's CLI & APIs
English
Yoav Alon retweetledi
🔭🐶 Exciting news: @datadoghq has announced our intend on donating our new Go auto-instrumentation framework to @opentelemetry.
Felix Geisendörfer@felixge
Manually instrumenting Go applications for observability has always been a time-consuming challenge. Solutions based on binary patching and eBPF have attempted to solve this, but they often come with undesirable tradeoffs. That’s why we built Orchestrion … 🧵
English
Yoav Alon retweetledi
Domato Lives! Today, we merged a WebGPU fuzzer written by @btiszka who used it to find several serious bugs in Chrome. Check it out at github.com/googleprojectz…. Potentially also interesting for other browser vendors working on their own WebGPU implementation ;)
English
🇵🇱 Polish Security Experts! 🛡️
We're hiring a Security Researcher for our R&D team. Work with cutting-edge tech (eBPF, Linux, K8s, Malware analysis) to fight cybercrime!
join.onthespotdev.com/runtime-securi…
RTs appreciated for reach! 🙏
#CloudSecurity #CybersecJobs #PolishTech
English
Yoav Alon retweetledi
Yoav Alon retweetledi
Yoav Alon retweetledi
עכשיו במהדורת RGB מיוחדת עם 16,777,216 עמודים:
פיל עם קרחת, את השיער לא חופף.
חלמתי על פיל בצבע #A8E04F
עברית
Yoav Alon retweetledi
1/ A world first reverse engineering analysis of AWS Session Tokens.
Prior to our research these tokens were a complete black box. Today, we are making it more of a glass box, by sharing code and tools to analyze and modify AWS Session Tokens.
@TalBeerySec/revealing-the-inner-structure-of-aws-session-tokens-a6c76469cba7" target="_blank" rel="nofollow noopener">medium.com/@TalBeerySec/r…
English
Yoav Alon retweetledi
Our security researcher @hash_kitten found one of the most critical exploit chains in the history of @assetnote. Affecting 40k+ instances of ServiceNow, we could execute arbitrary code, access all data without authentication. You can read our blog here: assetnote.io/resources/rese…
English
Yoav Alon retweetledi
