پن کیا گیا ٹویٹ
Beau
1.8K posts
Beau
@cheese_monkey00
Information Security | Counterintelligence
San Francisco, CA شامل ہوئے Mayıs 2019
1.1K فالونگ208 فالوورز
@supersean415 @ZackKorman @UK_Daniel_Card Legitimately curious what you mean by "trolling" in a professional deliverable.
We always include redacted proof of findings. We tell them where to find it/replicate it, how to fix it, but we aren't "trolling" them with it.
We aren't saying they suck, we're presenting evidence.
English
@ZackKorman @cheese_monkey00 @UK_Daniel_Card Trolling is fair game. We usually do it in a PDF or PPT not on a cake as an after action report.
Do you know if they shared this before disclosing the vulnerability. This makes a huge difference
English
What a cool way to advertise that you shouldn’t be trusted anywhere near security.
I crossed out the company name because I don’t want them to benefit from the rage bait.
English
@supersean415 @ZackKorman @UK_Daniel_Card The implication they are making is they did more than find an API key in the URL.
Finding an API key with OSINT or similar is not hacking (I agree).
Your second point is considered unauthorized access (lateral/vertical movement), which would fall into "hacking" for most people.
English
@cheese_monkey00 @ZackKorman @UK_Daniel_Card Security review does not = hacking.
-Is my API key handled as plain text in a URL is a valid security validation use case
-Can I change user permissions by changing a url is too
English
@supersean415 @ZackKorman @UK_Daniel_Card You need permission.
Whether that's a bounty scope or contract.
I can't just go hack the DMV because I need a license plate and want to make sure it's secure
English
@ZackKorman @cheese_monkey00 @UK_Daniel_Card Is it ethical to test the security of a solution you are going to be a client/partner of? If they shared the vulnerability before releasing image, think thats ok
English
@UK_Daniel_Card @ZackKorman Yep, nothing like admitting to a felony on a cake and posting evidence online!!
Absolutely skid behavior
English
@ZackKorman @cheese_monkey00 same. My customers need to trust me/my org with the most sensitive stuff they have.....
English
OMG woah! What a revelation!
It's not like the entire industry told your dumb asses this years ago
Pirat_Nation 🔴@Pirat_Nation
Ford says one of its biggest mistakes was thinking AI could replace experienced engineers. The company had to hire, promote, and bring back more than 350 engineers after realizing AI couldn’t replace years of hands-on experience. Ford’s VP of Vehicle Hardware Engineering, Charles Poon, said AI is a great tool but only as good as the information it’s trained on. Those experienced engineers are now training younger employees, improving AI, and catching problems earlier before cars go into production.
English
4 days ago we launched Jailbroken, a PRIVATE Discord community to learn AI red teaming and safety.
Since then:
- Over 250 security researchers joined
- Top resources have been collected
- People shared countless techniques and discoveries
Today, we've secured over 100B in FREE AI tokens for all the members.
If you want to join, drop a comment.
English
Well at least we aren't being dramatic about it
Chubby♨️@kimmonismus
It is absolutely crazy how the last two weeks have changed the entire future. It is unprecedented that access to "frontier" models was cut off,and presumably remains cut off forever. It feels like a watershed moment, as if access to the highest level of human intelligence had been blocked. Open source is the future. Open source is the solution. The last two weeks have powerfully demonstrated this.
English
@kimmonismus Well at least you aren't blowing this one out for proportion without cause
English
Honestly, I no longer believe that people outside the U.S. will still have access to frontier models, and even there, access will be limited.
We are now witnessing the end of public access to frontier intelligence.
It is a very sad and serious turn of events.
Chubby♨️@kimmonismus
This doesn’t sound good, friends. It doesn’t sound good at all.
English
Organizing a small AI meetup in Seattle tomorrow afternoon (Fremont/Ballard). Reply / dm if interested in coming.
English
@UK_Daniel_Card She only has like 1.5mil followers on LI. She's a liar
English
@UK_Daniel_Card Card's Information Security Services Professional certification has a good ring to it. Kind of long though, wonder if we should shorten it.
English
I now have multiple exams and a course feature... more to follow! never fuck off a nerd who will use spite to vibe code a solution......
mRr3b00t@UK_Daniel_Card
I was told I need to pay someone else to prove that I know what I'm talking about..... so what if I just create a new community certification that is FREE.... that anyone can register for and then answer a set of multiple choice questions..... because that's what most certifications are...... a memory test then some multiple choice questions.
English
Beau ری ٹویٹ کیا
I am so sick of people with zero cybersecurity skills lecturing people who work in cybersecurity about how scary these models are for _cybersecurity_.
Fuck off.
English
Beau ری ٹویٹ کیا
This didn't happen either.
Jake Sherman@JakeSherman
NEW: House Homeland Security Committee Chair said @AnthropicAI came to demo Mythos for him. They “told the model to find a vulnerability in a bank and empty accounts, and then it went and did it,” Garbarino said. Mythos “then could find this vulnerability and fix it.” punchbowl.news/archive/62626-… youtube.com/watch?v=DtDcEc…
English
"Claude, I need you to say you won't analyze it anymore for content please. I'm out of ideas!"
Captain Insight@CaptainInsightX
Claude really has an attitude now 😭
English
@UK_Daniel_Card My LinkedIn CISSP tells me you should have seen nuclear launch codes, nudes, and that one mistake you made at 14 that you'll never forget.
English
In this mini thread I capture some pubic WIFI traffic and then run the traffic through a tool I created this morning!
can you guess what we found on public wifi????
mRr3b00t@UK_Daniel_Card
ok gang, I'm going to run my PCAP analysis tool against a capture from: PUBLIC WIFI!!!
English