android kernel 0-days/exploits @vigilant_labs / ctfs @cor_ctf and @eltctfbr / prev @osec_io
Lavender Town
Joined August 2020
- Tweets337
- Following881
- Followers1.6K
- Likes685
0xTen retweeted
We had a blast this weekend at @offensive_con 🔥- thank you to @Binary_Gecko for the awesome conference!
Congrats to our teammates @caueobici for his pwn2own success and @ryaagard for his talk on a 1-click Minecraft 0day😎
0xTen retweeted
Security researchers become trapped into an identity that they can’t escape, life seems purposeless, reality shifts and they realize they can’t bend like a tree in the wind. It turns out that intelligence isn’t the key to happiness.
For those that know. Chop wood, carry water.
👀
The Unprompted.au CFP is officially OPEN! If you are doing cool stuff with AI in offense, defense, or working on core AI tech (from frontier models to open source LLMs), we'd love to hear from you! Submit here: unprompted.au/
0xTen retweeted
There's few people that are more OG than @mdowd.
Full show (with timestamps)
youtu.be/NEDlOKHG8nY?si=Ajcv…
0xTen retweeted
this year's pwn2own isn't just interesting because there will be lots of entries with AI+human.
it is also interesting because
a) anthropic burned a ton of tokens on firefox, basically running claude in a loop until it found something for a month, probably exhausting whatever claude can one shot.
b) if someone submits full chain without much use of ai, it tells you one shotting plateaus and these models are bit like fuzzers than seasoned security reseachers.
c) even if they used an llm to find the bug, this tells us scaffolding/harnesss design, prompting, and the operator matters a lot.
0xTen retweeted
The way I look at it is:
1. Short term: as a VR expert you can understand model capabilities better than the labs themselves with a 'reasonable' spend. That's fun.
2. Medium term: you *will* have an edge vs teams spending huge amounts. You just need to find it. That's also fun.
0xTen retweeted
Our @hexacon_fr talk is out on Youtube now😎
youtu.be/C-52Gwmce3w
Follow the slides at: storage.googleapis.com/stati…
0xTen retweeted
We at CoR (+ @u1f383) had a great experience at @hexacon_fr this weekend
Met many skilled VR people, the venue was amazing, and the speaker gifts were simply🔥
Best offensive security conference we have seen so far - thanks again to the organizers for the opportunity!
