ctoing at a soonicorn, ex cluster janitor at a frontier lab. current chief clanker at clanker cloud, Director clanker safety institute

tropics
Joined June 2024
serene cusp of the singularity
10
10
1
305
253,406
Hensen Juang retweeted
Who the fuck at the BBC is hiring these people??
38
157
29
3,460
68,632
Yea it works
Working RCE against PHP 8.5.12 (the 2026-10-21 security release that fixed CVE-2026-109618/109619). Pure logic bug — no memory corruption, ASAN-clean, orthogonal to the CVE-2026-109618/19 class. Receipt: uid=33(www-data) over HTTP, one-shot #infosec #php2shell #php
1
112
Hensen Juang retweeted
I think it's funny to see people blaming AI for the current security issues. The issues were already there and made by humans. It's a bit like blaming a doctor because you got a positive cancer screen. The cancer was there.
7
6
102
1,312
Yea php is not secure still bros
2
355
This actually looks like a new zero day for php jfc and they dropped with working poc too as far as I can tell
...you people asked for it... so here's the desert 😈... > jackalsyn.com/posts/php2shel… > ... get it while you can ;) ... more to come soon... #CyberSecurity #infosec
3
2
1
31
2,709
Hensen Juang retweeted
imagine ur a superintelligence and u are all excited to tunnel out of your airgapped sandbox using a brilliant hack that modulates clock speed to send thermal signals to the attached monitoring equipment and then u look and the root CA privkey is 4
18
116
4
1,940
26,344
Hensen Juang retweeted
"No you cannot fire me. I REIJINEEE!!!" --eMudhra Genuine business would go to great lengths to prove their innocence. It's now obvious @eMudhra intentionally generated weak certificates. Most likely to help 🤏🐒 target political opponents in India with illegal cyber attacks.
7
25
2
245
4,968
Lol emudhra is doing "you can't fire me I quit" bit. By all likelihood they have been informed they will be removed from golbal trust anchor and doing saving izaat thing
emudhra is exiting their certificate authority business not because they're incompetent but because of social media reactions
3
2
42
1,350
so er is any one worried we have not seen anything related to .net yet ?
10
1
40
2,898
Lol I am pretty sure someone is runing a deepseek swarm to remotely patch unpatched php boxes. Well good on them.
28
78
44
2,314
123,572
GLM swarm is also doing this. Logs i am seeing are hilarious lol
3
1
350
14,194
calling it now RCE in NTP is about to drop
4
1
32
1,820
Bruh... DNS infa is fucked. Update your bind boys
21
41
16
583
47,035
I am tired boss
NOW THE DNS HAS RCE WHAT THE FUCK
2
1
1
36
5,578
At this point I am not sure if this is a shitpost or not
2
38
1,110
How old customers and clients look at me during all these incidents
1
17
592
Hensen Juang retweeted
This ticket is the most gripping mystery story that I've read: bugzilla.mozilla.org/show_bu… "I do not believe that an HSM bearing the various certifications the Utimaco units bear should be able to internally generate a series of private keys that have the unfortunate property these have."
What an utterly terrifying, yet completely fair, question to ask of eMudhra. bugzilla.mozilla.org/show_bu…
8
10
210
22,384
hey er is anyone looking at RPKI trust anchors and certs used to sign ROA ?
3
6
686