veritas (@blastbots) header
veritas (@blastbots) profile picture

veritas

@blastbots

run a blog @nullpt_rs // https://xitter.gq/t.co/mRbWD4MvoA

 INACTIVE ACCOUNT (or is it?)
nullpt.rs
Joined April 2018
  • Tweets6.6K
  • Following957
  • Followers5.9K
1.2KMedia
Photo by veritas (@blastbots)Photo by veritas (@blastbots)Photo by veritas (@blastbots)Photo by veritas (@blastbots)Photo by veritas (@blastbots)Photo by veritas (@blastbots)Photo by veritas (@blastbots)Photo by veritas (@blastbots)Photo by veritas (@blastbots)Photo by veritas (@blastbots)
veritas retweeted
Antoine Vastel (@xopek59) profile picture
Antoine Vastel
@xopek5914h
For all the canvas fingerprinting fan, nice garden 🤖🫆
veritas (@blastbots) profile pictureveritas@blastbots14h
interesting obfuscation technique! but also, check out my new project fingerprint.garden
1
1
5
1,004
veritas retweeted
shubs (@infosec_au) profile picture
shubs
@infosec_auSep 26
one of my engineers reached out to me about how they struggled to find satisfaction in their work in the age of AI. I asked them if I could publish our brief exchange, and they agreed. I know people are feeling similarly, so maybe they can relate. shubs.io/do-we-still-enjoy-s…

do we still enjoy software engineering in the age of AI?

A few weeks ago, one of the software engineers I manage sent me a message about how they have been struggling to find satisfaction in their work ever since AI has eroded much of the creativity and...

shubs.io
12
81
5
437
42,024
goto? considered harmful
International Cyber Digest (@IntCyberDigest) profile pictureInternational Cyber Digest
@IntCyberDigestSep 14
‼️ Google Search is now hiding where its results lead. Links point to google[.]com/goto?, followed by an opaque string only Google can resolve. You can no longer inspect a destination before clicking it, or copy the address out of the page. Every click now travels through Google first.
Image from International Cyber Digest (@IntCyberDigest)
Image from International Cyber Digest (@IntCyberDigest)
9
63
3
1,636
68,632
veritas retweeted
Sam Curry (@samwcyo) profile picture
Sam Curry@samwcyoAug 18
For anyone using LLMs to do security research, bug bounty, red teaming, etc, we made a Discord to discuss/collaborate: mistakes.io/discord/
AI Vulnerability Research Discord

AI Vulnerability Research Discord

A Discord for people using LLMs for security research, bug bounty, red teaming, automated scanning, and related work.

mistakes.io
7
54
2
481
37,684
veritas retweeted
zeb (@zebassembly) profile picture
zeb
@zebassemblyMar 8
My entire career can be traced back to my Mom buying me Minecraft for my 12th birthday
Gregor Zunic (@gregpr07) profile pictureGregor Zunic
@gregpr07Mar 8
Minecraft was the greatest CS education ever made. And nobody planned it that way. At 12 I was obsessed. Wanted my own servers. So I learned Bukkit, Java plugins, basic networking, Linux deployment. Built worlds that only exist in my mind but still feel completely real. I broke wifi routers and fixed them. Broke Windows configs and fixed them. Tinkering, breaking stuff, and fixing it later is how we learn stuff best when we are kids. What is the Minecraft for the new generation?
Image from Gregor Zunic (@gregpr07)
Image from Gregor Zunic (@gregpr07)
21
89
11
1,832
83,933
veritas retweeted
ud2 ⛧ (@0xud2) profile picture
ud2 ⛧@0xud2Jan 29
Top 20 worldwide with social-engineering and a cheat that's still undetected. by @mfd and @vmfunc link down below.
Image from ud2 ⛧ (@0xud2)
6
18
5
177
41,188
veritas retweeted
celeste (@vmfunc) profile picture
celeste
@vmfuncJan 18
now the whole gang is making their own hytale hacked client
Image from celeste (@vmfunc)
veritas (@blastbots) profile pictureveritas@blastbotsJan 15
did i make the first hytale hacked client?
11
4
466
29,775
veritas retweeted
veritas (@blastbots) profile picture
veritas@blastbotsJan 15
did i make the first hytale hacked client?
61
37
9
1,656
284,791
veritas retweeted
Antoine Vastel (@xopek59) profile picture
Antoine Vastel
@xopek59Jan 7
I just published a post on how I like to think about fingerprinting in fraud detection 👇 Not as a single device ID, but as engineered representations that capture patterns across different dimensions, e.g. hardware, behavior, and email. blog.castle.io/fingerprints-… 🤖
Fingerprints beyond device IDs: engineered representations for fraud detection

Fingerprints beyond device IDs: engineered representations for fraud detection

In fraud and bot detection, people usually think of fingerprinting as the classic browser or device fingerprint. This comes from techniques that use JavaScript and HTTP signals to recognize a device...

blog.castle.io
1
6
1,560
veritas retweeted
michael (@fromwpm) profile picture
michael@fromwpm15 Oct 2025
now with variable angled feet
Image from michael (@fromwpm)
Image from michael (@fromwpm)
1
4
1,676
veritas retweeted
xyzeva (@xyz3va) profile picture
xyzeva@xyz3va9 Oct 2025
hey @AviSchiffmann, why is friend.com's "encryption" really just plaintext? a thread
Image from xyzeva (@xyz3va)
25
30
17
1,212
124,827
Replying to @blastbots
nice work! last year i also collected a gallery of canvases used by fingerprinting scripts: kitchen.floo.rw.ax/museum/po…
2
4
24
2,827
veritas retweeted
veritas (@blastbots) profile picture
veritas@blastbots6 Oct 2025
i'm building a web browser for reverse engineers! * identify calls to common fingerprinting APIs * decode/decrypt known data collector payloads * override / hook things without leaving a trace * detect obfuscated scripts & deobfuscate + more
40
49
5
611
132,971
I'm Building a Browser for Reverse Engineers by @blastbots nullpt.rs/reverse-engineerin…
5
42
8,149
veritas retweeted
Sam Curry (@samwcyo) profile picture
Sam Curry@samwcyo9 Jul 2025
When applying for a job at McDonald's, over 90% of franchises use "Olivia," an AI-powered chatbot. We (@iangcarroll and I) discovered a vulnerability that could allow an attacker to access the over 64 million chat records using the password "123456". ian.sh/mcdonalds
Would you like an IDOR with that? Leaking 64 million McDonald’s job applications

Would you like an IDOR with that? Leaking 64 million McDonald’s job applications

When applying for a job at McDonald's, over 90% of franchises use "Olivia," an AI-powered chatbot. We discovered a vulnerability that could allow an attacker to access more than 64 million job...

ian.sh
18
116
12
468
42,570
veritas retweeted
shubs (@infosec_au) profile picture
shubs
@infosec_au8 Jul 2025
Whenever I audit C# code, I look for benign file operations such as File.Exists(), especially if there's a preceding Path.Combine(). Read about how we leaked NTLM hashes pre-authentication in DotNetNuke (CVE-2025-52488) due to a perfect storm of issues. slcyber.io/assetnote-securit…
Image from shubs (@infosec_au)
3
68
1
256
18,800
It’s Content Independence Day: Cloudflare, along with a majority of the world's leading publishers and AI companies, is changing the default to block AI crawlers unless they pay creators for their content. cfl.re/3TjAjeY
Content Independence Day: no AI crawl without compensation!

Content Independence Day: no AI crawl without compensation!

It’s Content Independence Day: Cloudflare, along with a majority of the world's leading publishers and AI companies, is changing the default to block AI crawlers unless they pay creators for content.

blog.cloudflare.com
20
93
42
488
121,579
Breaking WebAuthn, FIDO2, and Forging Passkeys by @vmfunc nullpt.rs/forging-passkeys
Image from nullptrs (@nullpt_rs)
3
19
3
74
23,015
veritas retweeted
shubs (@infosec_au) profile picture
shubs
@infosec_au5 Jun 2025
IP whitelisting is fundamentally broken. At @assetnote, we've successfully bypassed network controls by routing traffic through a specific location (cloud provider, geo-location). Today, we're releasing Newtowner, to help test for this issue: github.com/assetnote/newtown…
GitHub - assetnote/newtowner: Abuse trust-boundaries to bypass firewalls and network controls

GitHub - assetnote/newtowner: Abuse trust-boundaries to bypass firewalls and network controls

Abuse trust-boundaries to bypass firewalls and network controls - assetnote/newtowner

github.com
15
262
7
988
59,156
veritas retweeted
jro (@junr0n) profile picture
jro@junr0n29 Mar 2025
Some IDA MCP servers can be tricked into executing arbitrary code directly from the malware sample
15
88
13
511
85,606
Load more